Edit tour

Windows Analysis Report
https://purexxfilmsjoybear.z13.web.core.windows.net/index.html

Overview

General Information

Sample URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/index.html
Analysis ID:	1431906
Infos:

Detection

TechSupportScam

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected TechSupportScam

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2192,i,615908506399856678,12830484552138248656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purexxfilmsjoybear.z13.web.core.windows.net/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_77	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.0.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://purexxfilmsjoybear.z13.web.core.windows.net/index.html

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected TechSupportScam

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_77, type: DROPPED

Source: https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	HTTP Parser: No favicon
Source: https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49763 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://purexxfilmsjoybear.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://purexxfilmsjoybear.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.js HTTP/1.1Host: d2fuc4clr7gvcn.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fpurexxfilmsjoybear.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714083428305 HTTP/1.1Host: track.gaug.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://purexxfilmsjoybear.z13.web.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fpurexxfilmsjoybear.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714083428305 HTTP/1.1Host: track.gaug.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://purexxfilmsjoybear.z13.web.core.windows.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: d2fuc4clr7gvcn.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: track.gaug.es

Source: chromecache_64.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_64.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_77.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Source: chromecache_77.1.dr	String found in binary or memory: https://d2fuc4clr7gvcn.cloudfront.net/track.js
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:ital
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLFj_Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm111VGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm21lVGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLm81xVGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmg1hVGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmr19VGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VF9eO.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmy15VGdeOcEg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLucHtA.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrJJLufntAKPY.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTucHtA.woff2)
Source: chromecache_73.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiGyp8kv8JHgFVrLPTufntAKPY.woff2)
Source: chromecache_62.1.dr, chromecache_71.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_62.1.dr, chromecache_71.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_71.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_77.1.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_77.1.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Source: chromecache_77.1.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_77.1.dr	String found in binary or memory: https://track.gaug.es/track.gif

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.4:49763 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Yara detected TechSupportScam

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_77, type: DROPPED

Source: classification engine

Classification label: mal56.phis.win@16/48@14/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2192,i,615908506399856678,12830484552138248656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purexxfilmsjoybear.z13.web.core.windows.net/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2192,i,615908506399856678,12830484552138248656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	0%	Avira URL Cloud	safe
https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://track.gaug.es/track.gif	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
d2fuc4clr7gvcn.cloudfront.net	65.8.184.63	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
www.google.com	142.250.217.164	true	false	high
track.gaug.es	54.161.134.69	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://d2fuc4clr7gvcn.cloudfront.net/track.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css	false	high
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false	high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_64.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_71.1.dr	false		high
https://getbootstrap.com/)	chromecache_62.1.dr, chromecache_71.1.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_62.1.dr, chromecache_71.1.dr	false		high
https://track.gaug.es/track.gif	chromecache_77.1.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_64.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
65.8.184.63	d2fuc4clr7gvcn.cloudfront.net	United States	16509	AMAZON-02US	false
54.197.93.113	unknown	United States	14618	AMAZON-AESUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.161.134.69	track.gaug.es	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431906
Start date and time:	2024-04-26 00:16:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@16/48@14/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.141.84, 142.250.217.174, 142.250.217.195, 34.104.35.123, 52.239.247.97, 142.250.217.234, 172.217.165.195, 40.127.169.103, 23.45.182.74, 23.45.182.93, 23.45.182.106, 23.45.182.73, 23.45.182.100, 23.45.182.104, 192.229.211.108, 13.85.23.206, 52.165.164.15, 172.217.2.195
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://purexxfilmsjoybear.z13.web.core.windows.net/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	278123
Entropy (8bit):	7.308523279686719
Encrypted:	false
SSDEEP:	6144:Bk2KuVCjDoElhEHCu0iHb0oM9DDKKFVFf2Uc736rnGdOL:DKuVd2hKr0i70F9DesVFf236rnGoL
MD5:	3A84A4BD0D91EBB1D6657720A4ABAE71
SHA1:	8BF35C029F4532F04624F0174B8F6A04C7F5EFC7
SHA-256:	D15ED9CAC53BD37774680F428069EE518FF0FB5A8FA03570522AA7C3489ECABD
SHA-512:	9138798D5AAD05ADA23FA91AC9C264C102885C881D5CA2CF878360A280C820D0C90D3938186543667A1D609CDBE3518ABFDA51B67601B433C2CD9950E538C4AE
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/Safeviews.mp3:2f75896e64648b:0
Preview:	ID3......#TSSE.......Lavf58.29.100...............................................Info.......u..H\|............."$&),.1468;>@CEGJMPRUWY\_adgiknqsvx{}......................................................Lavc58.54............$.@......H\|........................................................................................................................................................................................................................................d...-N-.`5.... .......@..4.....%b5a..#G.u?...........Dp...iH`....0./.....yR.`..N7...B.....i....f..=...H..18.Hh..'..-hY.4......C...Q,$...%..Y.=.C......>...JG.....0h7.......Y..'..@...'.. i!.Cx.H<X...!......9.9).qs...@.9t.....: pad..!...4......`H....Q..bf1.+8........x.\:.R....^.i.....\|...0..,..H......39N.A.g8...r.H....H_v;..2.z...`,.5-`FU...)....\|H0...&.....H.q.}......%.C..8m..=FV2.........dT...E..Y..... .............4....%..y.B.w.yZ.=......<...L.p..MT..L.....j*h..`.P.!.....$T...x3.$......7...Y....>v.l.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Category:	downloaded
Size (bytes):	7748
Entropy (8bit):	7.975193180895361
Encrypted:	false
SSDEEP:	96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7
MD5:	A09F2FCCFEE35B7247B08A1A266F0328
SHA1:	0DA2D17E738F46D2A09E6FB7969DA451719A9820
SHA-256:	CD36DE204ACA2D5FA263A731F7C20009B5E3D754BA1F1E03C33E93A48F3E7446
SHA-512:	5E3F9A298003B84250EC6801E08AD2A4FF8845D4C3E13EA61BEC37DA24D26EDE13B436257882124CC0C27E9A323BA92E7D23C6AD3F48A7B75535F5ED98813A0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
Preview:	wOF2.......D......?p.................................`..T..0....6..6.$..h. ..H....82EF.....E...........W...b.....b..l...Qc/.....G4.]Rc..C...9J....>W..A.#..~.$.-.....}.......$-.........B1..;<....=.FO... R..%......9.E.s..M6.k.-_.^.?...._...lI..59Y.f\|..&..J..<8....e.zip".......q...u.?Y.....I.:MA.d.Y....0>..E.....a...H...:.....A.j.h.P.......A.+.l/j........d....r)Y>..V..@E\Q.k.E..(....6..yf.)s..O..z..........`Q.La'N.t V$.. t".ZDb......U.A.........p~.TW.K....y..^.(.;....K.TO.l... {s..M$ ....!....a..^.y...._...H..e.lKD.#..9.$...!&.19.9I..R-..b...TD&...j...xol.[...~.!.q.%..M..>...k.K.{5......+..U....34........[R.GZF.s}&...#g.P..Y..zF..-&..Y.i.3...I_3..Q.....`i....F{.z..>0....N...16.i.@.........5D3..>.._o.0M+5qI.ds..o...1v.!zx..T..b.w.:.....z$...s..x...v...e.&.[.qb.P..Gt....D.3.. ..W.^f.C(...t..`.\|..0.Z.C\|..)...0....Y.Q...m.k...-VmS..6p..%7.o(0p..4..S7..i\.....v.k.+S)J....+..../....xv.9.W..nR.CG..f..\|....Y...'W.....\|b<.wN@....-[....l.P4#..=...[

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66624, version 4.262
Category:	downloaded
Size (bytes):	66624
Entropy (8bit):	7.996443365254666
Encrypted:	true
SSDEEP:	1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ
MD5:	DB812D8A70A4E88E888744C1C9A27E89
SHA1:	638C652D623280A58144F93E7B552C66D1667A11
SHA-256:	FF82AEED6B9BB6701696C84D1B223D2E682EB78C89117A438CE6CFEA8C498995
SHA-512:	17222F02957B3335849E3FE277B17C21C4AAF0C76CD3DA01A4CA39C035629695D29645913865B78E097066492F9CEE5618AF5159560363D2723BED7C3B9CF2A8
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
Preview:	wOF2.......@...................................?FFTM.. .`..r........5.6.$........ ..... ?webf.[.....@...nC....t.TL...f...t....q...5....?=i.l..\.vl ..T...b.... .1.f..7.T.Q....D.;:...1.l.jv..e....n..E....k5>.d.7Q.l..Ba....u.x].......W.C....$.8.v#..y`..F..1aM.8.....w.=\|'..0..T\|..2/..M.%.b.. .tY$!.....5cb.....(.&.-A/mY......./y..o\........Z=.....5c.k._.n3...(W.........Nag+.....O.R.'...5...=?....m...L......:..._V...........z+zc.1`..Q#j.../.Z0...-..F..i.b.F"2.<EE...;.."u?..........R.Z.HR..D...x.Y,.5.Tt.vb...e..YN..sFND+........1.......`.....D.(.&6baP6(.....X.6gNW.6k..9]..v......$Cf.v.v..x@..-J.`G...w..w[..A.......4.msI>....i.......p..F(2b....~H.]J.]..j....F.f-~.@......gg.B.-..Tx.%..pU.u..me....'........;...@7..t.=pN....../_.U8.....r....s...X=g....H........j..c....d._1l:1i..I..T.r..>.....v{Gb...T1*...f.-.x.-i..{..1..h...>..(..3.3..!.$.:.....j.~....:ugv.......%.....?...d..5+......fU.z...X.X.<.c%@fBHO.8.....i..G...{...[..M#.FZk."_.'.n{.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4666), with no line terminators
Category:	downloaded
Size (bytes):	4666
Entropy (8bit):	5.302868549458744
Encrypted:	false
SSDEEP:	96:y4i2cLKIzsS58MYztKheFSd6ZAnKl9k8hhJVSafdIzaOP5wtZ91yfqQf4tlvKHS5:C2cLPzsS58MYztKhh6Zt9hP2zRP5wtZZ
MD5:	876B05F6044B21D9E1A1E2C53BA847C3
SHA1:	8938C32F281207D167DE1F51EA6CF60C33CC1B4C
SHA-256:	F5342B436E889CA2184C1B322FE2A631412D85B445DECB8F1B6F020329D7178D
SHA-512:	FEA8AD9FA842D935A94BFB34E9B0DFC40A7543A32C4B214937FD1AC38AE29420C5943E3D0E99613ACC10A39A0BECF32EE50B67071C15910A40413808698F0967
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/itsuki.js
Preview:	var _0x1143c3=_0x44f8;function _0x44f8(_0x10494b,_0x4c1d23){var _0x482497=_0x4824();return _0x44f8=function(_0x44f80c,_0x113a1b){_0x44f80c=_0x44f80c-0xe4;var _0x42e1c0=_0x482497[_0x44f80c];return _0x42e1c0;},_0x44f8(_0x10494b,_0x4c1d23);}(function(_0x4304c4,_0x12ca27){var _0x59f05d=_0x44f8,_0x4bce22=_0x4304c4();while(!![]){try{var _0x2ca6f6=parseInt(_0x59f05d(0xf9))/0x1+parseInt(_0x59f05d(0x105))/0x2+-parseInt(_0x59f05d(0x103))/0x3(-parseInt(_0x59f05d(0x100))/0x4)+parseInt(_0x59f05d(0xfc))/0x5+-parseInt(_0x59f05d(0xf1))/0x6(-parseInt(_0x59f05d(0x104))/0x7)+parseInt(_0x59f05d(0x108))/0x8(parseInt(_0x59f05d(0xf7))/0x9)+parseInt(_0x59f05d(0x10b))/0xa(-parseInt(_0x59f05d(0xf4))/0xb);if(_0x2ca6f6===_0x12ca27)break;else _0x4bce22['push'](_0x4bce22['shift']());}catch(_0x4c259d){_0x4bce22['push'](_0x4bce22['shift']());}}}(_0x4824,0x4f6fe));function _0x6650(){var _0x2e771b=_0x44f8,_0x56d10a=[_0x2e771b(0x10e),_0x2e771b(0xef),'42chsVrk',_0x2e771b(0xe7),_0x2e771b(0xeb),'9887501weJLZl','40bkqHT

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	downloaded
Size (bytes):	84355
Entropy (8bit):	5.370892371249065
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrr:z4UdWJiz6UAIJ8pa98Hrr
MD5:	7F9FB969CE353C5D77707836391EB28D
SHA1:	62C4042E9EBC691A5372D653B424512A561D1670
SHA-256:	2051D61446D4DBFFB03727031022A08C84528AB44D203A7669C101E5FBDD5515
SHA-512:	7A027F63EDB63FD350F5A2325428745423AC7F27729FC78D9AA072FB2D829C91BE7E9448C57312EA36D63FCB552A9D23A7E34EE67F16B4C5009CD9C6A092A2E3
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	4.796257132249528
Encrypted:	false
SSDEEP:	192:bSIKTbzp5qU9XdY5S0+3FUrJ0lCeyDCZC5sSzqmSzq5xrhXQSzqmSzqSZ1KAM+Kq:mICvQS0Ft1i0xincAMnc5Mu
MD5:	266ED7D70D0F4DA16E451436E63BBED7
SHA1:	739CB196D6B375DE0B849ED84E66BE0D3592FA24
SHA-256:	F3D992A5242DB0A9501E8A54E3956227FB8B85C87D1347ADAD72C23B55E5D046
SHA-512:	67970A7FD76960C981A4C59A93B1F69FB9CB57013E5B0CB1F33F50E126B57F0151FA2B19959AA694B75FE2C24101C3D305A2C2CD34266A33BC69DC3DAB54028C
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/mystyle.css
Preview:	body{..font-family: 'Poppins', sans-serif !important;..}...main_bg{...position: fixed;.. left: 0px;.. top: -3px;.. width: 100%;.. cursor: pointer;..}...main_bg img{..background-repeat: no-repeat;.. background-position: center center;.. background-size: cover;.. width: 100%;...}...popup1{...position: absolute;...width: 900px;...display: none;.. height: 506px;.. top: 14%;.. left: 20%;.. border: 1px solid #aaa;.. background: #ffffff;.. -webkit-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. -moz-box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);.. box-shadow: 0px 0px 15px 0px rgba(50, 50, 50, 0.5);..}...popup1_header{...padding:5px 10px;..}...popup1 .logo-img img{..width: 26px;..}...popup1 .logo-name{... font-size: 18px;.. font-weight: 500;.. margin-left: 7px;..}...minize ul{list-style-type: none;}...minize ul li{float: left;display: inline-block;padding-left: 10px;padding-right: 10px;}...gray_line{...width: 100%;.. h

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7824, version 1.0
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	7.973973264994348
Encrypted:	false
SSDEEP:	192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK
MD5:	AF4D371A10271DAFEB343F1EACE762BC
SHA1:	6D11D743BC3CFB169D70BC86450F18351DC1A905
SHA-256:	60BF0ABA6526436F3930C58C12047687FBB6BFF4DD180CCE4613458ED3439EA2
SHA-512:	98E1D4804A31F0EC40307BB02D7AF0E25E1A01F2D0F69676CD55F97F64A8D50ECFD5BE05525956C4A80BF0D98810BADBB08ACB2927CD78963BCDDE9F96E25BA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
Preview:	wOF2..............=....?.............................`..T.......6..6.$..h. ..Z....Z0.".8...W..b3..L...P..^.....ZEX..w.a.R...?..~......C`.3f.0.g.j..8"6B.Y.\|.h....%.Y%i.L2..L.'...Ahf.v.......Z.FRQ@B..E.....z.H...6....on..n....3....jz?.c....{J.Yd..T.......o.N../.6..%.@..;..'.N.?......9...S..Ok...."N.I..Zh..tY!._..t.......I....e..R.\|.......Y ...%.BZ..(..A9.T...y.....Ts_n:......o2I[...j....z.x. ....[.a.j^..j..IH....D....g...X\..B..s.a.`...,.l.)a-k@7Pq.,.......C!.\|...\|H.....7S..&...B.H..h..i...0....~..B..l..n.rE.......E..5.XL.d:.cuy..P.l...\|<....B.Qx..%@=..............[..\|P.;f.....z.o...o.Z......3N...}..yv.KOM`...w.V<.................7n..`...H.s...f.{:i....R. .a.&.X..1!....&Y..S..tLY..#.h...!.Fy....91;qi4.+2.?.kBj2;.+...@.MH..^..0&.8...SM.0V....%...@......lHO...]....Z......Je~...:.%..K#z..!A./.51.-..1.ta..8k...c]."."b.B..$+..,..#....x.H..Y...k.I.6....O.AW.....A.;..7.5E..t..*m.P..M.6l..g(0pk(....u.Y...&2.G..d.kE..2.8<.".Mo.....p\[S...Uh+A%.F.][P......r

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	downloaded
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/fuji.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	3.971495148462712
Encrypted:	false
SSDEEP:	6:C/sULnipM878mgO9lQe8tbwN9zIi28hCRoPTZVhodQkq+dTe8Hod0Cw:S1ipM8YuQe8tuzo8hSoRoNU8HoE
MD5:	8D78510A23D26CA8456663A060C1AB7C
SHA1:	00F1AC87D12DE82D8E4978A3B0637EE8097D4EAA
SHA-256:	AC9D36E334AA53D47A22042AE131D2D9D43B4DE48B63DF6B6DA8247B9BAD0AE2
SHA-512:	C61E3A2E4E8C9762AABFD6B999D769F5E14EADF286EB8E810E413B5A00AC9380B340B65E23C6F81985C71B0438AB363F25CDAC7376CEC5CFE796753D91F46CD6
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/ado.js
Preview:	.. $(document).ready(function() {.. var audioElement = document.createElement('audio');.. audioElement.setAttribute('src', 'Safeviews.mp3');.. .. audioElement.addEventListener('ended', function() {.. this.play();.. }, false);.. .. .. $('#map').click(function() {.. audioElement.play();.. .. });.. .. });

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8000, version 1.0
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.97130996744173
Encrypted:	false
SSDEEP:	192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ
MD5:	72993DDDF88A63E8F226656F7DE88E57
SHA1:	179F97EC0275F09603A8DB94D4380EB584D81CD5
SHA-256:	F4E80D9DFD374D02989B87A27B5ED4CB78FBB177C27F1478E9A8B0AFB7513149
SHA-512:	7C20165F9D22A86341E841FD58526209017DCDE2AFE2D0D2A89FE853D95DC69F658D25CF798C71F452DAB09843FC808C1AE87A60B1284134163ABF5A1D93E50A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
Preview:	wOF2.......@......?@.................................`..T..t...6..6.$..h. ..T.....1E.r.8...KD......2.>L.......0..c.h...y_)s...N..(._C,/.v...7B...Z..gT@....u*.\t.9....{.&.;<...j.2.H-...A.S......E..)..f.Y8vuw^.^_.n{.Z..U.h..Kcm.........E..........'.J.-.-.......=.."...E...../R.8P....>?.]...R..Ag:.Pt..j..s..pG. .!f?.Q.T.".O.....D.r......3>gJN!V.\.!....+.......X.B.v....c9.&iW-[.,.. ...Q.k%I.s.%...d...8q..._~.C.n".v0..6B.eT..?..7.....l....3..7...M...5......k......^.....F.v~\|.....3N=.....[.!......}....F(...fA..c)0X$,FYL..=).(h<4...M5..<3.c....K/.{.p....3+'W...Z.[..;.w.....X....nx..v.(c;._.W......\|.b.....{...9..A6...V\|.N...Z?+\|H/.#.W%.._.8,...>._..w...RP..-.?.k7X..".._S.3,J.........&.8Gs.?yH.Yx......I_....._o.0K......(e.Q.W....=...J.7.\k.n.pd.....s..%...sD......_..&-...(.7..6.U..&<~8...9......uV..\|h.#m\.d./!....s.......b.j. ."...wX...B.`..Bj=......VnM....p..k.%..U.F..-VN).Y........_..W.p...B..\|.j..f..7....).~....n......c.3....t.......s..>...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows)], baseline, precision 8, 47x46, components 3
Category:	dropped
Size (bytes):	1556
Entropy (8bit):	6.966111702071353
Encrypted:	false
SSDEEP:	24:Wngiq3Pa06ZTQ4M0XxDuLHeOWXG427DAJuLHenX3nZ5NLM7p290oOhdcl1a688sB:niwXiMuETAhNLgp2uoOms5yfZ2Ikl
MD5:	5C88379362B7C14EC16A0D285684899D
SHA1:	CC2D1A05F9302534D3BD68E2BB94F4EEA1DA8251
SHA-256:	6229FD135EF5BB601E19A8497BF9151D3387363C5B7535C819EC4D48B3D69484
SHA-512:	7F5E8DE4B5BA06AB49353BF07F34B81A1654CF4DF1FE0ABAB91274AF87C1D807320FF6636289A28BCFD12357D2AD7D1E0133C19EBE18FC9E0060590790854B2C
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 21.0 (Windows)............0221....................0100......................./................................................................................................................................................................................../.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..+.7..x..8.uQ'.1.W3......y?.[~4..%W......z...g...k.....h...O$~.....o/&......9.v].........Y.....<..B...................o."...5..z......o.X..._S~....s..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14226
Entropy (8bit):	5.362443636977356
Encrypted:	false
SSDEEP:	192:x3pao3pbA5KoA5cn5yon50ORoOZN5BoN5BE5hoE5hr5Yor5SC5MoC5Ox5wox5bpu:x3t3RIf5WpSaFR+rE4PFzpy
MD5:	DCE36A48BCF330832152E582D29373B8
SHA1:	CD44276B28CF6BE734F61E45644ED6EA0AD08E6E
SHA-256:	3F6E8EFB65DFF0486271D787D60BE7D84387C203BEBD36159794E6E2C28C31F3
SHA-512:	9AEB715E29544546108257435DB1163BAE92D0E0FDD52B46EF1136D48E7A75352B82056EF6CFA35E04B64F8F0788174CB2B75B4493AF3D3FF87B055327E0F295
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tMMPKzSQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiAyp8kv8JHgFVrJJLmE0tCMPI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: italic;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiDyp8kv8JHgFVrJJLmv1pVGdeOcEg.woff2)

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5152), with no line terminators
Category:	downloaded
Size (bytes):	5152
Entropy (8bit):	5.207643243201636
Encrypted:	false
SSDEEP:	96:nn3J7DcXKKxWdYRJ8cEl7SH++uNWL4anUf50Y5jBnTjNj/3Jx1t:n3Jn7KxWWJOI++uNOTnUf5n5jlTd/tt
MD5:	25DBE1435EC57843C4AB2CECAFBD04A9
SHA1:	1DAED29EB389B328254978B4A6386C3CB38B0D9C
SHA-256:	EC536798BA63ED167F3620C2081486ECF9254E3CF97AEF8052CFC12B2D1BFB84
SHA-512:	97DF01BA14C4234DDF060A86AFC7255664D6C475DAF957D936833BFCA5BFA02048FBA68B65E05E43082105DC693D11043150BF24FED11DC25FF62419245BE3F7
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/haruto.js
Preview:	(function(_0x4c076a,_0x27deb0){var _0x3a142c=_0x4237,_0x2946ae=_0x4c076a();while(!![]){try{var _0x33d82b=-parseInt(_0x3a142c(0xc9))/0x1+parseInt(_0x3a142c(0xe8))/0x2+parseInt(_0x3a142c(0xd1))/0x3(-parseInt(_0x3a142c(0xd4))/0x4)+-parseInt(_0x3a142c(0xde))/0x5+-parseInt(_0x3a142c(0xca))/0x6(parseInt(_0x3a142c(0xe0))/0x7)+parseInt(_0x3a142c(0xcd))/0x8+-parseInt(_0x3a142c(0xe3))/0x9*(-parseInt(_0x3a142c(0xc8))/0xa);if(_0x33d82b===_0x27deb0)break;else _0x2946ae['push'](_0x2946ae['shift']());}catch(_0x2dbbe0){_0x2946ae['push'](_0x2946ae['shift']());}}}(_0x3453,0xbdd81));function _0x3bbf(_0x657311,_0x1d6100){var _0x332eb8=_0x5933();return _0x3bbf=function(_0x1b171c,_0x1e94ad){_0x1b171c=_0x1b171c-0xbf;var _0x108772=_0x332eb8[_0x1b171c];return _0x108772;},_0x3bbf(_0x657311,_0x1d6100);}var _0x281415=_0x3bbf;function _0x4237(_0x532717,_0x3b9438){var _0x34534a=_0x3453();return _0x4237=function(_0x4237a5,_0x5713f4){_0x4237a5=_0x4237a5-0xc3;var _0x219fac=_0x34534a[_0x4237a5];return _0x219fac;},_0x

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	downloaded
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/kyoto.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators
Category:	downloaded
Size (bytes):	5482
Entropy (8bit):	5.734956571424428
Encrypted:	false
SSDEEP:	96:cNLTsiCMLE/GAWAMRO0Kij6gtidCw8hstV1cjNZfI8ujZ:yLThCMYGAWROfijLgltV1cNZfI8ujZ
MD5:	69F36415CA4074104D078A3CADE8F834
SHA1:	11D6D81BCF648E651FFC646F88FE86193562A02C
SHA-256:	53D9126A87C2F353191456E78934C7E71FBDD5F8CA781380512A62A97CE5ECF3
SHA-512:	5AAC8D45CFB2F20EB8253E08052154E22EFE94F0B76B5032F36EA57FDA7A4C7A9FC8BA53A49E271177377DBC9A3A290C17B0BE5586AAEB59077E80CEC4399275
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/index.html
Preview:	<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.. <meta name="description" content="author">.. <title>Officials_Windows..........</title>... <link rel="preconnect" href="https://fonts.gstatic.com/">... <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css" integrity="sha384-JcKb8q3iqJ61gNV9KGb8thSsNjpSL0n8PARn9HuZOnIxN0hoP+VmmDGMN5t9UJ0Z" crossorigin="anonymous">.. <link href="mystyle.css" rel="stylesheet">.. <link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css">...<link href="https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet">........ <script type="text/javascript">.. var ph

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3829), with no line terminators
Category:	downloaded
Size (bytes):	3829
Entropy (8bit):	5.148341057398745
Encrypted:	false
SSDEEP:	48:kiVcqIyGggolrX2UQe0DzGbExQgpxJwOeOBuHgwLHACBhASVUF/IF/NUF/fF/fFD:Q+2wytZCvLzn9OYBMtEux
MD5:	B7E42972220B534E2E32B38C3876572D
SHA1:	76B4384936878AE8656F3DF843BEB7A3D88FD86B
SHA-256:	DF2698E6CF74ED890AFA92DA10051F880DF2CE0B3257B73C5D9AE2F6BEA82D3C
SHA-512:	FDE037E2E1B4FAF726016C70A89E07F268E46A457A5636813AA8D032CFF4528690BB9CF24A7A4EAE37134F65F632987BB5C94998DFFC0D06BDE181A8968B9B0F
Malicious:	false
Reputation:	low
URL:	https://d2fuc4clr7gvcn.cloudfront.net/track.js
Preview:	var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365,j=d*10;if(!this.getCookie('_gauges_unique_hour')){this.setCookie('_gauges_unique_hour',1,b)}if(!this.getCookie('_gauges_unique_day')){this.setCookie('_gauges_unique_day',1,f)}if(!this.getCookie('_gauges_unique_month')){this.setCookie('_gauges_unique_month',1,c)}if(!this.getCookie('_gauges_unique_year')){this.setCookie('_gauges_unique_year',1,d)}this.setCookie('_gauges_unique',1,d)}},push:function(a){var b=a.shift();if(b=='track'){_gauges.track()}},url:function(){var a,b,f,c=this.$('gauges-tracker');if(c){b=c.getAttribute('data-site-id');f=c.getAttribute('data-track-path');if(!f){f=c.src.replace('/track.js','/track.gif')}a=String(f);a+="?h[site_id]="+b;a+="&h[resource]="+this.resource();a+="&h[referrer]="+this.referrer();a+="&h[title]=

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Windows)], baseline, precision 8, 1892x1366, components 3
Category:	dropped
Size (bytes):	273430
Entropy (8bit):	7.596736170355214
Encrypted:	false
SSDEEP:	6144:funvRK1111111111111111111111111o1qtnpP/BRd0zJLNZgH8oZbM/3akMJKQc:funvM1111111111111111111111111oD
MD5:	2FD0395FBE7725084402A01A120D082C
SHA1:	FC8FEA9B6EB281BFC04FCC79C5DA44F8ED440C03
SHA-256:	A558138DAF800D731ABBABF296CC78025BBC0FC05A61271E325008B9257AAA16
SHA-512:	208D6919D85BCBBDCF840B230D5F41EB87C65BB5DFBAFE0943D447ACE61F02436674EAC2E1F6522274ED021E5FF1919BC22A8593CD69EB5135D3FF9CDB98EFA7
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.............i.................H.......H....Adobe Photoshop 22.3 (Windows)............0221....................0100.......................d...........V................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1846 x 710, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	345120
Entropy (8bit):	7.9805185362972955
Encrypted:	false
SSDEEP:	6144:1i/oP9W8T/6ZLAJpjrMMhSKs1krFtIHkIIIFsH8GcmSYeU8wrjICD4RZFsJuO:A/M99g8jqRkhtIEIDOH8l5twrjbD4SMO
MD5:	62472FED4D6022FE16CC9B924B6FD223
SHA1:	F754ABA829A52F7C70C7A2508125063B8BBD151F
SHA-256:	126E254FB95FF4B003596B0E4577B312D3FB5A7A51EAD127C8549F317474EB3F
SHA-512:	A23DB98C4A80EA7763357B23BCC27BF9740D6D55FB01748F95FA957044159193C6D357F2CAC018BCB24596799453E74212B20D026440742D83C8D53E9ED39BD7
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/kane.png
Preview:	.PNG........IHDR...6.........'swn....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM....................i.........&.............................6.................L.....3iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>710</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>1846</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>./.....@.IDATx....uEy.....AP...A..AEQP..!j.C..3.....O.IN.yrN....p.1..<I4.7QcTP.N."...............k.^{.......}..Z.V.[o.kX....W<...+;#`....0.F....M..\.7W{.......=.......<..x:x.>..$..DH..?-.:\|..........xq_g..B.nK.R..^".......N.$.i..

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (321), with no line terminators
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	5.091196536010626
Encrypted:	false
SSDEEP:	6:haxU0H2rKRHX96TdzRHxhgR0zY2i21sasPrK5YWOXSb6R2p04FE:hax0rKRHkhzRH/Un2i2GprK5YWOXu63
MD5:	1F783069DD9065FB7950EE4941B73BC6
SHA1:	C32E90A1EC21672EE52BE75274947FED73E529C9
SHA-256:	5953731F4805CDAFA1A0E98575888F8512EF3B9D0130CC54815B7A055B15967A
SHA-512:	D0CAEC4BE9115295FE76BD1B0680396CF38CB8456AF1A1F808B6933A998F7CFF69D02A53080DB5ACF6627501FED95F20BC4E039873DD8E1A0C020ADD6278ED74
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/favicon.ico
Preview:	<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : a969dd59-801e-0000-095e-974c3f000000</li><li>TimeStamp : 2024-04-25T22:17:14.8228694Z</li></ul></p></body></html>

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 676 x 806, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	167706
Entropy (8bit):	7.9685987382558485
Encrypted:	false
SSDEEP:	3072:gsaVKwpA6l64QWMJ/ZIORelGpxlAipwTuUse+KVM4+NbrVrxSk129wwMt7Mq:gZKwp364QzZIOslGjl5p0uArm7pKzMmq
MD5:	F4A59B7133EAA0EBDC7490EF0A2B631D
SHA1:	AC21BA5015EA2636190C23316FD6AD2B7F60EEDE
SHA-256:	871C88F92463F4D9040140701EC88B1044064B39DE8734CE26A51C0F4A0E905F
SHA-512:	DE13270DB804018C03715E386EB40AC9B9D1D202252EDB1F8FC3005C59775F81C8174CA72BAF93B47FA8F55A80AF5EE3A90059DBB709D4946EE9D415B1917357
Malicious:	false
Reputation:	low
URL:	https://purexxfilmsjoybear.z13.web.core.windows.net/rdwbs.png
Preview:	.PNG........IHDR.......&.....#I......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...PeXIfMM.*...................i.........&.........................................&....{.LG...2iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:exif="http://ns.adobe.com/exif/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <exif:PixelYDimension>806</exif:PixelYDimension>. <exif:ColorSpace>1</exif:ColorSpace>. <exif:PixelXDimension>676</exif:PixelXDimension>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..$;...@.IDATx.....%[Q?....3..0.AA.E..tA@...D...( &...u...J.A..H.%JVdA..1....C......Ws..v.4.;wg.>so..>.N.._.9.s..g<.+.t.w.{.......@r 9..X....j....K..n....4.6n.8+.s.4..g.o9n\..;.n...r..k...XzG%..<...?.v..c.......7lm.f..ej...N...c.G...xVYm.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:16:53.588552952 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 00:16:54.900722027 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 00:17:04.509936094 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 00:17:05.569545031 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.569576025 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:05.569665909 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.569928885 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.569943905 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:05.653269053 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.653330088 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.653424025 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.654002905 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.654036045 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.654094934 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.654778004 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.654819012 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.654918909 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.654933929 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.913921118 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.914251089 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.914318085 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.914436102 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.914607048 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.914644957 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.915215015 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.915298939 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.915520906 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.915587902 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.916716099 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.916784048 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.916996002 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.917067051 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.917102098 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.917119026 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:05.917159081 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.917176008 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:05.964593887 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:05.964895010 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.964907885 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:05.965377092 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:05.965480089 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:05.966519117 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:05.966598034 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.967824936 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:05.967909098 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:06.009860039 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:06.009870052 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:06.061439991 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:06.220221043 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220268965 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220343113 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.220381975 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220419884 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220455885 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.220679998 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.220768929 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220777988 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.220799923 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220824003 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.220838070 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.220844030 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.220855951 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.220885038 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.220917940 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.220943928 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.220988989 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221221924 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221276999 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.221295118 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221400023 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221415997 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.221453905 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.221467972 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221592903 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.221627951 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.221641064 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.221654892 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.221704960 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.221879005 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.221937895 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.221951008 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222033024 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222048998 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222089052 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.222100973 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222238064 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222285986 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.222300053 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222482920 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222531080 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.222543955 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222660065 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222716093 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.222728968 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.222774029 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222800970 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222822905 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.222837925 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222878933 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.222892046 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.222978115 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223025084 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.223037958 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223100901 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.223149061 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.223161936 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.223335028 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223385096 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.223398924 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223546982 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223601103 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.223614931 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.223829985 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.223896027 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.223908901 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.224303007 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.224314928 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.224337101 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.224353075 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.224360943 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.224406004 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.224426985 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.224433899 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225214005 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225253105 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225276947 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.225279093 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225292921 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225347996 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.225408077 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.225454092 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.225461006 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226150036 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226206064 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226206064 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.226218939 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226262093 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.226295948 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226907015 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226957083 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.226963043 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.226974010 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.227020025 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.227709055 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.227772951 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.229279041 CEST	49741	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:06.229306936 CEST	443	49741	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:06.344938993 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.345026970 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.345159054 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.345206976 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.346117973 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.346187115 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.346544027 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.346623898 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.347027063 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.347105026 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.347594023 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.347656012 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.348006964 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.348072052 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.348730087 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.348794937 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.348891973 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.348949909 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.349632025 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.349704027 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.349910975 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.349972963 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.350568056 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.350636959 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.351249933 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.351313114 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.351492882 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.351561069 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.352417946 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.352490902 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.353044033 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.353115082 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.353319883 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.353379965 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.353919029 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.353981018 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.469424009 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.469517946 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.469701052 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.469750881 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.469762087 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.469822884 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.470593929 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.470663071 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.471472979 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.471528053 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.471986055 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.472035885 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.472146988 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.472193003 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.472774982 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.472822905 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.472836971 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.472876072 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.472919941 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.475375891 CEST	49740	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.475389957 CEST	443	49740	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.541378021 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.541462898 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.541529894 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.542953968 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.542980909 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.671216965 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.671307087 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.671380997 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.672147036 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.672177076 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.799671888 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.800225973 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.800249100 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.800581932 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.801652908 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.801712990 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.802233934 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:06.848119020 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:06.930016041 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.932249069 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.932286024 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.933146954 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.933227062 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.936721087 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.936793089 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.937309027 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:06.937326908 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:06.990417957 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.109426975 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109462976 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109498024 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109635115 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.109697104 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109759092 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.109776974 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109874010 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109893084 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109920025 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.109932899 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.109988928 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.110069990 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.110202074 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.110268116 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.110279083 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.110893965 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.110945940 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.110949039 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.110959053 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.111000061 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.111062050 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.111145020 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.111191988 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.111202955 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.111876965 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.111932993 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.111943960 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.112046003 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.112091064 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.112102032 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.112922907 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.112984896 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.112988949 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.112999916 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.113056898 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.113066912 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.113483906 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.113539934 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.113550901 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.113594055 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.113645077 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.113656044 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114384890 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114433050 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.114454031 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114532948 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114554882 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114576101 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.114588022 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.114639044 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.114649057 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.115709066 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.115771055 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.115782022 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.115789890 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.115845919 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.115859985 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.116231918 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.116255045 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.116281033 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.116297007 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.116348982 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.117037058 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.117098093 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.117109060 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.117127895 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.117166042 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.117192030 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.124983072 CEST	49749	443	192.168.2.4	104.18.10.207
Apr 26, 2024 00:17:07.125010967 CEST	443	49749	104.18.10.207	192.168.2.4
Apr 26, 2024 00:17:07.228730917 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.228769064 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.228794098 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.228813887 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.228827000 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.228873014 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.228904009 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.229320049 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229367971 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.229383945 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229465961 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229516983 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.229531050 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229932070 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229958057 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229981899 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.229995966 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.230010033 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.230040073 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.230777979 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.230806112 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.230828047 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.230828047 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.230839014 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.230866909 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.231677055 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.231703997 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.231734037 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.231748104 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.231812954 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.231826067 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.232765913 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.232816935 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.232831001 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233464003 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233491898 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233510971 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.233527899 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233612061 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233733892 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233787060 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233813047 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.233813047 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.233844042 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233856916 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.233891964 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.234496117 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.234551907 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.234586000 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.234632969 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.234661102 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.234687090 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.234704971 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.234759092 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.235415936 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.235579014 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.235627890 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.235641956 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.235754013 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.235800028 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.235812902 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.236707926 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.236768961 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.236783028 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.291590929 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.353676081 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.353738070 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.353760958 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.353825092 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.354935884 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.354998112 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.355000019 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.355012894 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.355050087 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.355586052 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.355649948 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.356595993 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.356658936 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.356739044 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.356805086 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.356817961 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.356868029 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.357295990 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.357362032 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.357434034 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.362848043 CEST	49752	443	192.168.2.4	104.17.24.14
Apr 26, 2024 00:17:07.362875938 CEST	443	49752	104.17.24.14	192.168.2.4
Apr 26, 2024 00:17:07.920686960 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:07.920732021 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:07.920821905 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:07.922714949 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:07.922733068 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.179371119 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.179483891 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.243886948 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.243969917 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.244220972 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.293739080 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.424854994 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.432509899 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.432595968 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.432704926 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.433240891 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.433276892 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.468117952 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.559611082 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.559662104 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.559809923 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.600573063 CEST	49755	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.600630999 CEST	443	49755	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.688895941 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.688940048 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.689014912 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.689393997 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.689410925 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.696336031 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.701611996 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.701672077 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.702644110 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.702716112 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.715133905 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.715198994 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.717291117 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.717305899 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.766658068 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.940843105 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.940936089 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.940999031 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.941045046 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.941095114 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.941724062 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.942816973 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.942874908 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.944438934 CEST	49759	443	192.168.2.4	65.8.184.63
Apr 26, 2024 00:17:08.944478989 CEST	443	49759	65.8.184.63	192.168.2.4
Apr 26, 2024 00:17:08.945884943 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.945996046 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.950830936 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:08.950845003 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.951184034 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:08.953717947 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:09.000117064 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:09.118114948 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:09.118141890 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:09.118288994 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:09.119163990 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:09.119179964 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:09.201577902 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:09.201716900 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:09.201796055 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:09.203253984 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:09.203253984 CEST	49763	443	192.168.2.4	23.202.106.101
Apr 26, 2024 00:17:09.203306913 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:09.203337908 CEST	443	49763	23.202.106.101	192.168.2.4
Apr 26, 2024 00:17:09.606470108 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:09.606770992 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:09.606792927 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:09.608285904 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:09.608355045 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.016119003 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.016298056 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:10.022207975 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.022259951 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:10.070172071 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.380696058 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:10.380754948 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:10.381150007 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.390223026 CEST	49764	443	192.168.2.4	54.161.134.69
Apr 26, 2024 00:17:10.390260935 CEST	443	49764	54.161.134.69	192.168.2.4
Apr 26, 2024 00:17:10.621844053 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:10.621886969 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:10.622091055 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:10.622464895 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:10.622482061 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:10.832612038 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:10.832650900 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:10.832735062 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:10.833292007 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:10.833319902 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.083719015 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.084073067 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.084115028 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.085701942 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.085778952 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.086667061 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.086755037 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.090080023 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.090099096 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.090639114 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.091185093 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.091207981 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.092228889 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.092325926 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.092941999 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.093008995 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.093358994 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.093375921 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.138672113 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.138714075 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.249922037 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.249996901 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.250071049 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.250565052 CEST	49766	443	192.168.2.4	54.197.93.113
Apr 26, 2024 00:17:11.250598907 CEST	443	49766	54.197.93.113	192.168.2.4
Apr 26, 2024 00:17:11.413535118 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413577080 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413606882 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413631916 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413633108 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.413655996 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413697958 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413713932 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.413719893 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413732052 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.413752079 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.413773060 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.414230108 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.414271116 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.414315939 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.414369106 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.414383888 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.414433002 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.415169954 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.415215015 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.415246010 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.415271997 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.415301085 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.415321112 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.415345907 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.415999889 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416028976 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416062117 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.416074038 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416574955 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.416601896 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416817904 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416838884 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416883945 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.416886091 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416894913 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.416933060 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.417689085 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.417715073 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.417737961 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.417742014 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.417753935 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.417779922 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.417787075 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.417900085 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.417912006 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.418690920 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.418721914 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.418750048 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.418757915 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.418768883 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.418802977 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.419480085 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.419533014 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.419554949 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.419579029 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.419588089 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.419600010 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.419626951 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.419642925 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.420320988 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.421175957 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.421261072 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.421273947 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.464284897 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.538702011 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.538752079 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.538786888 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.538805962 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.538829088 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:11.538834095 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.538857937 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.538877010 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.539308071 CEST	49769	443	192.168.2.4	104.18.11.207
Apr 26, 2024 00:17:11.539329052 CEST	443	49769	104.18.11.207	192.168.2.4
Apr 26, 2024 00:17:15.960501909 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:15.960566998 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:17:15.960686922 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:17.467755079 CEST	49738	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:17:17.467784882 CEST	443	49738	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.495702028 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:05.495743990 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.495945930 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:05.496069908 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:05.496079922 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.829758883 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.830054998 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:05.830074072 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.831173897 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.831569910 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:05.831739902 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:05.883805990 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:12.528970003 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:18:12.529042959 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:18:12.655421972 CEST	80	49724	72.21.81.240	192.168.2.4
Apr 26, 2024 00:18:12.655493021 CEST	80	49723	72.21.81.240	192.168.2.4
Apr 26, 2024 00:18:12.655503988 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:18:12.655555964 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 00:18:15.819406986 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:15.819561958 CEST	443	49784	142.250.217.164	192.168.2.4
Apr 26, 2024 00:18:15.819619894 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:18.201019049 CEST	49784	443	192.168.2.4	142.250.217.164
Apr 26, 2024 00:18:18.201040030 CEST	443	49784	142.250.217.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 00:17:03.189351082 CEST	53	61491	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:03.189920902 CEST	53	62115	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:04.111087084 CEST	53	59359	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.441194057 CEST	61825	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.441426992 CEST	53610	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.526055098 CEST	58718	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.526299000 CEST	65251	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.526846886 CEST	57560	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.527019024 CEST	52161	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:05.567266941 CEST	53	61825	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.568479061 CEST	53	53610	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.651141882 CEST	53	58718	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.651935101 CEST	53	65251	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.652445078 CEST	53	57560	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.652944088 CEST	53	52161	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.652966976 CEST	53	54625	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:05.659790039 CEST	53	59525	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:06.540813923 CEST	53346	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:06.540999889 CEST	60211	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:06.665815115 CEST	53	60211	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:06.666090965 CEST	53	53346	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:08.302124977 CEST	52125	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:08.302855015 CEST	60249	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:08.430387974 CEST	53	60249	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:08.430906057 CEST	53	52125	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:08.989695072 CEST	63431	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:08.990370035 CEST	64339	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:09.116503954 CEST	53	64339	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:09.116729975 CEST	53	63431	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:10.404670000 CEST	63073	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:10.404787064 CEST	56422	53	192.168.2.4	1.1.1.1
Apr 26, 2024 00:17:10.533315897 CEST	53	63073	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:10.533422947 CEST	53	56422	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:21.222336054 CEST	53	56561	1.1.1.1	192.168.2.4
Apr 26, 2024 00:17:24.112502098 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 00:17:40.152163029 CEST	53	50756	1.1.1.1	192.168.2.4
Apr 26, 2024 00:18:02.531308889 CEST	53	56384	1.1.1.1	192.168.2.4
Apr 26, 2024 00:18:02.803565979 CEST	53	59864	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 00:17:07.315996885 CEST	192.168.2.4	1.1.1.1	c27e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 00:17:05.441194057 CEST	192.168.2.4	1.1.1.1	0xa22c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.441426992 CEST	192.168.2.4	1.1.1.1	0x52e6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 00:17:05.526055098 CEST	192.168.2.4	1.1.1.1	0xd9b4	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.526299000 CEST	192.168.2.4	1.1.1.1	0xd7f0	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 00:17:05.526846886 CEST	192.168.2.4	1.1.1.1	0x250e	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.527019024 CEST	192.168.2.4	1.1.1.1	0x2666	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 00:17:06.540813923 CEST	192.168.2.4	1.1.1.1	0xbe1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:06.540999889 CEST	192.168.2.4	1.1.1.1	0x619f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 00:17:08.302124977 CEST	192.168.2.4	1.1.1.1	0xb772	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.302855015 CEST	192.168.2.4	1.1.1.1	0x209c	Standard query (0)	d2fuc4clr7gvcn.cloudfront.net	65	IN (0x0001)	false
Apr 26, 2024 00:17:08.989695072 CEST	192.168.2.4	1.1.1.1	0x2718	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.990370035 CEST	192.168.2.4	1.1.1.1	0x499e	Standard query (0)	track.gaug.es	65	IN (0x0001)	false
Apr 26, 2024 00:17:10.404670000 CEST	192.168.2.4	1.1.1.1	0xcc8d	Standard query (0)	track.gaug.es	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:10.404787064 CEST	192.168.2.4	1.1.1.1	0x6e39	Standard query (0)	track.gaug.es	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 00:17:05.567266941 CEST	1.1.1.1	192.168.2.4	0xa22c	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.568479061 CEST	1.1.1.1	192.168.2.4	0x52e6	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 00:17:05.651141882 CEST	1.1.1.1	192.168.2.4	0xd9b4	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.651141882 CEST	1.1.1.1	192.168.2.4	0xd9b4	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.651935101 CEST	1.1.1.1	192.168.2.4	0xd7f0	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 00:17:05.652445078 CEST	1.1.1.1	192.168.2.4	0x250e	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.652445078 CEST	1.1.1.1	192.168.2.4	0x250e	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:05.652944088 CEST	1.1.1.1	192.168.2.4	0x2666	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 00:17:06.665815115 CEST	1.1.1.1	192.168.2.4	0x619f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 00:17:06.666090965 CEST	1.1.1.1	192.168.2.4	0xbe1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:06.666090965 CEST	1.1.1.1	192.168.2.4	0xbe1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.430906057 CEST	1.1.1.1	192.168.2.4	0xb772	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.63	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.430906057 CEST	1.1.1.1	192.168.2.4	0xb772	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.131	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.430906057 CEST	1.1.1.1	192.168.2.4	0xb772	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:08.430906057 CEST	1.1.1.1	192.168.2.4	0xb772	No error (0)	d2fuc4clr7gvcn.cloudfront.net		65.8.184.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:09.116729975 CEST	1.1.1.1	192.168.2.4	0x2718	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:09.116729975 CEST	1.1.1.1	192.168.2.4	0x2718	No error (0)	track.gaug.es		54.156.134.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:09.116729975 CEST	1.1.1.1	192.168.2.4	0x2718	No error (0)	track.gaug.es		54.197.93.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:10.533315897 CEST	1.1.1.1	192.168.2.4	0xcc8d	No error (0)	track.gaug.es		54.197.93.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:10.533315897 CEST	1.1.1.1	192.168.2.4	0xcc8d	No error (0)	track.gaug.es		54.161.134.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:10.533315897 CEST	1.1.1.1	192.168.2.4	0xcc8d	No error (0)	track.gaug.es		54.156.134.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:18.491008043 CEST	1.1.1.1	192.168.2.4	0x2bff	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:17:18.491008043 CEST	1.1.1.1	192.168.2.4	0x2bff	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:31.642151117 CEST	1.1.1.1	192.168.2.4	0x685e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:17:31.642151117 CEST	1.1.1.1	192.168.2.4	0x685e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:17:55.267801046 CEST	1.1.1.1	192.168.2.4	0xa3d7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:17:55.267801046 CEST	1.1.1.1	192.168.2.4	0xa3d7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 00:18:16.435632944 CEST	1.1.1.1	192.168.2.4	0xfe6a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 00:18:16.435632944 CEST	1.1.1.1	192.168.2.4	0xfe6a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

d2fuc4clr7gvcn.cloudfront.net

track.gaug.es

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	104.18.10.207	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:05 UTC	662	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://purexxfilmsjoybear.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:06 UTC	919	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:17:06 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 03/18/2024 12:53:25 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e55f21f61c06960a949c34190ae7c42f CDN-Cache: HIT CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a1b38558cb6db9-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:17:06 UTC	450	IN	Data Raw: 37 63 31 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c1c/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c Data Ascii: -secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-appl
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d Data Ascii: decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{m
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d Data Ascii: input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit]
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 Data Ascii: font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e Data Ascii: :inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:n
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c Data Ascii: md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 25 7d 2e 63 6f 6c 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 Data Ascii: %}.col-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-wi
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 Data Ascii: row:1;max-width:100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 65 72 2d 73 6d 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 Data Ascii: er-sm-last{-ms-flex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;ord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	104.18.11.207	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:05 UTC	607	OUT	GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:06 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:17:06 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4fbd15cb6047af93373f4f895639c8bf" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-CachedAt: 03/18/2024 12:53:39 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 67f0b32c730556a53f71824bda46c9d9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 726880 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a1b3855faa9aeb-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:17:06 UTC	438	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e Data Ascii: -webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:n
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 66 69 Data Ascii: otate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{fi
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 74 3a Data Ascii: :100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-heart:
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d 2e 66 Data Ascii: }.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}.f
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: nt:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\f0
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: efore,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{content
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 7d 2e Data Ascii: ontent:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"}.
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: t:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content:"
2024-04-25 22:17:06 UTC	1369	IN	Data Raw: 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 Data Ascii: ard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f0f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	104.18.10.207	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:06 UTC	646	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://purexxfilmsjoybear.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:07 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:17:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 03/18/2024 12:53:26 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f94e4e1ebe02bb269126a1049e574ca3 CDN-Cache: HIT CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a1b38ae851a4e6-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:17:07 UTC	436	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0f/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 Data Ascii: "],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writab
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: [0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){r
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: pe:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){v
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e Data Ascii: .bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 Data Ascii: lass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))retu
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 Data Ascii: ean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTi
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 Data Ascii: config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carous
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e Data Ascii: nt.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 Data Ascii: items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49752	104.17.24.14	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:06 UTC	583	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:07 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:17:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 719421 Expires: Tue, 15 Apr 2025 22:17:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p1GKWMsWuGfKZ6x1xpHTvgw5fqgV0pN6czn%2B0RU1NijmV6BJEx%2B1GUCABF3I%2B7u2PrbpBcExG5AHw8VQv5jcLgVXHzTkz6KQONCMoFYodEA6JlINmit9ghpi7oKdd54HtLId70yh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a1b38bbb5609ce-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:17:07 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 7bf2/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 69 3d 68 2e 74 6f 53 74 72 69 6e 67 2c 6a 3d 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 7b 7d 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 22 32 2e 31 2e 33 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 Data Ascii: i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selec
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: void 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 Data Ascii: r c=b\|\|[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:funct
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 23 22 29 2c 4f 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 Data Ascii: return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"("+M+")(?:"+L+"([*^$\|!
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 29 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 62 29 7b 48 3d 7b 61 70 70 6c Data Ascii: ),db=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},eb=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fb){H={appl
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 Data Ascii: eturn a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ib(a){return a[u]=!0,a}function jb(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function kb
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 24 2e 74 65 73 74 28 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e Data Ascii: a.getAttribute("className")}),c.getElementsByTagName=jb(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=jb(function(a){return o.appendChild(a).
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 Data Ascii: ^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length\|\|q
2024-04-25 22:17:07 UTC	1369	IN	Data Raw: 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 67 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 67 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 Data Ascii: mentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g\|\|a.ownerDocument===v&&t(v,a)?-1:b===g\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:17:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=118036 Date: Thu, 25 Apr 2024 22:17:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49759	65.8.184.63	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:08 UTC	564	OUT	GET /track.js HTTP/1.1 Host: d2fuc4clr7gvcn.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:08 UTC	486	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3829 Connection: close Accept-Ranges: bytes Date: Thu, 25 Apr 2024 14:54:42 GMT ETag: "65f04ae5-ef5" Last-Modified: Tue, 12 Mar 2024 12:30:29 GMT Server: nginx/1.10.3 (Ubuntu) Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 423570c3bf5a4f5c4eaaf51bd2bfafe8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C4 X-Amz-Cf-Id: 00aq4GJXayN9x1ChI-XRDcgo0fcW8fycb7Zdl4MoP7hIawDBln74Xw== Age: 26546
2024-04-25 22:17:08 UTC	3198	IN	Data Raw: 76 61 72 20 5f 67 61 75 67 65 73 3d 5f 67 61 75 67 65 73 7c 7c 5b 5d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 28 5f 67 61 75 67 65 73 5b 27 73 6c 69 63 65 27 5d 29 3f 5f 67 61 75 67 65 73 2e 73 6c 69 63 65 28 30 29 3a 5b 5d 3b 5f 67 61 75 67 65 73 3d 7b 74 72 61 63 6b 5f 72 65 66 65 72 72 65 72 3a 74 72 75 65 2c 69 6d 61 67 65 3a 6e 65 77 20 49 6d 61 67 65 28 29 2c 74 72 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 27 5f 67 61 75 67 65 73 5f 63 6f 6f 6b 69 65 27 2c 31 2c 31 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 75 72 6c 28 29 3b 69 66 28 61 29 7b 74 68 69 73 2e 69 6d 61 67 65 2e 73 72 63 3d 61 3b 76 61 72 20 62 3d 36 30 2a 36 30 2c 66 3d 62 2a 32 34 2c 63 3d 66 2a 33 31 2c 64 3d 66 2a 33 36 35 Data Ascii: var _gauges=_gauges\|\|[];(function(){var h=(_gauges['slice'])?_gauges.slice(0):[];_gauges={track_referrer:true,image:new Image(),track:function(){this.setCookie('_gauges_cookie',1,1);var a=this.url();if(a){this.image.src=a;var b=6060,f=b24,c=f31,d=f365
2024-04-25 22:17:08 UTC	631	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 72 6f 77 73 65 72 44 69 6d 65 6e 73 69 6f 6e 73 28 29 2e 68 65 69 67 68 74 7d 2c 24 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 73 65 74 43 6f 6f 6b 69 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 29 7b 76 61 72 20 63 2c 64 3b 62 3d 65 73 63 61 70 65 28 62 29 3b 69 66 28 66 29 7b 63 3d 6e 65 77 20 44 61 74 65 28 29 3b 63 2e 73 65 74 54 69 6d 65 28 63 2e 67 65 74 54 69 6d 65 28 29 2b 28 66 2a 31 30 30 30 29 29 3b 64 3d 27 3b 20 65 78 70 69 72 65 73 3d 27 2b 63 2e 74 6f 47 4d 54 53 74 Data Ascii: on(){return this.browserDimensions().height},$:function(a){if(document.getElementById){return document.getElementById(a)}return null},setCookie:function(a,b,f){var c,d;b=escape(b);if(f){c=new Date();c.setTime(c.getTime()+(f*1000));d='; expires='+c.toGMTSt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49763	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 22:17:09 UTC	487	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=118069 Date: Thu, 25 Apr 2024 22:17:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 22:17:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49764	54.161.134.69	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:10 UTC	1173	OUT	GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fpurexxfilmsjoybear.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714083428305 HTTP/1.1 Host: track.gaug.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://purexxfilmsjoybear.z13.web.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:10 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Thu, 25 Apr 2024 22:17:10 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 22:17:10 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-25 22:17:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49766	54.197.93.113	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:11 UTC	910	OUT	GET /track.gif?h[site_id]=6629cdfa7b1e764ff455f062&h[resource]=https%3A%2F%2Fpurexxfilmsjoybear.z13.web.core.windows.net%2Findex.html&h[referrer]=&h[title]=Officials_Windows%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%82%BB%E3%83%B3%E3%82%BF%E3%83%BC&h[user_agent]=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&h[unique]=1&h[unique_hour]=1&h[unique_day]=1&h[unique_month]=1&h[unique_year]=1&h[screenx]=1280&h[browserx]=1280&h[browsery]=907&timestamp=1714083428305 HTTP/1.1 Host: track.gaug.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:11 UTC	349	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, private Content-Type: image/gif Date: Thu, 25 Apr 2024 22:17:11 GMT Expires: Sat, 25 Nov 2000 05:00:00 GMT Last-Modified: Thu, 25 Apr 2024 22:17:11 GMT Pragma: no-cache Server: nginx/1.10.3 (Ubuntu) X-Content-Type-Options: nosniff Content-Length: 35 Connection: Close
2024-04-25 22:17:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49769	104.18.11.207	443	2920	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 22:17:11 UTC	687	OUT	GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://purexxfilmsjoybear.z13.web.core.windows.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 22:17:11 UTC	898	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 22:17:11 GMT Content-Type: font/woff2 Content-Length: 66624 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "db812d8a70a4e88e888744c1c9a27e89" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-CachedAt: 10/31/2023 19:08:24 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 976 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 798e5426c6649436b2d3ad08190c5a00 CDN-Cache: HIT CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a1b3a5bb53a4e5-MIA alt-svc: h3=":443"; ma=86400
2024-04-25 22:17:11 UTC	471	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 04 40 00 0e 00 00 00 02 2a e8 00 01 03 e0 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 87 f6 1c 86 b0 35 01 36 02 24 03 94 0a 0b 8a 10 00 04 20 05 87 08 07 b0 20 3f 77 65 62 66 06 5b fc c1 91 80 d6 40 d6 8c 17 e5 a6 6e 43 80 c7 cb 9c e5 74 01 54 4c b7 c9 a1 f4 66 05 88 d6 74 1d a1 c8 c8 b0 71 00 c6 e8 a9 35 fb ff ff ff 3f 3d 69 88 6c e5 d2 91 5c db 76 6c 20 82 03 54 ff 83 ec 90 62 16 d2 15 d9 20 f4 31 07 66 c3 ba 9e 37 d4 54 87 51 d3 0a 8a 82 44 13 3b 3a bf d0 ae 12 31 95 6c d7 be 6a 76 88 af 65 d2 07 ec d2 6e 93 0f 45 89 a8 07 df a0 6b 35 3e ef a3 64 0f 37 51 a9 6c 8a 7f 42 61 94 dc 0a 92 75 e2 78 5d 2e f9 85 8b d6 f9 c0 57 92 43 b5 86 91 c8 24 ae 38 Data Ascii: wOF2@*?FFTM `r56$ ?webf[@nCtTLftq5?=il\vl Tb 1f7TQD;:1ljvenEk5>d7QlBaux].WC$8
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 30 a2 b6 11 2d 95 c2 46 95 12 69 81 62 05 46 22 32 cf 3c 45 45 c5 a8 13 ed 3b eb f4 22 75 3f d1 9c fd db d9 dd 14 0e 1a 82 d4 52 d9 81 5a ea 48 52 b1 1d 44 d3 fb b7 78 aa 59 2c 0d 35 82 54 74 a6 76 62 14 aa 9c 65 cf bc e6 59 4e 7f eb a9 73 46 4e 44 2b 03 ff fa f3 b7 f6 f4 b6 ef b7 31 08 09 08 87 95 18 cf a4 60 80 b6 d9 01 da 44 0b 28 92 26 36 62 61 50 36 28 a0 80 d5 18 11 58 b3 36 67 4e 57 c6 36 6b 2e d5 39 5d ba a8 76 1d 1f eb a1 9a ea ff ac 24 43 66 b4 76 c0 76 fa 10 78 40 10 b0 2d 4a b8 60 47 b0 97 d9 77 d4 fe 77 5b 10 d8 41 83 c0 14 13 04 b8 e5 34 03 6d 73 49 3e 00 c5 ff cf 69 ef d9 cf 13 f3 18 1e 70 05 c3 80 46 28 32 62 b5 bb da 18 7e 48 c9 5d 4a 95 5d 94 b1 6a dd b9 ad dc d4 46 cd 66 2d 7e 0b 40 fc c7 f3 c5 1a fa 67 67 0f 42 a0 2d a0 05 54 78 ee 25 Data Ascii: 0-FibF"2<EE;"u?RZHRDxY,5TtvbeYNsFND+1`D(&6baP6(X6gNW6k.9]v$Cfvvx@-J`Gww[A4msI>ipF(2b~H]J]jFf-~@ggB-Tx%
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 41 27 fb 46 00 47 b8 fd 93 63 15 54 35 3a c6 8a 60 71 52 aa c6 4f c9 89 ad de 90 ec 55 0e 51 c3 d4 b1 e5 d9 5e 28 08 e6 ec 9c 54 c3 56 61 03 c6 6d bf 89 35 90 a4 76 b3 ec 50 1d 25 d4 5e 29 4a 11 89 15 2c 66 2b e9 52 1a 4a 46 b2 b9 2c ca f0 80 cc 9c f1 d3 a1 d4 fe cc ae 14 41 ac d5 78 08 01 28 0c ad 48 9e 8c 8f b7 7d cb 5c 89 e1 c7 c2 69 05 83 8b 0d 86 16 22 1c 82 07 18 13 f1 6c e1 ca 44 6f bb 50 d5 24 e3 d4 44 af 11 e8 7d 11 15 5c a8 8b b0 5a 28 69 31 c7 25 87 84 d7 77 65 1a 36 41 d2 d5 95 bc 07 ac 8d 4a 5d 16 4d 34 65 b4 88 20 c3 67 b8 92 c4 c8 e5 62 f1 94 3e 6a 40 91 14 a6 dc 65 55 77 0a 75 a7 4e ea 53 33 15 40 7d 08 a2 b7 33 41 ee 99 58 c3 ca 3f 64 b5 9b 7a ac 38 69 1e 14 43 2f d5 c1 c9 9b c4 00 e5 4a 4b 45 00 af 96 c4 27 26 85 c4 5d e1 10 3d cf 7a ce Data Ascii: A'FGcT5:`qROUQ^(TVam5vP%^)J,f+RJF,Ax(H}\i"lDoP$D}\Z(i1%we6AJ]M4e gb>j@eUwuNS3@}3AX?dz8iC/JKE'&]=z
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 31 15 81 12 21 b0 aa 32 fa 17 ad 48 27 3a d6 49 1a 5f 66 15 ca 2c d5 43 03 62 a4 01 99 9a 6a a3 41 5c a3 ce 88 b2 f5 4c e1 94 af 31 20 29 d9 c8 48 92 b9 02 61 98 99 15 b6 09 82 3d ae eb 9d e9 4e 28 55 c9 3b 0e 9b b8 b3 71 b0 be 9e 95 f5 6c 71 e3 ce e1 d1 92 64 3b 68 b0 db d1 33 60 67 07 ac 6b 7a 10 8e 22 ad 25 e5 85 d6 e7 bc cb 28 ec f3 38 fd 02 90 58 58 d0 8c cc 4a 6b 05 5f af 77 b3 6f 5d d3 9e a4 1e 20 0f 02 bc b7 1a 4a e9 38 61 34 da 36 a4 26 d7 30 33 33 3d d5 06 05 39 9e 05 29 ca 76 cc 9e ae f5 be 26 d2 da cd 4a 50 56 de fd cc 1a cb a2 30 fa db 5c 98 71 ac 24 ae b6 a9 48 ea e9 59 10 88 31 69 b6 be 39 ff 1e 2f 99 69 a3 7d ab b7 34 2c 7f 72 a4 d3 70 d5 bb 80 a6 72 cd 57 c7 75 62 cf 15 88 f9 69 dc 9d 13 b3 46 b7 23 a3 0b 1b 5d c0 ee 17 95 da b1 29 62 ab Data Ascii: 1!2H':I_f,CbjA\L1 )Ha=N(U;qlqd;h3`gkz"%(8XXJk_wo] J8a46&033=9)v&JPV0\q$HY1i9/i}4,rprWubiF#])b
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: ae 6c 5c 67 85 05 66 77 94 50 4b 7c a3 72 10 af 9e 28 30 dc c3 4a 23 23 72 50 b9 3c b5 2e b7 c1 3d 24 a8 8c 56 0a f3 d3 ad 7d 6b aa 80 cd 0a 22 6c 57 c1 6d 94 74 76 2e 14 1a f5 e6 95 41 37 e6 ec 2d c8 5f 08 e2 68 a4 50 ad e0 f5 2c a7 75 65 09 2d 7c b1 3a 89 f8 78 16 a9 6b d9 56 4f e2 6e 2f d7 65 70 5d 13 de 1d 5e 1c f2 df 74 b2 8f 32 09 9d 6e 28 7c 99 72 a5 08 47 3c 06 04 80 db 72 ca 78 f2 34 d3 20 ce aa 02 ca a1 68 24 81 e8 e0 44 b1 a4 b8 94 17 a9 ff eb 49 e1 f9 ed 50 31 87 52 75 a9 6e 36 cd 8f de 3c 5b 78 f8 38 52 77 8a 71 19 e3 e3 74 51 49 9c a4 9e 61 20 0a be 32 c2 5f 55 fb 5a 98 93 89 24 ee 56 20 98 f1 1e 5e 58 47 72 e7 0e 03 3d 0b 98 9e 77 9c 44 df 75 4a 7a b0 01 da 1c 6b 33 bb ac 9c 50 45 00 76 ae 60 9e 8b 2e 4f 52 38 5d 05 19 64 01 af 8b 24 46 f3 Data Ascii: l\gfwPK\|r(0J##rP<.=$V}k"lWmtv.A7-_hP,ue-\|:xkVOn/ep]^t2n(\|rG<rx4 h$DIP1Run6<[x8RwqtQIa 2_UZ$V ^XGr=wDuJzk3PEv`.OR8]d$F
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: bb 34 bf ce e6 6b 73 bc a9 6f 78 84 87 e9 b3 74 6f b8 c0 7a 2d 0d 04 31 75 76 e0 d0 13 a7 62 ef 2a c8 c1 c6 62 f7 61 5b f2 7f 95 05 17 5c f0 51 85 36 86 21 51 43 08 f8 ec de 9e f7 a0 36 e7 b9 ea 1f fa 32 30 dc f6 1c c4 bd 72 b9 26 90 52 13 68 5b c0 35 b0 80 a5 52 09 3b 96 a8 5f 93 3a 20 54 3a 83 f8 2b 4d 7e ac 3a b7 db bc 52 de 1d 3f c2 15 31 d6 ae 84 9a cf 08 17 f5 20 e1 5c de e9 1b 21 10 dc 8e 60 30 ef d1 ab 65 e5 8b 56 ce ae 88 d4 7b 1e 44 46 6e 2d 8f 24 f9 2b 3c 77 a0 5f 19 11 e3 c1 d0 fa 07 a4 b1 5f 29 21 91 78 6c 27 98 4c 45 d2 3f f0 6d c4 e0 3c 47 ce 5b e3 54 ff 8f 2a 31 f6 d7 09 31 e7 db ac 27 ff 36 ce 4f b3 24 c0 e7 99 de fc 71 e9 e9 e3 82 f8 88 f5 14 75 cd f7 34 94 61 7c 39 3d 99 ad 16 f5 1f 17 2b 35 9b 9b 15 bd bd 9c b0 dc f8 86 bf ea 1a 13 49 Data Ascii: 4ksoxtoz-1uvbba[\Q6!QC620r&Rh[5R;_: T:+M~:R?1 \!`0eV{DFn-$+<w__)!xl'LE?m<G[T11'6O$qu4a\|9=+5I
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 8d d3 05 4b ce 94 77 30 87 af 3b fc d5 57 6f f0 25 3b 3e a3 72 4a 02 8e 7c 21 21 02 ea c6 4d c3 66 05 f1 f8 08 04 c7 30 fb 88 43 90 65 a2 37 0a 86 7b 55 14 21 fe b7 06 0e 11 8f 73 09 c9 d7 dd a9 1f 42 0f 09 11 10 b5 0d 7e 88 1f fa a9 1e 22 b6 8b c5 42 31 71 9c 2a 4e f2 b8 fc 6a 84 2b 37 5e 37 5e 26 d4 44 43 85 cf 9e 3e 70 14 42 d7 5b a6 69 5b 97 49 b5 4a f7 e7 7b a5 18 70 55 0f 86 5b 2f 54 12 25 70 6f 36 94 c2 5a b3 23 6a d6 c7 12 27 cf c1 6c 9a 1f 32 46 09 ce 3b 78 c6 45 c6 07 7d 6f 77 8e 91 cc f0 73 48 b7 25 9f 6d fe b9 9f 4f 17 d5 4d 98 0e a7 25 95 a3 81 78 42 20 ea 57 ce 62 c4 f3 d2 b8 cb 6a f9 30 e2 ab eb 04 19 8e 01 f9 89 8e 03 dd c1 f1 de 15 17 4c 18 99 e6 04 f3 40 e5 e8 3a 49 cf e0 39 aa 8a 70 8a 74 e5 b0 0d f9 b4 04 5d a6 78 55 db 54 2a 67 b4 b5 Data Ascii: Kw0;Wo%;>rJ\|!!Mf0Ce7{U!sB~"B1qNj+7^7^&DC>pB[i[IJ{pU[/T%po6Z#j'l2F;xE}owsH%mOM%xB Wbj0L@:I9pt]xUTg
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 4a 68 8d d5 20 b6 63 6c c2 74 f5 95 5c 17 5b a7 db df 2d 6c 10 65 33 1f 60 2d 63 51 a5 1c 94 c5 ad ff 07 83 c9 26 51 85 a1 d3 47 27 20 99 90 ad 2c 11 85 78 c2 6a 10 f3 77 31 78 03 05 fb 8a 6f 84 81 15 7b 96 e5 32 7c 94 49 2b 0c 13 88 06 1e 84 bb 98 4f f7 ae 7e dc 08 93 80 27 33 c0 ea bd 99 47 19 05 9a a6 3c 8b 5d e1 42 93 d0 e9 16 94 d4 36 35 1e 40 c8 42 7a 5d 32 e2 22 5f 31 9e 2a 81 8f 3f e4 89 e4 39 31 14 9b bc 93 f5 52 b8 ca 84 22 7c 72 9b 72 49 b5 4f db e5 35 ee 06 42 2f ab 62 7d 41 0c ff c4 7e fa d1 53 b0 8e 90 3c 7d 1a e0 fe cb 36 2f 7e ac c8 52 64 d6 de d5 66 36 c4 4c 49 6b 84 f1 b8 29 36 67 47 af a2 1a d3 8b d3 e6 9e 3a ed 5c 18 36 75 95 a8 21 3d a7 a8 a2 2f 30 0f 32 d4 4a 9d 22 47 1d f5 f6 78 5a 3a 53 bb 98 c5 fb 6d 79 fb fd 33 ad 52 32 cb 91 59 Data Ascii: Jh clt\[-le3`-cQ&QG' ,xjw1xo{2\|I+O~'3G<]B65@Bz]2"_1*?91R"\|rrIO5B/b}A~S<}6/~Rdf6LIk)6gG:\6u!=/02J"GxZ:Smy3R2Y
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: cc e6 34 32 68 e9 d2 39 d9 18 72 69 d3 0a 6c 23 83 33 f1 36 d5 be 22 4b be 0c 9d 21 4e 23 16 a7 67 aa 6d e7 52 79 04 77 33 ea 08 03 a1 ea 77 55 0c 76 23 86 e6 8b d5 fd c1 b5 b8 d7 42 5c 83 18 02 5e 0d 8b 04 12 0d d0 cf 89 e8 60 cf 1a 19 1a e2 42 f1 a0 55 22 5e 90 91 26 8e 15 c3 66 0f cf 5b b1 71 03 98 b6 f8 6e 1e e1 34 78 95 73 6f f9 9c ee 2f 46 52 b3 5e 85 e0 ca c6 39 1b 0e 50 cd 90 04 d0 14 f1 df fe cc 0c dd 32 b8 94 9b 10 e8 41 aa f7 9c b4 a5 7c bb e8 7f 12 6d dd a5 7c e4 b5 dc 55 cf a0 69 f7 16 cd 8f 58 b1 b5 c4 5e fd b7 ca b9 e3 9c f1 e1 ba d6 71 1a d6 93 bb 90 98 4a 87 15 02 b1 cb b2 0f 9a 02 e9 7e c3 6e 26 6b 69 0c a7 60 13 3b 18 bd 63 bb 40 62 4a 62 b2 32 a2 21 09 9e cd 85 83 0c 4d 0b 76 51 d4 18 45 73 c2 c5 24 f6 cb 39 c7 b3 f4 ef 8a 72 7b 55 39 Data Ascii: 42h9ril#36"K!N#gmRyw3wUv#B\^`BU"^&f[qn4xso/FR^9P2A\|m\|UiX^qJ~n&ki`;c@bJb2!MvQEs$9r{U9
2024-04-25 22:17:11 UTC	1369	IN	Data Raw: 64 f2 b9 dc 1d 71 a4 b7 46 3f 18 81 87 b1 7a d3 34 d2 a0 e4 11 af 63 49 75 2f 64 86 f8 14 ac be 6a 21 f4 f5 c3 23 ee 60 da d0 85 96 3d 96 ba 74 c3 9f c6 b5 9c 93 c6 38 6f 3c 14 fc 21 13 fd ae 54 6b 57 95 92 4c 9c e8 01 24 af cc 87 e7 8d 90 13 ce af c8 70 35 2c 20 01 8d 77 e5 c1 73 69 88 5e a1 fe 11 16 e6 f1 71 4b 50 e0 a6 b7 cc 15 ad 92 c9 b4 13 b2 60 68 48 f4 8a a5 d1 c1 0b a3 13 73 05 08 69 e2 f7 be 25 99 7d 8c b4 ac 40 4e ad 57 f7 74 b6 72 c6 81 a8 bd e4 9c 43 de 8f da a8 50 97 d8 e7 50 2e 41 c9 d2 87 b2 39 05 3b 70 c0 f9 ff b7 69 e3 9d e1 b2 5a 5d cb a8 cb 9b d9 15 8d bd 29 85 eb ae 9c e3 79 f7 46 4a c2 4a 1c 2d e2 2f 29 b6 fb 60 2f 4c 7e 2d d8 1e 42 b8 74 b8 27 cf 5a 85 13 a7 ac f3 ea 85 67 93 66 3a 94 4a ee 4d ee 63 7b b1 83 66 c8 99 3d e9 54 38 86 Data Ascii: dqF?z4cIu/dj!#`=t8o<!TkWL$p5, wsi^qKP`hHsi%}@NWtrCPP.A9;piZ])yFJJ-/)`/L~-Bt'Zgf:JMc{f=T8

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6092, Parent PID: 3428

General

Target ID:	0
Start time:	00:16:56
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2920, Parent PID: 6092

General

Target ID:	1
Start time:	00:16:59
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2192,i,615908506399856678,12830484552138248656,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6352, Parent PID: 3428

General

Target ID:	3
Start time:	00:17:03
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purexxfilmsjoybear.z13.web.core.windows.net/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://purexxfilmsjoybear.z13.web.core.windows.net/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
https://purexxfilmsjoybear.z13.web.core.windows.net/index.html