Edit tour

Windows Analysis Report
https://allmylinkswebgt.z13.web.core.windows.net/index.html

Overview

General Information

Sample URL:	https://allmylinkswebgt.z13.web.core.windows.net/index.html
Analysis ID:	1428973
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,7825138692145901741,18011894296286758546,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://allmylinkswebgt.z13.web.core.windows.net/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://allmylinkswebgt.z13.web.core.windows.net/index.html

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://allmylinkswebgt.z13.web.core.windows.net/index.html

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://allmylinkswebgt.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://allmylinkswebgt.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.js HTTP/1.1Host: d2fuc4clr7gvcn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=661fa13b10c5504076cbd30e&h[resource]=https%3A%2F%2Fallmylinkswebgt.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1713564138691 HTTP/1.1Host: track.gaug.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://allmylinkswebgt.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://allmylinkswebgt.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=661fa13b10c5504076cbd30e&h[resource]=https%3A%2F%2Fallmylinkswebgt.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1713564138691 HTTP/1.1Host: track.gaug.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: stackpath.bootstrapcdn.com

Source: chromecache_64.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_64.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_67.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Source: chromecache_67.2.dr	String found in binary or memory: https://d2fuc4clr7gvcn.cloudfront.net/track.js
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_67.2.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_71.2.dr, chromecache_62.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_71.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_71.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_67.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_67.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Source: chromecache_67.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_67.2.dr	String found in binary or memory: https://track.gaug.es/track.gif

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/48@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,7825138692145901741,18011894296286758546,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://allmylinkswebgt.z13.web.core.windows.net/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,7825138692145901741,18011894296286758546,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://allmylinkswebgt.z13.web.core.windows.net/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
d2fuc4clr7gvcn.cloudfront.net	108.138.82.231	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	173.194.219.103	true	false	high
track.gaug.es	52.72.129.147	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://d2fuc4clr7gvcn.cloudfront.net/track.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css	false	high
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_64.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_71.2.dr	false	high
https://getbootstrap.com/)	chromecache_71.2.dr, chromecache_62.2.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_71.2.dr, chromecache_62.2.dr	false	high
https://track.gaug.es/track.gif	chromecache_67.2.dr	false	unknown
http://fontawesome.io/license	chromecache_64.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
108.138.82.231	d2fuc4clr7gvcn.cloudfront.net	United States	16509	AMAZON-02US	false
173.194.219.103	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.161.134.69	unknown	United States	14618	AMAZON-AESUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.72.129.147	track.gaug.es	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428973
Start date and time:	2024-04-20 00:01:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://allmylinkswebgt.z13.web.core.windows.net/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@16/48@14/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 74.125.136.139, 74.125.136.113, 74.125.136.102, 74.125.136.100, 74.125.136.138, 74.125.136.101, 142.250.105.84, 34.104.35.123, 20.209.226.68, 142.251.15.95, 108.177.122.94, 20.114.59.183, 72.21.81.240, 192.229.211.108, 13.95.31.18, 52.165.164.15, 142.250.9.94
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://allmylinkswebgt.z13.web.core.windows.net/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	dropped
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Category:	downloaded
Size (bytes):	66624
Entropy (8bit):	7.996443365254666
Encrypted:	true
SSDEEP:	1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
MD5:	DB812D8A70A4E88E888744C1C9A27E89
SHA1:	638C652D623280A58144F93E7B552C66D1667A11
SHA-256:	FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
SHA-512:	17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
Preview:	wOF2.......@...................................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=\|'..0..T\|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	downloaded
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/fuji.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	downloaded
Size (bytes):	84355
Entropy (8bit):	5.370892371249065
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr
MD5:	7F9FB969CE353C5D77707836391EB28D
SHA1:	62C4042E9EBC691A5372D653B424512A561D1670
SHA-256:	2051D61446D4DBFFB03727031022A08C84528AB44D203A7669C101E5FBDD5515
SHA-512:	7A027F63EDB63FD350F5A2325428745423AC7F27729FC78D9AA072FB2D829C91BE7E9448C57312EA36D63FCB552A9D23A7E34EE67F16B4C5009CD9C6A092A2E3
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	dropped
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	7.973973264994348
Encrypted:	false
SSDEEP:	192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK
MD5:	AF4D371A10271DAFEB343F1EACE762BC
SHA1:	6D11D743BC3CFB169D70BC86450F18351DC1A905
SHA-256:	60BF0ABA6526436F3930C58C12047687FBB6BFF4DD180CCE4613458ED3439EA2
SHA-512:	98E1D4804A31F0EC40307BB02D7AF0E25E1A01F2D0F69676CD55F97F64A8D50ECFD5BE05525956C4A80BF0D98810BADBB08ACB2927CD78963BCDDE9F96E25BA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
Preview:	wOF2..............=....?.............................`..T.......6..6.$..h. ..Z....Z0.".8...W..b3..L...P..^.....ZEX..w.a.R...?..~......C`.3f.0.g.j..8"6B.Y.\|.h....%.Y%i.L2..L.'...Ahf.v.......Z.FRQ@B..E.....z.H...6....on..n....3....jz?.c....{J.Yd..T.......o.N../.6..%.@..;..'.N.?......9...S..Ok...."N.I..Zh..tY!._..t.......I....e..R.\|.......Y ...%.BZ..(..A9.T...y.....Ts_n:......o2I[...j....z.x. ....[.a.j^..j..IH....D....g...X\..B..s.a.`...,.l.)a-k@7Pq.,.......C!.\|...\|H.....7S..&...B.H..h..i...0....~..B..l..n.rE.......E..5.XL.d:.cuy..P.l...\|<....B.Qx..%@=..............[..\|P.;f.....z.o...o.Z......3N...}..yv.KOM`...w.V<.................7n..`...H.s...f.{:i....R. .a.&.X..1!....&Y..S..tLY..#.h...!.Fy....91;qi4.+2.?.kBj2;.+...@.MH..^..0&.8...SM.0V....%...@......lHO...]....Z......Je~...:.%..K#z..!A./.51.-..1.ta..8k...c]."."b.B..$+..,..#....x.H..Y...k.I.6....O.AW.....A.;..7.5E..t..*m.P..M.6l..g(0pk(....u.Y...&2.G..d.kE..2.8<.".Mo.....p\[S...Uh+A%.F.][P......r

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators
Category:	downloaded
Size (bytes):	5486
Entropy (8bit):	5.733542632542102
Encrypted:	false
SSDEEP:	96:cNLTsiCQLE/GAWAYROIuij6gtidCw8h8tV1cjNQfI8ujZ:yLThCQYGAWNOvijLgFtV1cNQfI8ujZ
MD5:	89469B268F762060533CEE36EB230A08
SHA1:	91EC01DF32B9100DAC3B29FCBF5958483559F4BA
SHA-256:	00FD431C8EA2EEAD1A5A0C462A554E641FD4D503A523C45D6C08992A63D955D3
SHA-512:	B318B88B3EFFE9FBCC4A479186535F66886920A6501D9C15AB2C8D234D28F4CE6B9CAD74BFE52B68D14FD5332C232707212024678FB8F49C35E3DA086D02705C
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/index.html
Preview:	<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <meta name="description" content="author">.. <title>Officials_Windows..........</title>... <link rel="preconnect" href="https://fonts.gstatic.com/">... <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css" integrity="sha384-JcKb8q3iqJ61gNV9KGb8thSsNjpSL0n8PARn9HuZOnIxN0hoP+VmmDGMN5t9UJ0Z" crossorigin="anonymous">.. <link href="mystyle.css" rel="stylesheet">.. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css">...<link href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">........ <script type="text/javascript">.. var ph

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4666), with no line terminators
Category:	downloaded
Size (bytes):	4666
Entropy (8bit):	5.302868549458744
Encrypted:	false
SSDEEP:	96:y4i2cLKIzsS58MYztKheFSd6ZAnKl9k8hhJVSafdIzaOP5wtZ91yfqQf4tlvKHS5:C2cLPzsS58MYztKhh6Zt9hP2zRP5wtZZ
MD5:	876B05F6044B21D9E1A1E2C53BA847C3
SHA1:	8938C32F281207D167DE1F51EA6CF60C33CC1B4C
SHA-256:	F5342B436E889CA2184C1B322FE2A631412D85B445DECB8F1B6F020329D7178D
SHA-512:	FEA8AD9FA842D935A94BFB34E9B0DFC40A7543A32C4B214937FD1AC38AE29420C5943E3D0E99613ACC10A39A0BECF32EE50B67071C15910A40413808698F0967
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/itsuki.js
Preview:	var _0x1143c3=_0x44f8;function _0x44f8(_0x10494b,_0x4c1d23){var _0x482497=_0x4824();return _0x44f8=function(_0x44f80c,_0x113a1b){_0x44f80c=_0x44f80c-0xe4;var _0x42e1c0=_0x482497[_0x44f80c];return _0x42e1c0;},_0x44f8(_0x10494b,_0x4c1d23);}(function(_0x4304c4,_0x12ca27){var _0x59f05d=_0x44f8,_0x4bce22=_0x4304c4();while(!![]){try{var _0x2ca6f6=parseInt(_0x59f05d(0xf9))/0x1+parseInt(_0x59f05d(0x105))/0x2+-parseInt(_0x59f05d(0x103))/0x3(-parseInt(_0x59f05d(0x100))/0x4)+parseInt(_0x59f05d(0xfc))/0x5+-parseInt(_0x59f05d(0xf1))/0x6(-parseInt(_0x59f05d(0x104))/0x7)+parseInt(_0x59f05d(0x108))/0x8(parseInt(_0x59f05d(0xf7))/0x9)+parseInt(_0x59f05d(0x10b))/0xa(-parseInt(_0x59f05d(0xf4))/0xb);if(_0x2ca6f6===_0x12ca27)break;else _0x4bce22['push'](_0x4bce22['shift']());}catch(_0x4c259d){_0x4bce22['push'](_0x4bce22['shift']());}}}(_0x4824,0x4f6fe));function _0x6650(){var _0x2e771b=_0x44f8,_0x56d10a=[_0x2e771b(0x10e),_0x2e771b(0xef),'42chsVrk',_0x2e771b(0xe7),_0x2e771b(0xeb),'9887501weJLZl','40bkqHT

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	114283
Entropy (8bit):	7.254845925020668
Encrypted:	false
SSDEEP:	1536:Bym/tGBkwZi95piznb3+XazaCsMZZ5N7M43wZZMyy2l9V7tBlPFKuanNA:BvAkw2QbusaCjxNoEoSyy2lT7tUu0NA
MD5:	E9BCD8FA1AC0DA5231A30C9F2952682B
SHA1:	6082AFF7E3627F6BEA6E44C41E123A3A512355DE
SHA-256:	89CA019A76F84336D2903B88D7F45EFF070B359A35FF3C06DA3668212F76FFA1
SHA-512:	676085969C4F7167BD1CDAD74EC9EB2DBC0DF89D72859134C724EA0C63924148F99A1CD7BE567847B0BEF81C6EADCE13643C8E1284A7ED19E26FD4FD6FBC77E9
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/Safeviews.mp3:2f7510864f7525:0
Preview:	ID3......#TSSE.......Lavf58.29.100...............................................Info.......u..H\|............."$&),.1468;>@CEGJMPRUWY\_adgiknqsvx{}......................................................Lavc58.54............$.@......H\|........................................................................................................................................................................................................................................d...-N-.`5.... .......@..4.....%b5a..#G.u?...........Dp...iH`....0./.....yR.`..N7...B.....i....f..=...H..18.Hh..'..-hY.4......C...Q,$...%..Y.=.C......>...JG.....0h7.......Y..'..@...'.. i!.Cx.H<X...!......9.9).qs...@.9t.....: pad..!...4......`H....Q..bf1.+8........x.\:.R....^.i.....\|...0..,..H......39N.A.g8...r.H....H_v;..2.z...`,.5-`FU...)....\|H0...&.....H.q.}......%.C..8m..=FV2.........dT...E..Y..... .............4....%..y.B.w.yZ.=......<...L.p..MT..L.....j*h..`.P.!.....$T...x3.$......7...Y....>v.l.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/rdwbs.png
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/kane.png
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	3.971495148462712
Encrypted:	false
SSDEEP:	6:C/sULnipM878mgO9lQe8tbwN9zIi28hCRoPTZVhodQkq+dTe8Hod0Cw:S1ipM8YuQe8tuzo8hSoRoNU8HoE
MD5:	8D78510A23D26CA8456663A060C1AB7C
SHA1:	00F1AC87D12DE82D8E4978A3B0637EE8097D4EAA
SHA-256:	AC9D36E334AA53D47A22042AE131D2D9D43B4DE48B63DF6B6DA8247B9BAD0AE2
SHA-512:	C61E3A2E4E8C9762AABFD6B999D769F5E14EADF286EB8E810E413B5A00AC9380B340B65E23C6F81985C71B0438AB363F25CDAC7376CEC5CFE796753D91F46CD6
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/ado.js
Preview:	.. $(document).ready(function() {.. var audioElement = document.createElement('audio');.. audioElement.setAttribute('src', 'Safeviews.mp3');.. .. audioElement.addEventListener('ended', function() {.. this.play();.. }, false);.. .. .. $('#map').click(function() {.. audioElement.play();.. .. });.. .. });

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14226
Entropy (8bit):	5.362443636977356
Encrypted:	false
SSDEEP:	192:x3pao3pbA5KoA5cn5yon50ORoOZN5BoN5BE5hoE5hr5Yor5SC5MoC5Ox5wox5bpu:x3t3RIf5WpSaFR+rE4PFzpy
MD5:	DCE36A48BCF330832152E582D29373B8
SHA1:	CD44276B28CF6BE734F61E45644ED6EA0AD08E6E
SHA-256:	3F6E8EFB65DFF0486271D787D60BE7D84387C203BEBD36159794E6E2C28C31F3
SHA-512:	9AEB715E29544546108257435DB1163BAE92D0E0FDD52B46EF1136D48E7A75352B82056EF6CFA35E04B64F8F0788174CB2B75B4493AF3D3FF87B055327E0F295
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	downloaded
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/kyoto.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5152), with no line terminators
Category:	downloaded
Size (bytes):	5152
Entropy (8bit):	5.207643243201636
Encrypted:	false
SSDEEP:	96:nn3J7DcXKKxWdYRJ8cEl7SH++uNWL4anUf50Y5jBnTjNj/3Jx1t:n3Jn7KxWWJOI++uNOTnUf5n5jlTd/tt
MD5:	25DBE1435EC57843C4AB2CECAFBD04A9
SHA1:	1DAED29EB389B328254978B4A6386C3CB38B0D9C
SHA-256:	EC536798BA63ED167F3620C2081486ECF9254E3CF97AEF8052CFC12B2D1BFB84
SHA-512:	97DF01BA14C4234DDF060A86AFC7255664D6C475DAF957D936833BFCA5BFA02048FBA68B65E05E43082105DC693D11043150BF24FED11DC25FF62419245BE3F7
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/haruto.js
Preview:	(function(_0x4c076a,_0x27deb0){var _0x3a142c=_0x4237,_0x2946ae=_0x4c076a();while(!![]){try{var _0x33d82b=-parseInt(_0x3a142c(0xc9))/0x1+parseInt(_0x3a142c(0xe8))/0x2+parseInt(_0x3a142c(0xd1))/0x3(-parseInt(_0x3a142c(0xd4))/0x4)+-parseInt(_0x3a142c(0xde))/0x5+-parseInt(_0x3a142c(0xca))/0x6(parseInt(_0x3a142c(0xe0))/0x7)+parseInt(_0x3a142c(0xcd))/0x8+-parseInt(_0x3a142c(0xe3))/0x9*(-parseInt(_0x3a142c(0xc8))/0xa);if(_0x33d82b===_0x27deb0)break;else _0x2946ae['push'](_0x2946ae['shift']());}catch(_0x2dbbe0){_0x2946ae['push'](_0x2946ae['shift']());}}}(_0x3453,0xbdd81));function _0x3bbf(_0x657311,_0x1d6100){var _0x332eb8=_0x5933();return _0x3bbf=function(_0x1b171c,_0x1e94ad){_0x1b171c=_0x1b171c-0xbf;var _0x108772=_0x332eb8[_0x1b171c];return _0x108772;},_0x3bbf(_0x657311,_0x1d6100);}var _0x281415=_0x3bbf;function _0x4237(_0x532717,_0x3b9438){var _0x34534a=_0x3453();return _0x4237=function(_0x4237a5,_0x5713f4){_0x4237a5=_0x4237a5-0xc3;var _0x219fac=_0x34534a[_0x4237a5];return _0x219fac;},_0x

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3829), with no line terminators
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	5.148341057398745
Encrypted:	false
SSDEEP:	48:kiVcqIyGggolrX2UQe0DzGbExQgpxJwOeOBuHgwLHACBhASVUF/IF/NUF/fF/fFD:Q+2wytZCvLzn9OYBMtEux
MD5:	B7E42972220B534E2E32B38C3876572D
SHA1:	76B4384936878AE8656F3DF843BEB7A3D88FD86B
SHA-256:	DF2698E6CF74ED890AFA92DA10051F880DF2CE0B3257B73C5D9AE2F6BEA82D3C
SHA-512:	FDE037E2E1B4FAF726016C70A89E07F268E46A457A5636813AA8D032CFF4528690BB9CF24A7A4EAE37134F65F632987BB5C94998DFFC0D06BDE181A8968B9B0F
Malicious:	false
Reputation:	low
URL:	https://d2fuc4clr7gvcn.cloudfront.net/track.js
Preview:	var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365,j=d*10;if(!this.getCookie('_gauges_unique_hour')){this.setCookie('_gauges_unique_hour',1,b)}if(!this.getCookie('_gauges_unique_day')){this.setCookie('_gauges_unique_day',1,f)}if(!this.getCookie('_gauges_unique_month')){this.setCookie('_gauges_unique_month',1,c)}if(!this.getCookie('_gauges_unique_year')){this.setCookie('_gauges_unique_year',1,d)}this.setCookie('_gauges_unique',1,d)}},push:function(a){var b=a.shift();if(b=='track'){_gauges.track()}},url:function(){var a,b,f,c=this.$('gauges-tracker');if(c){b=c.getAttribute('data-site-id');f=c.getAttribute('data-track-path');if(!f){f=c.src.replace('/track.js','/track.gif')}a=String(f);a+="?h[site_id]="+b;a+="&h[resource]="+this.resource();a+="&h[referrer]="+this.referrer();a+="&h[title]=

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.070327967894178
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWOGquVUdDR2p02ZVINgE:hax0rKRHkhzRH/Un2i2GprK5YWOGTyD1
MD5:	41F44A66301A0F457DAF01ED6618EEB2
SHA1:	329FD2504AD42C9085EC1D9F3E76181924A107F2
SHA-256:	470D5F3099BDEFCE65364F4AFE408786CBE3CC154B3646CEE2E97AC6F76EA3E1
SHA-512:	CB0EA8316F28C37BE6031FF0FC5A7B9F82B01A070ABEAB899A3B280C3679C12D22124EA4FCFEE57394A3165A02E225859DFD643179F0C14DFAB3B7BCEFD5F073
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/favicon.ico
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 4f0a40e9-201e-0015-3ba5-928748000000</li><li>TimeStamp : 2024-04-19T22:02:22.2542886Z</li></ul></p></body></html>

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	4.796257132249528
Encrypted:	false
SSDEEP:	192:bSIKTbzp5qU9XdY5S0+3FUrJ0lCeyDCZC5sSzqmSzq5xrhXQSzqmSzqSZ1KAM+Kq:mICvQS0Ft1i0xincAMnc5Mu
MD5:	266ED7D70D0F4DA16E451436E63BBED7
SHA1:	739CB196D6B375DE0B849ED84E66BE0D3592FA24
SHA-256:	F3D992A5242DB0A9501E8A54E3956227FB8B85C87D1347ADAD72C23B55E5D046
SHA-512:	67970A7FD76960C981A4C59A93B1F69FB9CB57013E5B0CB1F33F50E126B57F0151FA2B19959AA694B75FE2C24101C3D305A2C2CD34266A33BC69DC3DAB54028C
Malicious:	false
Reputation:	low
URL:	https://allmylinkswebgt.z13.web.core.windows.net/mystyle.css
Preview:	body{..font-family: 'Poppins', sans-serif !important;..}...main_bg{...position: fixed;.. left: 0px;.. top: -3px;.. width: 100%;.. cursor: pointer;..}...main_bg img{..background-repeat: no-repeat;.. background-position: center center;.. background-size: cover;.. width: 100%;...}...popup1{...position: absolute;...width: 900px;...display: none;.. height: 506px;.. top: 14%;.. left: 20%;.. border: 1px solid #aaa;.. background: #ffffff;.. -webkit-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. -moz-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);..}...popup1_header{...padding:5px 10px;..}...popup1 .logo-img img{..width: 26px;..}...popup1 .logo-name{... font-size: 18px;.. font-weight: 500;.. margin-left: 7px;..}...minize ul{list-style-type: none;}...minize ul li{float: left;display: inline-block;padding-left: 10px;padding-right: 10px;}...gray_line{...width: 100%;.. h

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2024 00:02:06.270382881 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 20, 2024 00:02:15.871774912 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 20, 2024 00:02:16.583271980 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583317995 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.583411932 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583657980 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583698988 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.583755970 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583779097 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583796978 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.583952904 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.583972931 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.806531906 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.806736946 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.806777954 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.808229923 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.808301926 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.808303118 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.809353113 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.809452057 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.809520006 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.809586048 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.811014891 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.811084032 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.812999010 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.813019037 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.813246012 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.813328981 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.813532114 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.813541889 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:16.852819920 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:16.864434004 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.062676907 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062745094 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062788010 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062791109 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.062815905 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062854052 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.062861919 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062912941 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.062946081 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.062953949 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063246012 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063285112 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.063292027 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063333035 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063369989 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.063374996 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063388109 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.063421965 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.063436985 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064235926 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064284086 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064284086 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.064296007 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064336061 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.064344883 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064400911 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.064439058 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.064446926 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065184116 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065222979 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065227985 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.065236092 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065285921 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.065293074 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065340996 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.065399885 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.067397118 CEST	49743	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.067416906 CEST	443	49743	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109544039 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109612942 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109657049 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.109661102 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109677076 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109719038 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.109734058 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109798908 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109838963 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.109847069 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109888077 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.109926939 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.109935045 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110608101 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110649109 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.110656977 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110706091 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110747099 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.110754013 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110765934 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.110800028 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.110810995 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111546040 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111593008 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.111596107 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111607075 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111654997 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.111663103 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111718893 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.111761093 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.111769915 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.112504005 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.112543106 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.112546921 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.112559080 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.112597942 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.112606049 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113323927 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113367081 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.113373995 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113432884 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113471985 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.113478899 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113523960 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113569021 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113581896 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.113590002 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.113625050 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.114315033 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.114437103 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.114479065 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.114481926 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.114490032 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.114526033 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.114536047 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.115227938 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.115268946 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.115276098 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.115293026 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.115324020 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.115336895 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.116271973 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.116322041 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.116334915 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.159348011 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.216295004 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.216358900 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.216389894 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.216433048 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.216438055 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.216451883 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.216480970 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.216949940 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217027903 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217057943 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.217071056 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217082977 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.217518091 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217573881 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.217582941 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217616081 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.217716932 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.217772007 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.218981028 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.219037056 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.219113111 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.219162941 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.219707012 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.219757080 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.219835997 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.219887018 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.220861912 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.220922947 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.220971107 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.221019030 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.221694946 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.221743107 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.221760988 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.221812010 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.222796917 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.222853899 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.222861052 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.222882032 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.222934008 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.264647007 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.264703989 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.319653034 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.319706917 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.321201086 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.321255922 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.321602106 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.321652889 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.321680069 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.321736097 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.322556973 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.322607994 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.322886944 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.322933912 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.322959900 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.322978973 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.323024988 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.323034048 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.323070049 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.323076963 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.323117018 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.323162079 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.324400902 CEST	49742	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.324418068 CEST	443	49742	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.549046040 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.549068928 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.549140930 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.556957960 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.556982994 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.658998013 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.659041882 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.659096956 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.659936905 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.659959078 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.660279989 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.660325050 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.660381079 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.660607100 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.660623074 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.773077011 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.774583101 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.774622917 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.775098085 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.775826931 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.775917053 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.776129007 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:17.820127964 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:17.885795116 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.887559891 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.887578964 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.889136076 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.889259100 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.890502930 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.890580893 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.890818119 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.890825033 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:17.915735006 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.916027069 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.916049957 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.917629004 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.917778015 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.922877073 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.922966957 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:17.942043066 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:17.971966982 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:17.971977949 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:18.019961119 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:18.127000093 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127146006 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127275944 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127324104 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.127373934 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127475977 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127501965 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.127517939 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127628088 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127716064 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127737999 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.127752066 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127789021 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.127870083 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.127957106 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128005981 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.128029108 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128142118 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.128144979 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128170967 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128328085 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128417015 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128457069 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.128469944 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128576994 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128607035 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.128618956 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.128652096 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.129023075 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129117012 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129204035 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129231930 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.129242897 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129275084 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.129793882 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129883051 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.129987001 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130028009 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.130043983 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130141973 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130181074 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.130192995 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130486965 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.130500078 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130820036 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.130831003 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.130958080 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131045103 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131133080 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131177902 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.131191015 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131227016 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.131736040 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131822109 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131867886 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.131880045 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.131978989 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132069111 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132129908 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.132143974 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132173061 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.132592916 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132683039 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132721901 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.132734060 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132880926 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.132915020 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.133187056 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.136986971 CEST	49750	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:18.137013912 CEST	443	49750	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:18.141385078 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141499996 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141602039 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141675949 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.141686916 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141714096 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141889095 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141925097 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.141958952 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.141993046 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.142055035 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142165899 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142220020 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.142225981 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142309904 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142390966 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142421961 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.142427921 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142473936 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.142477989 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.142725945 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.142952919 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.143098116 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.143177032 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.143346071 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.143352032 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.143439054 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.143877983 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144022942 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144123077 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144148111 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.144154072 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144212008 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.144216061 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144732952 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144828081 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144907951 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144937992 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.144942999 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.144969940 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.145728111 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.145809889 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.145889997 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.145891905 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.145915031 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146177053 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.146436930 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146518946 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146533012 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.146538019 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146605968 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.146610022 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146718979 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.146802902 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.146807909 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.147409916 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.147499084 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.147500038 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.147519112 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.147588968 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.147593021 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.148381948 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.148679972 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.148685932 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.193737030 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.245225906 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.245548010 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.246361971 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.246479034 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.246740103 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.246824980 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.246856928 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.246860981 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.246885061 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.247118950 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.248209953 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.248440027 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.248445034 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.248605967 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.248627901 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.248683929 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.248720884 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.248876095 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.248953104 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.249382019 CEST	49754	443	192.168.2.4	104.17.25.14
Apr 20, 2024 00:02:18.249394894 CEST	443	49754	104.17.25.14	192.168.2.4
Apr 20, 2024 00:02:18.351396084 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.351419926 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.351744890 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.353137970 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.353157997 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.578754902 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.578879118 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.586956978 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.586970091 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.587433100 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.632144928 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.638880014 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.638902903 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.641098022 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.645580053 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.645596027 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.677755117 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.720122099 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.785249949 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.785322905 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.785469055 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.850303888 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.850305080 CEST	49758	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.850327969 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.850336075 CEST	443	49758	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.892085075 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.892174006 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.892256021 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.892815113 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:18.892852068 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:18.905034065 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.905689001 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.905705929 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.907143116 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.907212973 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.916261911 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.916404963 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.917288065 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:18.917309999 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:18.971816063 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:19.109823942 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.109903097 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:19.114077091 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:19.114097118 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.114428997 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.118999004 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:19.133826017 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.133888960 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.133941889 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:19.133954048 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.133989096 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:19.135817051 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.135977030 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.136037111 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:19.164115906 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.171564102 CEST	49763	443	192.168.2.4	108.138.82.231
Apr 20, 2024 00:02:19.171581030 CEST	443	49763	108.138.82.231	192.168.2.4
Apr 20, 2024 00:02:19.316919088 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.316998005 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.317056894 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:19.322886944 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:19.322982073 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:19.323065996 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:19.323371887 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:19.323414087 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:19.326432943 CEST	49765	443	192.168.2.4	184.31.62.93
Apr 20, 2024 00:02:19.326462030 CEST	443	49765	184.31.62.93	192.168.2.4
Apr 20, 2024 00:02:19.692914963 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:19.694071054 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:19.694101095 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:19.695559978 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:19.695631027 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.214903116 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.215173006 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.215353966 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.256130934 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.256422997 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.256458998 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.306323051 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.498990059 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.499047041 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.501053095 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.524981022 CEST	49766	443	192.168.2.4	52.72.129.147
Apr 20, 2024 00:02:20.525036097 CEST	443	49766	52.72.129.147	192.168.2.4
Apr 20, 2024 00:02:20.545792103 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.545862913 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.546080112 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.547281027 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.547331095 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.672895908 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:20.672955990 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:20.673141956 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:20.673732996 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:20.673764944 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:20.762650967 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.766891956 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.766936064 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.767806053 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.768233061 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.769440889 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.769500971 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.770884037 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:20.770899057 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:20.820295095 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.038675070 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.040693045 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.040721893 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.042402029 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.042476892 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.045173883 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.045347929 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.045787096 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.045803070 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.079827070 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.079881907 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.079915047 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.079936981 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.079947948 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.079957962 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.079998016 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.080173016 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080214024 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.080226898 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080295086 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080334902 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.080342054 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080795050 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080836058 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080840111 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.080845118 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.080890894 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.080897093 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081708908 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081748962 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.081756115 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081792116 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081823111 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081830978 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.081836939 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.081871986 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.081876993 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082567930 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082606077 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082607985 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.082613945 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082664967 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.082669020 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082676888 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.082726002 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.082732916 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083432913 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083462954 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083483934 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.083498001 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083534956 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.083539963 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083574057 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.083611012 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.083619118 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084455967 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084489107 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084502935 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.084508896 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084544897 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084547997 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.084553957 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.084598064 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.085144043 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085207939 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085237980 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085247040 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.085253000 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085283995 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085298061 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.085304022 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.085341930 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.085685968 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.086090088 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.086137056 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.170674086 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.170831919 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.170888901 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.183947086 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.184012890 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.184026957 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.184046984 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.184071064 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:21.184082985 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.184082985 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.184132099 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.215253115 CEST	49771	443	192.168.2.4	54.161.134.69
Apr 20, 2024 00:02:21.215279102 CEST	443	49771	54.161.134.69	192.168.2.4
Apr 20, 2024 00:02:21.235663891 CEST	49770	443	192.168.2.4	104.18.10.207
Apr 20, 2024 00:02:21.235694885 CEST	443	49770	104.18.10.207	192.168.2.4
Apr 20, 2024 00:02:27.899869919 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:27.900023937 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:02:27.900269032 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:27.931598902 CEST	49755	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:02:27.931622982 CEST	443	49755	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.466552973 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:17.466664076 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.466737986 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:17.467631102 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:17.467668056 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.710705996 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.713757992 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:17.713790894 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.714272976 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.715416908 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:17.715507984 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:17.755758047 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:27.709630013 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:27.709744930 CEST	443	49781	173.194.219.103	192.168.2.4
Apr 20, 2024 00:03:27.709832907 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:28.095695972 CEST	49781	443	192.168.2.4	173.194.219.103
Apr 20, 2024 00:03:28.095751047 CEST	443	49781	173.194.219.103	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2024 00:02:13.361970901 CEST	53	49979	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:13.629475117 CEST	53	64104	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:14.354329109 CEST	53	57927	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.477173090 CEST	51786	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:16.477515936 CEST	60721	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:16.477894068 CEST	56790	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:16.478039026 CEST	54954	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:16.582084894 CEST	53	51786	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.582768917 CEST	53	60721	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.583092928 CEST	53	56790	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.583283901 CEST	53	54954	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.583636999 CEST	53	60985	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:16.588217974 CEST	53	62234	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:17.486612082 CEST	57444	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:17.491735935 CEST	50390	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:17.547333002 CEST	60416	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:17.548254013 CEST	54674	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:17.593163967 CEST	53	57444	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:17.598756075 CEST	53	50390	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:17.652232885 CEST	53	60416	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:17.653351068 CEST	53	54674	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:18.524421930 CEST	51071	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:18.524638891 CEST	63263	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:18.632088900 CEST	53	63263	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:18.632150888 CEST	53	51071	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:19.197025061 CEST	50835	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:19.197509050 CEST	53909	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:19.305360079 CEST	53	53909	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:19.317970037 CEST	53	50835	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:20.547276974 CEST	65179	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:20.547967911 CEST	56602	53	192.168.2.4	1.1.1.1
Apr 20, 2024 00:02:20.654441118 CEST	53	65179	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:20.672079086 CEST	53	56602	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:31.974426031 CEST	53	52118	1.1.1.1	192.168.2.4
Apr 20, 2024 00:02:35.292968988 CEST	138	138	192.168.2.4	192.168.2.255
Apr 20, 2024 00:02:51.163814068 CEST	53	58634	1.1.1.1	192.168.2.4
Apr 20, 2024 00:03:12.916464090 CEST	53	52516	1.1.1.1	192.168.2.4
Apr 20, 2024 00:03:14.475053072 CEST	53	52043	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 20, 2024 00:02:16.477173090 CEST	192.168.2.4	1.1.1.1	0x3a2b	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.477515936 CEST	192.168.2.4	1.1.1.1	0xdcb	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 20, 2024 00:02:16.477894068 CEST	192.168.2.4	1.1.1.1	0x3140	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.478039026 CEST	192.168.2.4	1.1.1.1	0x35f3	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 20, 2024 00:02:17.486612082 CEST	192.168.2.4	1.1.1.1	0x2262	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.491735935 CEST	192.168.2.4	1.1.1.1	0x483c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 20, 2024 00:02:17.547333002 CEST	192.168.2.4	1.1.1.1	0x49a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.548254013 CEST	192.168.2.4	1.1.1.1	0x8ed6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 20, 2024 00:02:18.524421930 CEST	192.168.2.4	1.1.1.1	0xe92d	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:18.524638891 CEST	192.168.2.4	1.1.1.1	0x5ca	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	65	IN (0x0001)	false
Apr 20, 2024 00:02:19.197025061 CEST	192.168.2.4	1.1.1.1	0x38a9	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:19.197509050 CEST	192.168.2.4	1.1.1.1	0xe5d8	Standard query (0)	track.gaug.es	65	IN (0x0001)	false
Apr 20, 2024 00:02:20.547276974 CEST	192.168.2.4	1.1.1.1	0xba5e	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:20.547967911 CEST	192.168.2.4	1.1.1.1	0x739e	Standard query (0)	track.gaug.es	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 20, 2024 00:02:16.582084894 CEST	1.1.1.1	192.168.2.4	0x3a2b	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.582084894 CEST	1.1.1.1	192.168.2.4	0x3a2b	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.582768917 CEST	1.1.1.1	192.168.2.4	0xdcb	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 20, 2024 00:02:16.583092928 CEST	1.1.1.1	192.168.2.4	0x3140	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.583092928 CEST	1.1.1.1	192.168.2.4	0x3140	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:16.583283901 CEST	1.1.1.1	192.168.2.4	0x35f3	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.103	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.99	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.104	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.105	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.106	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.593163967 CEST	1.1.1.1	192.168.2.4	0x2262	No error (0)	www.google.com		173.194.219.147	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.598756075 CEST	1.1.1.1	192.168.2.4	0x483c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 20, 2024 00:02:17.652232885 CEST	1.1.1.1	192.168.2.4	0x49a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.652232885 CEST	1.1.1.1	192.168.2.4	0x49a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:17.653351068 CEST	1.1.1.1	192.168.2.4	0x8ed6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 20, 2024 00:02:18.632150888 CEST	1.1.1.1	192.168.2.4	0xe92d	No error (0)	d2fuc4clr7gvcn.cloudfront.net		108.138.82.231	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:18.632150888 CEST	1.1.1.1	192.168.2.4	0xe92d	No error (0)	d2fuc4clr7gvcn.cloudfront.net		108.138.82.203	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:18.632150888 CEST	1.1.1.1	192.168.2.4	0xe92d	No error (0)	d2fuc4clr7gvcn.cloudfront.net		108.138.82.137	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:18.632150888 CEST	1.1.1.1	192.168.2.4	0xe92d	No error (0)	d2fuc4clr7gvcn.cloudfront.net		108.138.82.189	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:19.317970037 CEST	1.1.1.1	192.168.2.4	0x38a9	No error (0)	track.gaug.es		52.72.129.147	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:19.317970037 CEST	1.1.1.1	192.168.2.4	0x38a9	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:19.317970037 CEST	1.1.1.1	192.168.2.4	0x38a9	No error (0)	track.gaug.es		54.208.153.232	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:20.654441118 CEST	1.1.1.1	192.168.2.4	0xba5e	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:20.654441118 CEST	1.1.1.1	192.168.2.4	0xba5e	No error (0)	track.gaug.es		54.208.153.232	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:20.654441118 CEST	1.1.1.1	192.168.2.4	0xba5e	No error (0)	track.gaug.es		52.72.129.147	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:30.723794937 CEST	1.1.1.1	192.168.2.4	0xe8fc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 20, 2024 00:02:30.723794937 CEST	1.1.1.1	192.168.2.4	0xe8fc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:02:44.312916994 CEST	1.1.1.1	192.168.2.4	0x1919	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 20, 2024 00:02:44.312916994 CEST	1.1.1.1	192.168.2.4	0x1919	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:03:06.504580021 CEST	1.1.1.1	192.168.2.4	0x3220	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 20, 2024 00:03:06.504580021 CEST	1.1.1.1	192.168.2.4	0x3220	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 20, 2024 00:03:25.744853020 CEST	1.1.1.1	192.168.2.4	0x3013	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 20, 2024 00:03:25.744853020 CEST	1.1.1.1	192.168.2.4	0x3013	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

maxcdn.bootstrapcdn.com

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

d2fuc4clr7gvcn.cloudfront.net

track.gaug.es

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	104.18.10.207	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:16 UTC	604	OUT	GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:17 UTC	933	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 22:02:17 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4fbd15cb6047af93373f4f895639c8bf" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-CachedAt: 10/31/2023 18:58:32 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1047 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 636c547408716b12e0429001e52d27d0 CDN-Cache: HIT CF-Cache-Status: HIT Age: 3799855 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87702d904cda69ed-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 22:02:17 UTC	436	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 Data Ascii: me-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b Data Ascii: :rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 Data Ascii: th:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-hear
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d Data Ascii: 4"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: tent:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: :before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{conte
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 Data Ascii: {content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: ent:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: board:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	104.18.10.207	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:16 UTC	656	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://allmylinkswebgt.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:17 UTC	942	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 22:02:17 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/04/2024 23:51:13 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e3f56af52ba8a83e8841a901e24dc512 CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87702d904a7cb0d0-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 22:02:17 UTC	427	IN	Data Raw: 37 63 30 32 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c02/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d Data Ascii: a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c Data Ascii: :underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 Data Ascii: ocus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[ty
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 Data Ascii: h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-si
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c Data Ascii: break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;col
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 Data Ascii: l-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.c
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 Data Ascii: ex:0 0 50%;max-width:50%}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;fle
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 Data Ascii: -flex-positive:1;flex-grow:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>*{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row
2024-04-19 22:02:17 UTC	1369	IN	Data Raw: 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d Data Ascii: -order:-1;order:-1}.order-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49750	104.18.10.207	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:17 UTC	640	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://allmylinkswebgt.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:18 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 22:02:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:05:28 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 69c3851f1f50cabc4153f227f976d9a8 CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87702d965acc7bb8-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 22:02:18 UTC	413	IN	Data Raw: 37 62 66 35 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7bf5/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 Data Ascii: ts","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 72 6e 20 6f 7c 7c 73 3f 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c Data Ascii: rn o\|\|s?(n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 Data Ascii: TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;retur
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 Data Ascii: );e(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){t
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 74 61 72 67 65 74 2c 69 3d 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e Data Ascii: target,i=n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.con
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 Data Ascii: oolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._is
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: next).bind(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._eleme
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f Data Ascii: rEvent&&v[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.o
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 Data Ascii: nction(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	104.17.25.14	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:17 UTC	580	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:18 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 22:02:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 125303 Expires: Wed, 09 Apr 2025 22:02:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pN%2FeQ4I3j7P%2BoS50kDU15yZnHiIJD9YY7kHPx3GwpwUd92lxO5HEHo5FKNSSizmMBXAWPAoK1Zl8IaxeBb0VFIM2XTShiAFeOspHNSdIt7TLOpmGd9sPQYE1q0bxnyIQjp%2Booyxn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87702d970ac5ad5f-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 22:02:18 UTC	410	IN	Data Raw: 33 39 39 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 3999/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 69 3d 68 2e 74 6f 53 74 72 69 6e 67 2c 6a 3d 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 7b 7d 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 22 32 2e 31 2e 33 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 Data Ascii: i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selec
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: void 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 Data Ascii: r c=b\|\|[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:funct
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 23 22 29 2c 4f 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 Data Ascii: return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"("+M+")(?:"+L+"([*^$\|!
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 29 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 62 29 7b 48 3d 7b 61 70 70 6c Data Ascii: ),db=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},eb=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fb){H={appl
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 Data Ascii: eturn a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ib(a){return a[u]=!0,a}function jb(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function kb
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 24 2e 74 65 73 74 28 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e Data Ascii: a.getAttribute("className")}),c.getElementsByTagName=jb(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=jb(function(a){return o.appendChild(a).
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 Data Ascii: ^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length\|\|q
2024-04-19 22:02:18 UTC	1369	IN	Data Raw: 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 67 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 67 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 Data Ascii: mentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g\|\|a.ownerDocument===v&&t(v,a)?-1:b===g\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49758	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 22:02:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=118863 Date: Fri, 19 Apr 2024 22:02:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49763	108.138.82.231	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:18 UTC	561	OUT	GET /track.js HTTP/1.1 Host: d2fuc4clr7gvcn.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:19 UTC	487	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3829 Connection: close Accept-Ranges: bytes Last-Modified: Tue, 12 Mar 2024 12:30:29 GMT Server: nginx/1.10.3 (Ubuntu) Date: Fri, 19 Apr 2024 17:09:44 GMT ETag: "65f04ae5-ef5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4685cae701bd588fa0176a1c8b1e52f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: 10UCNomk_H2tMsAv9H4dGtH_ScJFdVzmcgWQb7fVFPDLZIgPGa_tYg== Age: 17555
2024-04-19 22:02:19 UTC	3829	IN	Data Raw: 76 61 72 20 5f 67 61 75 67 65 73 3d 5f 67 61 75 67 65 73 7c 7c 5b 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 28 5f 67 61 75 67 65 73 5b 27 73 6c 69 63 65 27 5d 29 3f 5f 67 61 75 67 65 73 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 3b 5f 67 61 75 67 65 73 3d 7b 74 72 61 63 6b 5f 72 65 66 65 72 72 65 72 3a 74 72 75 65 2c 69 6d 61 67 65 3a 6e 65 77 20 49 6d 61 67 65 28 29 2c 74 72 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 27 5f 67 61 75 67 65 73 5f 63 6f 6f 6b 69 65 27 2c 31 2c 31 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 75 72 6c 28 29 3b 69 66 28 61 29 7b 74 68 69 73 2e 69 6d 61 67 65 2e 73 72 63 3d 61 3b 76 61 72 20 62 3d 36 30 2a 36 30 2c 66 3d 62 2a 32 34 2c 63 3d 66 2a 33 31 2c 64 3d 66 2a 33 36 35 Data Ascii: var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49765	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 22:02:19 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=118883 Date: Fri, 19 Apr 2024 22:02:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 22:02:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49766	52.72.129.147	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:20 UTC	1167	OUT	GET /track.gif?h[site_id]=661fa13b10c5504076cbd30e&h[resource]=https%3A%2F%2Fallmylinkswebgt.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1713564138691 HTTP/1.1 Host: track.gaug.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://allmylinkswebgt.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:20 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Fri, 19 Apr 2024 22:02:20 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Fri, 19 Apr 2024 22:02:20 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-19 22:02:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49770	104.18.10.207	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:20 UTC	684	OUT	GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://allmylinkswebgt.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:21 UTC	898	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 22:02:21 GMT Content-Type: font/woff2 Content-Length: 66624 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "db812d8a70a4e88e888744c1c9a27e89" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/16/2024 16:07:50 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: be33e9d7f0f284b5abdd1843cae69b0d CDN-Cache: HIT CF-Cache-Status: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87702da90d336740-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 22:02:21 UTC	471	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 04 40 00 0e 00 00 00 02 2a e8 00 01 03 e0 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 87 f6 1c 86 b0 35 01 36 02 24 03 94 0a 0b 8a 10 00 04 20 05 87 08 07 b0 20 3f 77 65 62 66 06 5b fc c1 91 80 d6 40 d6 8c 17 e5 a6 6e 43 80 c7 cb 9c e5 74 01 54 4c b7 c9 a1 f4 66 05 88 d6 74 1d a1 c8 c8 b0 71 00 c6 e8 a9 35 fb ff ff ff 3f 3d 69 88 6c e5 d2 91 5c db 76 6c 20 82 03 54 ff 83 ec 90 62 16 d2 15 d9 20 f4 31 07 66 c3 ba 9e 37 d4 54 87 51 d3 0a 8a 82 44 13 3b 3a bf d0 ae 12 31 95 6c d7 be 6a 76 88 af 65 d2 07 ec d2 6e 93 0f 45 89 a8 07 df a0 6b 35 3e ef a3 64 0f 37 51 a9 6c 8a 7f 42 61 94 dc 0a 92 75 e2 78 5d 2e f9 85 8b d6 f9 c0 57 92 43 b5 86 91 c8 24 ae 38 Data Ascii: wOF2@*?FFTM `r56$ ?webf[@nCtTLftq5?=il\vl Tb 1f7TQD;:1ljvenEk5>d7QlBaux].WC$8
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 30 a2 b6 11 2d 95 c2 46 95 12 69 81 62 05 46 22 32 cf 3c 45 45 c5 a8 13 ed 3b eb f4 22 75 3f d1 9c fd db d9 dd 14 0e 1a 82 d4 52 d9 81 5a ea 48 52 b1 1d 44 d3 fb b7 78 aa 59 2c 0d 35 82 54 74 a6 76 62 14 aa 9c 65 cf bc e6 59 4e 7f eb a9 73 46 4e 44 2b 03 ff fa f3 b7 f6 f4 b6 ef b7 31 08 09 08 87 95 18 cf a4 60 80 b6 d9 01 da 44 0b 28 92 26 36 62 61 50 36 28 a0 80 d5 18 11 58 b3 36 67 4e 57 c6 36 6b 2e d5 39 5d ba a8 76 1d 1f eb a1 9a ea ff ac 24 43 66 b4 76 c0 76 fa 10 78 40 10 b0 2d 4a b8 60 47 b0 97 d9 77 d4 fe 77 5b 10 d8 41 83 c0 14 13 04 b8 e5 34 03 6d 73 49 3e 00 c5 ff cf 69 ef d9 cf 13 f3 18 1e 70 05 c3 80 46 28 32 62 b5 bb da 18 7e 48 c9 5d 4a 95 5d 94 b1 6a dd b9 ad dc d4 46 cd 66 2d 7e 0b 40 fc c7 f3 c5 1a fa 67 67 0f 42 a0 2d a0 05 54 78 ee 25 Data Ascii: 0-FibF"2<EE;"u?RZHRDxY,5TtvbeYNsFND+1`D(&6baP6(X6gNW6k.9]v$Cfvvx@-J`Gww[A4msI>ipF(2b~H]J]jFf-~@ggB-Tx%
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 41 27 fb 46 00 47 b8 fd 93 63 15 54 35 3a c6 8a 60 71 52 aa c6 4f c9 89 ad de 90 ec 55 0e 51 c3 d4 b1 e5 d9 5e 28 08 e6 ec 9c 54 c3 56 61 03 c6 6d bf 89 35 90 a4 76 b3 ec 50 1d 25 d4 5e 29 4a 11 89 15 2c 66 2b e9 52 1a 4a 46 b2 b9 2c ca f0 80 cc 9c f1 d3 a1 d4 fe cc ae 14 41 ac d5 78 08 01 28 0c ad 48 9e 8c 8f b7 7d cb 5c 89 e1 c7 c2 69 05 83 8b 0d 86 16 22 1c 82 07 18 13 f1 6c e1 ca 44 6f bb 50 d5 24 e3 d4 44 af 11 e8 7d 11 15 5c a8 8b b0 5a 28 69 31 c7 25 87 84 d7 77 65 1a 36 41 d2 d5 95 bc 07 ac 8d 4a 5d 16 4d 34 65 b4 88 20 c3 67 b8 92 c4 c8 e5 62 f1 94 3e 6a 40 91 14 a6 dc 65 55 77 0a 75 a7 4e ea 53 33 15 40 7d 08 a2 b7 33 41 ee 99 58 c3 ca 3f 64 b5 9b 7a ac 38 69 1e 14 43 2f d5 c1 c9 9b c4 00 e5 4a 4b 45 00 af 96 c4 27 26 85 c4 5d e1 10 3d cf 7a ce Data Ascii: A'FGcT5:`qROUQ^(TVam5vP%^)J,f+RJF,Ax(H}\i"lDoP$D}\Z(i1%we6AJ]M4e gb>j@eUwuNS3@}3AX?dz8iC/JKE'&]=z
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 31 15 81 12 21 b0 aa 32 fa 17 ad 48 27 3a d6 49 1a 5f 66 15 ca 2c d5 43 03 62 a4 01 99 9a 6a a3 41 5c a3 ce 88 b2 f5 4c e1 94 af 31 20 29 d9 c8 48 92 b9 02 61 98 99 15 b6 09 82 3d ae eb 9d e9 4e 28 55 c9 3b 0e 9b b8 b3 71 b0 be 9e 95 f5 6c 71 e3 ce e1 d1 92 64 3b 68 b0 db d1 33 60 67 07 ac 6b 7a 10 8e 22 ad 25 e5 85 d6 e7 bc cb 28 ec f3 38 fd 02 90 58 58 d0 8c cc 4a 6b 05 5f af 77 b3 6f 5d d3 9e a4 1e 20 0f 02 bc b7 1a 4a e9 38 61 34 da 36 a4 26 d7 30 33 33 3d d5 06 05 39 9e 05 29 ca 76 cc 9e ae f5 be 26 d2 da cd 4a 50 56 de fd cc 1a cb a2 30 fa db 5c 98 71 ac 24 ae b6 a9 48 ea e9 59 10 88 31 69 b6 be 39 ff 1e 2f 99 69 a3 7d ab b7 34 2c 7f 72 a4 d3 70 d5 bb 80 a6 72 cd 57 c7 75 62 cf 15 88 f9 69 dc 9d 13 b3 46 b7 23 a3 0b 1b 5d c0 ee 17 95 da b1 29 62 ab Data Ascii: 1!2H':I_f,CbjA\L1 )Ha=N(U;qlqd;h3`gkz"%(8XXJk_wo] J8a46&033=9)v&JPV0\q$HY1i9/i}4,rprWubiF#])b
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: ae 6c 5c 67 85 05 66 77 94 50 4b 7c a3 72 10 af 9e 28 30 dc c3 4a 23 23 72 50 b9 3c b5 2e b7 c1 3d 24 a8 8c 56 0a f3 d3 ad 7d 6b aa 80 cd 0a 22 6c 57 c1 6d 94 74 76 2e 14 1a f5 e6 95 41 37 e6 ec 2d c8 5f 08 e2 68 a4 50 ad e0 f5 2c a7 75 65 09 2d 7c b1 3a 89 f8 78 16 a9 6b d9 56 4f e2 6e 2f d7 65 70 5d 13 de 1d 5e 1c f2 df 74 b2 8f 32 09 9d 6e 28 7c 99 72 a5 08 47 3c 06 04 80 db 72 ca 78 f2 34 d3 20 ce aa 02 ca a1 68 24 81 e8 e0 44 b1 a4 b8 94 17 a9 ff eb 49 e1 f9 ed 50 31 87 52 75 a9 6e 36 cd 8f de 3c 5b 78 f8 38 52 77 8a 71 19 e3 e3 74 51 49 9c a4 9e 61 20 0a be 32 c2 5f 55 fb 5a 98 93 89 24 ee 56 20 98 f1 1e 5e 58 47 72 e7 0e 03 3d 0b 98 9e 77 9c 44 df 75 4a 7a b0 01 da 1c 6b 33 bb ac 9c 50 45 00 76 ae 60 9e 8b 2e 4f 52 38 5d 05 19 64 01 af 8b 24 46 f3 Data Ascii: l\gfwPK\|r(0J##rP<.=$V}k"lWmtv.A7-_hP,ue-\|:xkVOn/ep]^t2n(\|rG<rx4 h$DIP1Run6<[x8RwqtQIa 2_UZ$V ^XGr=wDuJzk3PEv`.OR8]d$F
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: bb 34 bf ce e6 6b 73 bc a9 6f 78 84 87 e9 b3 74 6f b8 c0 7a 2d 0d 04 31 75 76 e0 d0 13 a7 62 ef 2a c8 c1 c6 62 f7 61 5b f2 7f 95 05 17 5c f0 51 85 36 86 21 51 43 08 f8 ec de 9e f7 a0 36 e7 b9 ea 1f fa 32 30 dc f6 1c c4 bd 72 b9 26 90 52 13 68 5b c0 35 b0 80 a5 52 09 3b 96 a8 5f 93 3a 20 54 3a 83 f8 2b 4d 7e ac 3a b7 db bc 52 de 1d 3f c2 15 31 d6 ae 84 9a cf 08 17 f5 20 e1 5c de e9 1b 21 10 dc 8e 60 30 ef d1 ab 65 e5 8b 56 ce ae 88 d4 7b 1e 44 46 6e 2d 8f 24 f9 2b 3c 77 a0 5f 19 11 e3 c1 d0 fa 07 a4 b1 5f 29 21 91 78 6c 27 98 4c 45 d2 3f f0 6d c4 e0 3c 47 ce 5b e3 54 ff 8f 2a 31 f6 d7 09 31 e7 db ac 27 ff 36 ce 4f b3 24 c0 e7 99 de fc 71 e9 e9 e3 82 f8 88 f5 14 75 cd f7 34 94 61 7c 39 3d 99 ad 16 f5 1f 17 2b 35 9b 9b 15 bd bd 9c b0 dc f8 86 bf ea 1a 13 49 Data Ascii: 4ksoxtoz-1uvbba[\Q6!QC620r&Rh[5R;_: T:+M~:R?1 \!`0eV{DFn-$+<w__)!xl'LE?m<G[T11'6O$qu4a\|9=+5I
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 8d d3 05 4b ce 94 77 30 87 af 3b fc d5 57 6f f0 25 3b 3e a3 72 4a 02 8e 7c 21 21 02 ea c6 4d c3 66 05 f1 f8 08 04 c7 30 fb 88 43 90 65 a2 37 0a 86 7b 55 14 21 fe b7 06 0e 11 8f 73 09 c9 d7 dd a9 1f 42 0f 09 11 10 b5 0d 7e 88 1f fa a9 1e 22 b6 8b c5 42 31 71 9c 2a 4e f2 b8 fc 6a 84 2b 37 5e 37 5e 26 d4 44 43 85 cf 9e 3e 70 14 42 d7 5b a6 69 5b 97 49 b5 4a f7 e7 7b a5 18 70 55 0f 86 5b 2f 54 12 25 70 6f 36 94 c2 5a b3 23 6a d6 c7 12 27 cf c1 6c 9a 1f 32 46 09 ce 3b 78 c6 45 c6 07 7d 6f 77 8e 91 cc f0 73 48 b7 25 9f 6d fe b9 9f 4f 17 d5 4d 98 0e a7 25 95 a3 81 78 42 20 ea 57 ce 62 c4 f3 d2 b8 cb 6a f9 30 e2 ab eb 04 19 8e 01 f9 89 8e 03 dd c1 f1 de 15 17 4c 18 99 e6 04 f3 40 e5 e8 3a 49 cf e0 39 aa 8a 70 8a 74 e5 b0 0d f9 b4 04 5d a6 78 55 db 54 2a 67 b4 b5 Data Ascii: Kw0;Wo%;>rJ\|!!Mf0Ce7{U!sB~"B1qNj+7^7^&DC>pB[i[IJ{pU[/T%po6Z#j'l2F;xE}owsH%mOM%xB Wbj0L@:I9pt]xUTg
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 4a 68 8d d5 20 b6 63 6c c2 74 f5 95 5c 17 5b a7 db df 2d 6c 10 65 33 1f 60 2d 63 51 a5 1c 94 c5 ad ff 07 83 c9 26 51 85 a1 d3 47 27 20 99 90 ad 2c 11 85 78 c2 6a 10 f3 77 31 78 03 05 fb 8a 6f 84 81 15 7b 96 e5 32 7c 94 49 2b 0c 13 88 06 1e 84 bb 98 4f f7 ae 7e dc 08 93 80 27 33 c0 ea bd 99 47 19 05 9a a6 3c 8b 5d e1 42 93 d0 e9 16 94 d4 36 35 1e 40 c8 42 7a 5d 32 e2 22 5f 31 9e 2a 81 8f 3f e4 89 e4 39 31 14 9b bc 93 f5 52 b8 ca 84 22 7c 72 9b 72 49 b5 4f db e5 35 ee 06 42 2f ab 62 7d 41 0c ff c4 7e fa d1 53 b0 8e 90 3c 7d 1a e0 fe cb 36 2f 7e ac c8 52 64 d6 de d5 66 36 c4 4c 49 6b 84 f1 b8 29 36 67 47 af a2 1a d3 8b d3 e6 9e 3a ed 5c 18 36 75 95 a8 21 3d a7 a8 a2 2f 30 0f 32 d4 4a 9d 22 47 1d f5 f6 78 5a 3a 53 bb 98 c5 fb 6d 79 fb fd 33 ad 52 32 cb 91 59 Data Ascii: Jh clt\[-le3`-cQ&QG' ,xjw1xo{2\|I+O~'3G<]B65@Bz]2"_1*?91R"\|rrIO5B/b}A~S<}6/~Rdf6LIk)6gG:\6u!=/02J"GxZ:Smy3R2Y
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: cc e6 34 32 68 e9 d2 39 d9 18 72 69 d3 0a 6c 23 83 33 f1 36 d5 be 22 4b be 0c 9d 21 4e 23 16 a7 67 aa 6d e7 52 79 04 77 33 ea 08 03 a1 ea 77 55 0c 76 23 86 e6 8b d5 fd c1 b5 b8 d7 42 5c 83 18 02 5e 0d 8b 04 12 0d d0 cf 89 e8 60 cf 1a 19 1a e2 42 f1 a0 55 22 5e 90 91 26 8e 15 c3 66 0f cf 5b b1 71 03 98 b6 f8 6e 1e e1 34 78 95 73 6f f9 9c ee 2f 46 52 b3 5e 85 e0 ca c6 39 1b 0e 50 cd 90 04 d0 14 f1 df fe cc 0c dd 32 b8 94 9b 10 e8 41 aa f7 9c b4 a5 7c bb e8 7f 12 6d dd a5 7c e4 b5 dc 55 cf a0 69 f7 16 cd 8f 58 b1 b5 c4 5e fd b7 ca b9 e3 9c f1 e1 ba d6 71 1a d6 93 bb 90 98 4a 87 15 02 b1 cb b2 0f 9a 02 e9 7e c3 6e 26 6b 69 0c a7 60 13 3b 18 bd 63 bb 40 62 4a 62 b2 32 a2 21 09 9e cd 85 83 0c 4d 0b 76 51 d4 18 45 73 c2 c5 24 f6 cb 39 c7 b3 f4 ef 8a 72 7b 55 39 Data Ascii: 42h9ril#36"K!N#gmRyw3wUv#B\^`BU"^&f[qn4xso/FR^9P2A\|m\|UiX^qJ~n&ki`;c@bJb2!MvQEs$9r{U9
2024-04-19 22:02:21 UTC	1369	IN	Data Raw: 64 f2 b9 dc 1d 71 a4 b7 46 3f 18 81 87 b1 7a d3 34 d2 a0 e4 11 af 63 49 75 2f 64 86 f8 14 ac be 6a 21 f4 f5 c3 23 ee 60 da d0 85 96 3d 96 ba 74 c3 9f c6 b5 9c 93 c6 38 6f 3c 14 fc 21 13 fd ae 54 6b 57 95 92 4c 9c e8 01 24 af cc 87 e7 8d 90 13 ce af c8 70 35 2c 20 01 8d 77 e5 c1 73 69 88 5e a1 fe 11 16 e6 f1 71 4b 50 e0 a6 b7 cc 15 ad 92 c9 b4 13 b2 60 68 48 f4 8a a5 d1 c1 0b a3 13 73 05 08 69 e2 f7 be 25 99 7d 8c b4 ac 40 4e ad 57 f7 74 b6 72 c6 81 a8 bd e4 9c 43 de 8f da a8 50 97 d8 e7 50 2e 41 c9 d2 87 b2 39 05 3b 70 c0 f9 ff b7 69 e3 9d e1 b2 5a 5d cb a8 cb 9b d9 15 8d bd 29 85 eb ae 9c e3 79 f7 46 4a c2 4a 1c 2d e2 2f 29 b6 fb 60 2f 4c 7e 2d d8 1e 42 b8 74 b8 27 cf 5a 85 13 a7 ac f3 ea 85 67 93 66 3a 94 4a ee 4d ee 63 7b b1 83 66 c8 99 3d e9 54 38 86 Data Ascii: dqF?z4cIu/dj!#`=t8o<!TkWL$p5, wsi^qKP`hHsi%}@NWtrCPP.A9;piZ])yFJJ-/)`/L~-Bt'Zgf:JMc{f=T8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49771	54.161.134.69	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 22:02:21 UTC	907	OUT	GET /track.gif?h[site_id]=661fa13b10c5504076cbd30e&h[resource]=https%3A%2F%2Fallmylinkswebgt.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1713564138691 HTTP/1.1 Host: track.gaug.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 22:02:21 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Fri, 19 Apr 2024 22:02:21 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Fri, 19 Apr 2024 22:02:21 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-19 22:02:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4416, Parent PID: 1816

General

Target ID:	0
Start time:	00:02:09
Start date:	20/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 732, Parent PID: 4416

General

Target ID:	2
Start time:	00:02:11
Start date:	20/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,7825138692145901741,18011894296286758546,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6528, Parent PID: 1816

General

Target ID:	3
Start time:	00:02:15
Start date:	20/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://allmylinkswebgt.z13.web.core.windows.net/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://allmylinkswebgt.z13.web.core.windows.net/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Network Behavior

Windows Analysis Report
https://allmylinkswebgt.z13.web.core.windows.net/index.html