Edit tour

Windows Analysis Report
http://lingos.netdimensions.com/lingos

Overview

General Information

Sample URL:	http://lingos.netdimensions.com/lingos
Analysis ID:	1432133
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lingos.netdimensions.com/lingos" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Number of links: 1
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Number of links: 0
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Number of links: 1

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Title: Learning Platform does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Title: Reset user password: PeopleFluent LMS does not match URL
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Title: Learning Platform does not match URL

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: Has password / email / username input fields
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: Has password / email / username input fields

Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: On click: self.history.back();

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: <input type="password" .../> found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: <input type="password" .../> found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="author".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="author".. found

Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/resetpassword	HTTP Parser: No <meta name="copyright".. found
Source: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:53 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 13:13:56 GMTServer: ApacheLast-Modified: Fri, 11 Mar 2022 19:39:54 GMTAccept-Ranges: bytesVary: Accept-Encoding,User-AgentContent-Encoding: gzipContent-Length: 2018Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lingos HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/ HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://lingos.netdimensions.com/lingos/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/jquery.innerfade.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/loginAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/favicon.ico HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jsutility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles_core/base-plugin-custom.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/main.css HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/fluenticons.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-vendors.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/0.10/peoplefluent-components.css HTTP/1.1Host: ui.peoplefluent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://lingos.netdimensions.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/accessibility.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/component/netd-component.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/common.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/BaseView.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1 HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://lingos.netdimensions.com/lingos/servlet/resetpasswordAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/ekp/login HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lingos/servlet/resetpassword HTTP/1.1Host: lingos.netdimensions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: lingos.netdimensions.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ui.peoplefluent.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@19/90@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lingos.netdimensions.com/lingos"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://lingos.netdimensions.com/lingos	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d11mswrjgd8r5y.cloudfront.net	18.173.166.51	true	false	high
lingos.netdimensions.com	18.196.219.159	true	false	high
www.google.com	192.178.50.36	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
ui.peoplefluent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/accessibility.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/common.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1	false	high
http://ui.peoplefluent.com/versions/0.10/fluenticons.css	false	high
http://ui.peoplefluent.com/versions/0.10/peoplefluent-components.css	false	high
http://lingos.netdimensions.com/lingos/servlet/resetpassword	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/servlet/ekp/login#help	false	high
http://lingos.netdimensions.com/lingos/servlet/ekp/login	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jsutility.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/BaseView.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery.innerfade.js	false	high
http://lingos.netdimensions.com/favicon.ico	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png	false	high
http://ui.peoplefluent.com/versions/0.10/peoplefluent-vendors.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/component/netd-component.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base-plugin-custom.css	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/logo.png	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos	false	high
http://lingos.netdimensions.com/lingos/favicon.ico	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1	false	high
http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.173.166.51	d11mswrjgd8r5y.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
18.196.219.159	lingos.netdimensions.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432133
Start date and time:	2024-04-26 15:12:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://lingos.netdimensions.com/lingos
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@19/90@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://lingos.netdimensions.com/lingos/servlet/resetpassword Browse: http://lingos.netdimensions.com/lingos/servlet/ekp/login#help Browse: http://lingos.netdimensions.com/lingos/servlet/resetpassword

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.227, 142.250.189.142, 74.125.139.84, 34.104.35.123, 172.217.165.202, 172.217.3.74, 142.250.217.234, 142.250.217.202, 142.251.35.234, 172.217.2.202, 142.250.189.138, 192.178.50.74, 142.250.64.170, 142.250.217.170, 142.250.64.202, 142.250.64.138, 192.178.50.42, 72.21.81.240, 192.229.211.108, 20.242.39.171, 13.85.23.206, 142.250.217.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.973706871902413
Encrypted:	false
SSDEEP:	48:8HJd1TdhnH8idAKZdA19ehwiZUklqehHy+3:8HZnqAy
MD5:	AB457DE9A76B601DCCC1276A425DD214
SHA1:	1F05FFC4D59346B7096210AC88C3A9D5A40E235F
SHA-256:	38C0730C3C7FB3075CB1B1D3151CD475B6EE6A46AD57483C2D39B96199664198
SHA-512:	BFEFA2B7B41824C5041BA960BAF6160D231C9D4934648B48D99F066F76CEAD35D91627D2669C7A9C251256DCB478BC5F87E5CE219913531503738944556F4868
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....n.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990953183748657
Encrypted:	false
SSDEEP:	48:8MSd1TdhnH8idAKZdA1weh/iZUkAQkqehwy+2:8M4ng9QFy
MD5:	92B90BC6A2996255FF20D17A90AE7CCD
SHA1:	60E68AED526141E17E06C843500B9ACF4163C7D7
SHA-256:	F5F88C168C5D403E6567C68E7A091942CABE00435E2E0752F8EF5CD0D9EEDFD3
SHA-512:	0AB5563AB1F589F19BF00171C20F1454550F154835887A5161A0099F01E57DEA1CECD79BB10A5099F800DAEB3A216CE6E301981172A789DBA82147487BC7293E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9987099278374645
Encrypted:	false
SSDEEP:	48:8xSd1TdhsH8idAKZdA14tseh7sFiZUkmgqeh7sOy+BX:8x4nFnEy
MD5:	8724488B7466F517676B0BAFFB0AD18D
SHA1:	E21588CFF04BF20D59B764D6E1378EE47342B8A5
SHA-256:	BED4AEF0C4825B4004DDA7D01869C19FA000117B42E80E59AF83984D3012FEDD
SHA-512:	E5D5F69F33CAD371EAD1F86E16F6C5268C51682351A158A9C6E642697A0D16261DF4C073371B927B1339EE6951113A189D67E3FDC07FB581268D810E856FE580
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986377655000726
Encrypted:	false
SSDEEP:	48:8dWd1TdhnH8idAKZdA1vehDiZUkwqehMy+R:8anr2y
MD5:	D918DAE13C5ACC980E2C4FF0026923B5
SHA1:	1B44A0BCD870DE3086C4B12263B04CF60526CEA8
SHA-256:	45DBFD32F0962231BCAC03E0CCB346133A15C2314D4BBFD75595A2490990A278
SHA-512:	4CCA3C8283513156B2E6C6157981C227A8F4DAD40E010CB7FB20F35B23E3B2B3988C55AD9D099977845B77A733717E9B2D7778374466989A416F69678180F6E7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Inx....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.976499766179215
Encrypted:	false
SSDEEP:	48:8Zd1TdhnH8idAKZdA1hehBiZUk1W1qehiy+C:8Jnr9Cy
MD5:	12761C215404E3320CD990638E40A9D8
SHA1:	7DEEA89FCCF2137C82991FAA676DD786ED3A9D7A
SHA-256:	BBF7F48417F140EACA9A7D8E4BFA7AE91C3558BDFCE0D7E9EDDAACAD08E702F0
SHA-512:	92D46A3ECF279C23F376214538CF0699E51F76F6ED22936147BE2CD0F0A676917395FBCBFF89422269938BB5A224434ED5B6D985BAF5234CAE401248E22E4EE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H6.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 12:13:52 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9880749822396244
Encrypted:	false
SSDEEP:	48:8sd1TdhnH8idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbEy+yT+:8inLT/TbxWOvTbEy7T
MD5:	B1DA85A1D9267BD267B7A91C1E6925BB
SHA1:	422835CF9E4A553AC204B68BB1044EEE3C0BE0A1
SHA-256:	A30BB449899293EED2DD901CF6CA2FC1F281993FE781EFBD7E0A44CF60125D7C
SHA-512:	106587EE628D8668C08A26D6B6618ED902FF3EABFB229B6858E842BD0E5465CC5D37DDDF166F45917B418FF7F80B25D44921DFA91CFC09BDABB7DBB441BBD253
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....D.j....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.i....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............0T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5350
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	7.883257590459418
Encrypted:	false
SSDEEP:	24:X8Bf17EwCXmuhxYdRWzqjQff01djWAuuGEc+FW0NJ0YB8QyWBV3tcUrzkOKPVded:XspElX6RW2jk+iApGh+FWGcGV3KS
MD5:	1E6F4FDCA623855A40316E87930ED1D3
SHA1:	B30B27BF7B8106F1C81EE15952E746397CA44B86
SHA-256:	16E27EB7836C32A72C3ECE9D7E4C6D0A0F27CF34748772DEF87826122D73EEAD
SHA-512:	55E312A6C6E813A7EDF16B726B15378472A4D40A6B06837E16CAF3C2081BAFCB311CA48689F6FC6239B8F6829116C04449025B21015458DBA29521E5A0B1CDCB
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1
Preview:	...........XYo.7.~........)..[2.#@..)Z.-R.(.]J..Z.$...wx....Z..Z....\|.Y..{....N.r%.l. ..........xK.)[.L2.I8SI.P9JS0...T....9. .T..A..Ws.1.,..b$..%..\|).UD..eS..D.#.Sc.....j.M......y.rN.Y...0..\R.y<........,S..Tc26H.s..,.p.....XH.j..,F...LP......>...ZQ..1..L.@....D.<.5.h.....<.i....%..w.$.6W/.`..Q8.....?...0~wn.#....gr.M..$.......4.[.........2<..f.a....3.p.a.....K..gJ..L...';.2F..oO.^]..\)..O....@..V...d..Y..#........t..p$.$C.D.q.Q..4`..'..R..h...h@....o:..n.)D..rY.Di....N.>....04+..\|?.v!..._7..RF..Kf......$pg..y.0.1........w.q.M.S..H.0F.,;...).K..ZVH?F.LH...PA..+#...\S.@jtR...k..x.X.........m.....RrKe3..k.7..$.+..G.![..A.......S.._Pe....[L.D...^o.yC.J...6.`.V.......<W_..;I.Lo....p..Z.a.H=.@A...U..4...O.c.v..xN{J7..7.&...\.RE.Jt.T...]..m?..'.ZR.>8...g88A.D..=.4...$.2.(K..Ot?.'P..%......C.D...b.:.xv`.......g......z_.............5..?..n.%....T...jY...YA.#s..#.."..Y..NC...c...X...Q8...<.R...l.C.!..!..r.Ul.w..B.e...Y.'$=.S...\|..R.....e.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 8238
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	7.916490354559249
Encrypted:	false
SSDEEP:	48:Xw2X2wnEEAVvMv6Xrh1xt81Lfl8GtoLn8PScOtncETQb2VorSAH3QjwNH8Od0XNG:NbSXrjb89f24oLn4YnSTuAH3Iwd+kB
MD5:	C4C315E4DE25AADBEE81A86FD61C59A0
SHA1:	50B98434DDDC164FAA4DE0399D0F18673BCA8BD6
SHA-256:	47487A6F6FCFCA0BBEC1F899A02279FD0C0B5DFFC03727E1E5CE183FB1817B32
SHA-512:	1369DFBC9344AB86CAA65253621CE2A77CF1B4F6A84CB5C2DF052C582002FD94A97DB2732A9081FC64CBA3DD9339EA8E0CBDE88174137DC0BD2D62DF3055C28B
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/servlet/ekp/login
Preview:	.............S.8.g.W..7.]l'..H...Bze....NoG..X..d.....O........0@,}.......s..8B.o.8=9B..ow.\.....{y.....>.b8.T.4...._[......Z......{u..JZ..\\|.E...o.:...6..>m!38<<....`...D`$am.wNo..Q.......#.......V...9.B.8..7W/....@EP...).,....GX.).'...L".\...`j..}.r7.7..;..B..M-..%qo....R..Bn'.b$.Z<L..r...P....@.yk.....p/u.tI.W.p...9aw...u.@>q>q.V....`.k.&..O.ph...`...Xd....."u?....\....qV...\U...mdq......u.=F&..g-.<..Q.1.).N.#.\|.bdjU.P.i...4DWA....g.E../....3.t..n.w62....~....]/Y.'.x3....p.....^.B..x0.._;Xnyi........>..\|m.x).2..I...<....(C.{.OZP.?a`b..)...W.RH..j..2?.....,.io....bi.$.,Yn!.f(".@Ij3..,@...E8>.Q.m...C1>.kK..!..TZ..f...2.H-.`...Gh0.n.K...A=..8.gs.h.......g.AJV.VR...M.l7uo.[....JD.c.i............h.xA?...{E..T..om.b?].).o~.r.{.m......8..c.?F...A....4.ct`.).o~g......y.Q.m....x.\.......5...]....x_23>...w.\|D.y._-.....%8.H'L...S.&...BG-zB....ND-&..}.......".r.d.....H..pGE.......h.[a...m.....Ha.?...'g....M.,....&..r..UaaF.I..@....&jBV..tcbYx..F...3,.........

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 144901
Category:	downloaded
Size (bytes):	31399
Entropy (8bit):	7.991220529377944
Encrypted:	true
SSDEEP:	768:pOQmp9HAglgqsQ5Ve8GumN74Thy+sW5Hdu3Dr59XNtPW/5vz5hcO:8QudlgqZve/AThFZw9XfPcdhP
MD5:	0FA88A4A114BE346D6F990282AAEFB45
SHA1:	C95D0FD87E139CF7489644F6634A81D63B1D7A45
SHA-256:	56BD80261145A470F3995F82FF13D5DE2F00E0D4D908AB67FF4D3A37DDAAEB92
SHA-512:	E25AD6D953DB70F51C7F518DC3B4CAE8257C6D0117C477438CAA24F1D30FFE83FC3C23C8A7ABEEA7C5287EE32FCC01D33E9A4FB4F9699C9D6BA760F925EE269F
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1
Preview:	............w..(.....s.`4..$A..c....9.^.+.5....t.H..,0.GNrN....Y.B6.,.0.....^..,...K~{...~.l..N..k..vU..k....s.m..<....c=.4.s\|;.B.....Nk..z...V...kN\|v...2...t.,FN..b.fY...R....V....{.;-.a;.s..z...e../>.......>......g......q.7..h..u..t..w.T.....R......~. .s...#..Y...q.m....h....8....v\|2..[n..U...>`!...ND......c..^.r..\|.9.....X.q.j..g..~.1.;........[.....k7i.........}.q=........uCw..=..`...E...,(....S..~<.e;...<.a.Y...p..(4.....k=...0....f.~.g...x....TBhY..3....DH.G.......v.&.9......2...G..v..vW%>.`..9.~.~..t..s.P.. @.I.Yz......V/...fEa..g....ODcV.4p.u....l^z...x/V....3...&Q.2.v8......h..;TW.>.).n5aV{....-..j..YQ..(n.^.C.(..@..O;..u..;..A.....E. t....'.........NDS.;I..?.n<.q=w.D.@7.)..E..=Dk...)f&D.......v.l...L..bA..G.c...T...e..>Q.uK%.zt....w#.....h8..!..!.k.....=..K..{?0....e..4.`{.b..._eb....'.....c[C r...<.g.)...y... ...3..:.L.3.......rF..:...9...F9....Q.I..#{..p.G..).]&.Q..bJ.t..9.y.I..`.....f...T{..].

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 107697
Category:	downloaded
Size (bytes):	25183
Entropy (8bit):	7.989622661779342
Encrypted:	false
SSDEEP:	768:fEmZjrA4SL5T1fK17uiqVJZA/nZPV3WO6X7sD:ftvPC5fsqVrgd3Wlrm
MD5:	534FDB11C94C298EEC063A4A3EA1F000
SHA1:	DBC05F9E0A271033B479F905A254E1F60F906351
SHA-256:	50CB193A9CB8E29C24D1B93F081F3D62E16D35C03785D721FCADC301874970D0
SHA-512:	5D20964CAC3A639BA4A5160F3DF45DE8F5A4EFE0A46118574BA71FF8AB70279DA966750648005CDB2635C125D0DA7809452E8A64BC7BB3987A73DF287CEEF5D9
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/component/netd-component.js?22.03.1
Preview:	...........ow...8.Z='.a..K.$e'moC..%:VcK.%'7.........]........f...X.....:'......`03......w.......EvqY..I7x......}..O.AZ.eWi^fE^...d....f.6).EZ...}<...,..M.H..{u...".fI.WY<..<..b...^..Y>-.Wq%:.......r...A.....K...byQ.IVNfE...rr.4.ED..R....g.N.O&."..I..d.%..J.W%.....@0.n.E..\|..X...t.&.JUPck<H...~...i'O.$... ..W.".mC........#(W....._.....n..N...fE.....A..2...#.....o.3]...y..C?... .JLm')&K..5....2..X_..D/........u........`jG..'..F.H.n.x........J.;.?........c...l......A.[.S+.....e...l...4...$..N...$."...,.j..j.L..;..N..t.9R..#U.2.wgqYv"./.>...8......L..Q^.7...t64#..j...K.~..n0.......=j&.Y\|>K...`$P.H.jQ.&R...N8T....$....gj.sd.......@....Fa.n ..?T..&..L.t..\|.y.8I..m..K.u......?..t9......M..F.L...H.....#..._..^.i8K..B.0..M..A.O..0.%..N....N..............LH.Nx..}..OD}.\..s@<.D.Z........x.v.Y....n..x...Y~.....b!o..2..F1.G.h....tqk.xM.....PJe..\|y.6.q...c.I.2t.U....X..Yj...".....n ..*.R....=......y/.."..o....}. g..-E..Ck6P.....)A..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11015
Category:	downloaded
Size (bytes):	4024
Entropy (8bit):	7.948443799103288
Encrypted:	false
SSDEEP:	96:vnIBIOoluFeAp4QXSx4ia6XP1DlHayfwSss7HwR7:fIQkW42bHaLSRHwB
MD5:	25B2F2CC0ABFAF6514FABF9B5752A808
SHA1:	0E1115FCC42690C389D368DABDF62D7BB0EFD9FB
SHA-256:	46068FFEB318E19579CFC6488F70557E8A676383688ABF136BB35F7F26E888BD
SHA-512:	1355C71EAC508B790EEC3DFA39C186CE30320C820C0258F2F3D3AA90E36A416A108ADFE0DC394F48960A52DFB638B4992692BABB986E09C7F8BBD999D2FB704E
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1
Preview:	...........Zms.6..~..F36.!...')...K;u^..z3..EH.M....VM.o.]....dz_D....../P..s.%cr...5s...o.C'w..\|JY..s&.$.5...&.#.Ig.-.M..T0......c>e.b...?.Ld3.....^.L....].<.l.......=:.)..j.d@S..SM...R.........m.cb.#.. .$.L..2...H<xko@..-...K.e1..O.=.Bj5j....[.%s....@...Vq+..M66V~rX...A.8.Y..4....WQ..>.A...).....]...LHW.GC.6x3.....gn....]O..W.{4,..6._..K...g.o.L..V....I....(.........j......}....q.`.K~.r.......J]5#{......8=.QW....'s..H.J..i..y..".X.,.X.4f..K.....p..D.0.A.{.j...q..^..sXg.p...x=B.{+...6..yCs...V.....uP.5.f..(K..Z..c6.s..`J....L-.,.........=.a..Ck......)C...p=.[W..iQ.?...a~."eR...'...3...l...$[..m......027.\S.......[..l..6.`.9?L.x...W4.s."..[...w...0.{.#.0..M.....wU.......u.8.%s......N..e."v..Dbj8.u..s.......!..Dh.~. d.._.....UDAC\{..C...4.6`......R/...&=hx...../^NF....~.i.r.S...I...w.....W.*;;=;.z<>........8...T\|.M...t,e..S).@..........'?..A...y..@..'.6.f%Y.9....J...}...(.........P..N...=<...%#vj..4..........`.....@..r..P...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 292
Category:	downloaded
Size (bytes):	246
Entropy (8bit):	7.140387218621966
Encrypted:	false
SSDEEP:	6:Xttv39lLVP+AfO+XqCCnpOM3vPfY2SCx8UT/n2cBoFjn:X/f9I+aBAMAExbTv28On
MD5:	6A9AFB0636306A84714177FFA3C5286A
SHA1:	38A72EA1787BBFB4C65D6264D78D9104FF11439A
SHA-256:	DAADF14B401FD0B42AB4EA977C878775FB5848CB81F1386D26B0FFEE57C1F06C
SHA-512:	3343F3182F5474F7BC540DF53A3543B05646889F236520B5BA6C3C49AEF4092CA2137F514072D2B10B122DC3DEDF53D203C76D8F823D197C18D2947AAAD2E2EE
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/
Preview:	..........%..n.0.D.....p.....V.-B...Q.UcS..._HN#.h.^.T\|..\..&?+....{..C<.r.B..!...k.XY.j..K....g.eY...[.l0....2...u...V..}.....;..m.v...vkB2....=..S.T4tu4....0.NE...JQ+...gr7M..3..^..xG.bM....lA....q.S3......'.u.W.....U..Fk....U...$...

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2409
Category:	downloaded
Size (bytes):	968
Entropy (8bit):	7.825793297156215
Encrypted:	false
SSDEEP:	24:XxutUyjhYDkhlzxMHTQwHlCezPbn7CnPpBCLBmh:XxutUyjdbzSH5lCev+PgE
MD5:	71302BF63ACB6001C7CF38E5DD3A3DA2
SHA1:	EC27EA1ED551C14B214FBD45F2D4DBBE1AE17553
SHA-256:	A16F8A901C4B837791C07F94B9A1A81A8D5C44504ECD7057F40C052622CBD21A
SHA-512:	E1B1D94410A9362E724B3C7712E23D534AD81BD0F2F4D7F33D66084D5ADE163CF2F8B66BC2DFCCC0F8EF0A34A06A0A0505428AE4744398E9EB5ACCE085D5F16C
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/accessibility.js?22.03.1
Preview:	...........Umo.6...........R....u......K.&.0..@.g.+M..I.P...HK~i.n.. qD.=.....W.G....6.S.. .2x~~~..s..;.A..%......d..\h.....G...V....p..L5Be.\I4...a$4.6N!..2s.."..H..rH.].\oA...7...Gf,E..\|..G.mU.S......".F.."...0...:.B.......A,.".L.s ...Jf!.y"x/.X....t.....D.....0.......K.;...FG..6`v.b..0v2...\f.c..4....fS....j...=.D.9.......M.Fn......;X<.=gl[.&9.O.p......j.....O+.X..u8I...P..B...NO..r.+.J..Q.S^........_.%&.L..3..r..Y.......`.j...C..W.....&...m../X,\.U....H.....^!k.AZe...4.F...3...".... .M`@.<..j..a...........-..cu..,.w...-.G...$Y.Y1.....Qh4...2...oie...F.S.......A.)$1..=_.$.....).k.!{.......Pc'....t.'.l+..^:...}N6..Q^.yeu.4.f4.7.<.../.F.>7...?p..~.....=.D].tQ.EPV1P..(.....g[#C..8.....(...\_..J..ev...U...q$.?..k.j&.X..Wi.;.Zy...q.'.2.\|..Ix.IL(.YLa\|.S.]{_..L...A....r..(g-..>Vt....m../.d.'.%.:..vI.0n.@qI...z-........7."...(....\3.<..6o...[F..../...}m}..s1@...c....._....CA..`....U.....o....i...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7326
Category:	downloaded
Size (bytes):	1753
Entropy (8bit):	7.868516648359125
Encrypted:	false
SSDEEP:	24:XrDHQaI9ZuO7K7JFASBJBNLL/NNiK/q2T50EUx9TjzgRavGYruvaMfzPUEkceScE:XXuD2FAmBN/NY+8ERavGouva+UEfvMRO
MD5:	0E334218E1D35FE518A46ECE1B925509
SHA1:	82D003946760A00C12EA8178F5E8AC48CF1C0299
SHA-256:	0C0385C8DEFBB583EF06E426E44D795DC4F604826C2629EF6031D34710E923C6
SHA-512:	BDFFA8A5E799E5D074ABCFE1FBEDB307280CFC96263370891D5E8E1EF6E8D7917305784CE5D918A488DDC613A5E9D29EA91A32C5F22FEBF69ED16915591217B4
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1
Preview:	...........Y_o.6...?....<$J.n.."..v..4E.f.{d$.&J..I...\|..I..$Jr..E.Sw.......9...[...t.V(N............H.;.!.........c.0H$.$bG..5.H.\. ..Vk.R^.4#...!\dh+.VP...G...`.. .k..{Q.x..nx.....x....Z.WZDFe.$H......],_..T!^0........)A{....E.F.....).H.^.B@]..A..$.d Dq-..,.P.....8/..../...l..R@.Ku..+.X...4.xC..8.2.K.5V..0ZV4.D...)..`+..;..d.{......0.......6............2..qd.O7..5..M9-.....m.....cs.y.....yk.h...t.V..q.T.Qp.."^$......JQ.p..+%.\|..4:A.T.=OK.(.\.@.8.=$..._{..h...H..^3....I.I.Xq.J...-K.@...-.R.im`.>.i$..~..E.mHF.MT......r,.{....Tz.h..q...X)....O..-.....DI..P.A..g...W9.Z.$.d.....[.z8A......`.M'.RF...w...'..6.T.M..0.P.Z..}....._\|..O..~....?tp2.~$_UL.. .w ......k.....2.(......-a.XA..B.]>.SQ. .4.U1TP.(. ........B!6k......<.......u....7.o..}..bp.g..}........U:L....5...T..V.jC...5H6.z..Vq]....Z;..Yg...h.U:/.-....`.......(..g......q...l.3..GZ.....;`........q.dz..w..'.QY........Q.07...6...........B.&...../.>.j$..!N..k..P..ab....../.o.{x..ggg0..0.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4008
Entropy (8bit):	7.934918709384154
Encrypted:	false
SSDEEP:	96:1mUCok0PFAok0ZzwBjmV7j6jML34SNIsRoZ5Z4BLagEUfoFiG:FCoptvlZsBjmV7j6jMLws+Z59gEUfoz
MD5:	68864373D6162E3865ADB6D749DCA094
SHA1:	9C05FE4509FA5F312525FBD2542FC992534504B3
SHA-256:	88B5F19B2693B090014A3BAD3E163BAAF828BB8DE513C31D95DEE5FA8D406A4B
SHA-512:	2FFD31D325C7B5D1518127B06A8D1798C7DD515B40C39D74C05215243AA1E640834C13EDF3B6945B683DBC6BEFAAEC00F3483E66F71D414EF22EF97115328AE8
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png
Preview:	.PNG........IHDR.......d.....J..b....tEXtSoftware.Adobe ImageReadyq.e<...JIDATx..]}..E..YVD..op]p......h..%(...FA/.9?.".w^......`.......^....K.<..b.P.r.....Y>".+.{.W.j.........LOw..z.z...DKK..)......o....0...c.o!......l..M...+W..../....O.../_N\.t.....2..2.7...K.Q..h....:....N^s.5..c....4(.0.....L...&..... ..m.;.\QQ..p"...C.#K...+..Y.p.......k....VE....t....(...@I.....@ss...>.{.n5P..QA..v..q4.....l.w ..,@@....M....4..fHdA.Kw..y...........=....r......N........5c@!..........ESS....=)....I.e.0..............".;..(...MA...`.........:...t."..uH...)..0..Cy.n..j.a.1{`n;u.$M+.....jy^7.0....A......!.r ..T...X].....C...\|.....e..[.J..[..`.......}.]@..{\|.%.S.v.3.&cu."...sRQw.u.......kQ__/..#..8qB.0....9#n..6QVV&...W_.:.u.f....7.t..Gcc.........%../....cR.6....."...{..)..e..q...@..p..}..,..).._A..Rzw>....Y}v.".h.^..O>)..eB.C.=$N.:%&O.,++.L3....;W.....$.....9s.hhh...={.,....>\....)S.H...8P..4H.m._.._...9X.(.....;%H.%P @...T.?..k....V..\..>}Z<..cR.55

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 992 x 1121, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5906
Entropy (8bit):	4.22007655708657
Encrypted:	false
SSDEEP:	48:LD9MMyyyyyPetduyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyl:F6/7
MD5:	884BED887BCC0EA1C9F53A4494F0DE32
SHA1:	5E4771575F5877944CE083DC20E88846FC5A79D2
SHA-256:	1AA71888C47B3E0F9ACE52CFF2CCC2D4E26CE0F0A09E9B3A6738820C0E03DD20
SHA-512:	073398E33A8E3BADD854198915D504A577D52B8381633E67D9902E0AD372C28CDD3ADFE82A912F111DC0851312931C5A67627C13A9EA15D23414D65906A89A29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....-.x.....tIME.....+.........pHYs..N ..N ..}......gAMA......a.....IDATx.....0...$x....&......*.!.=...........O...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........2..g...>6...."... D...@..t........"... ..:......@.@........!c.uz....#... D...@..t....A.........:\|.........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 608
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	7.513921137353938
Encrypted:	false
SSDEEP:	6:XtLyrmDSLIOy3L+n+Et1uc73mii2hOllPJ0ccbl0xfFUl7jVtHE1tzKdhvzYc2:XUruw6+nPtkcis8zJfcb0s9d5o
MD5:	AE3EC7C8450D794C0A91463629A59B8C
SHA1:	EC69A7F4C440B6662D762004AA132CBDF7CBE551
SHA-256:	A3968AB5B34F00A5E361CF4A64B38CE3FCF1C6B2D0AEC234B92BCBD9EA364A7B
SHA-512:	7E18CC9766341CCF9026638344B37D84E0875DC785960D4EE4A1F3BCF2ADAEB4DB823A80C920EA0C878BC36BB1440DEC7E41D18B6F17390B759B47191DAC27AC
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1
Preview:	..........]Q.o.0..n....)...$..J....7$>..!.....v8.......i..w..;OS....C...1.....%.-k\.h2..L..6.+g...vOs...?.......a....^J........\......}eKw..0.6%..)5S.d..H....N..8.#...~...o..x..D.j%}].......EEb58....{4.....^..f....Xc...0.jl..y..d kp..2B..@..<R..O.f:yz>O..r.j...M~...../...m...,.g....q.d....H.0h....W~.L..m.].3b3..i.C.L..w[.....p............`.[GxzZ...+.!.l\.=.#Q...F.Kx.*W..a@.%..~.\...`...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 19353
Category:	downloaded
Size (bytes):	5003
Entropy (8bit):	7.959407529994666
Encrypted:	false
SSDEEP:	96:OZ9B7bqouStxLOH3OvPoDnN6S5iAGY57nP27SF/bsWOcy/ve08Ld1/ZRgJoxKZeD:OZD7bq8LOH3OIjf5iA757nP20ALHId1f
MD5:	20486E6299AAEA40DFEF5240378A5D4E
SHA1:	4EBD13EA17E5FC17C52F1B84576D042556B650D1
SHA-256:	65C9E153BF0960681D1411295128DA3F0FC9B96419F14833F65E7F71DCA7526B
SHA-512:	E6722CE208E0E6EB0A5277B96B8FF0EE0839C31E35EB7B5F03D7B67E4524F423EBE2E52D7770D5600A086B01E53E469D85A91FED01F0B268FF9C4133F27A6406
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/servlet/resetpassword
Preview:	...........[...y.\..c.()T..I.O.MyG..._.G..kd,..Cr}.;...Q.a.nR..\....E."..81lXF.T....9_..7...h.i..>3.\|..E........y.7.<..3...r....^...JE.w.U,l.DZ.o.o.z.../.j+....8.C}..z..8..D+......t..FYS....s/.......N......of..O .a...2..`.@...1....?.$.....$...4.v..g.7....6..8t..I.......'..Q....8.:...h..Kv....b...K...G..H#.........@..~LX.=...muE./.`.hV.$Q.m.L2$.C]\|f..$...EH.\.....c....4......=.-...+._.m..M..7..,.K!...u.>..~.......'h.._..t...,.C..n..7.1...q..9w...ek...~)[.....R.\........f.......X..j.3.f.+>..oF>.....F.(..P%.xu.\.BKez....WL.tu..ne.6.J2.d$.a"...!9..e.......Uvr.C......P^.q...@.n...k.......B.....Y...lO6&..MH.R...li.T..../J].. .J...l.../.(Q..}.u.'!a.J)_.I`......g..+T....%.;.."...s..T2.B)?.@k...N.z.W....b ..#...l.....(.Ao..o.E.5I.......s.............%.N.. ..`.-jOH..y...)..r..0!^.]...A0_6.'z.\......>..'kY$....:awDc....B.t.A\9....P.....:(..L.\.<."k`0\|.AY.04y.........n...j...Y(_.!.qoH......c.Q.x.5(.p.R.....F.z>.P.j.+[..[.l...S..u..h.,...zB.1A..:.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 89476
Category:	downloaded
Size (bytes):	30910
Entropy (8bit):	7.989831990909374
Encrypted:	false
SSDEEP:	768:zNePW8CKHEJc0lU7tr69V4gg2UA+TcXw5Wjgpa:RWW3KHEO0argIaXwTpa
MD5:	888C5FA4504182A0224B264A1FDA0E73
SHA1:	65F058A7DEAD59A8063362241865526EB0148F16
SHA-256:	7D757E510B1F0C4D44FD98CC0121DA8CA4F44793F8583DEBDEF300FB1DBD3715
SHA-512:	1C165B9CF4687FF94A73F53624F00DA24C5452A32C72F8F75257A7501BD450BFF1BECDC959C9C7536059E93EB87F2C022E313F145A41175E0B8663274AE6CC36
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1
Preview:	............{{.F./...."....E9.9;..>.l'..].$Y...........%"......n4@P...y3c..F_...^..{..~.N.........l..Yp...7.:..U.g.q6?..8..YU.../J..o.t..W..t.der.......l...DU.....%}6...._...E.U..$_.....29<..b......(.....&.qE..AX..<...W....".;....E.....\$...")..4.S.....;.....Z.....lC..{43."...3.....V.i.l..T...8...T...<..UR}S.U..^.2..%.T]..b.Wcw\|.S.f0..K.^g.Z....W..OMRA..JW..Z.tA]N..,z.<..U~N...-.\...w..m........2..q.D..P.M....<......o.....d......l.}G5..z..E.i.E..2.[.::...f.#..{CU.3.d4..\\|.pD............R..&..l.y..fE.W..e..}.....`A........... ..f.OS:)......J....y..Apx....3..#..$.c..l~v...~..VqA...fgP$7.mb.l.0.Z.D.4N.....d..Z.q6..0...g.y...,".1....F7M.6;.,2....7.T..G..^...L........@...{.wC...{..(...6VhH?.uU...Kux8<.?.....`.]...+..G.^.B.......V..t!......]e.X.,a..f.e..yf...ar:..j....;...t..+.x..Q.....&)...j.t..TR#*.br+.2b<TmU....x>......M...e5.A..g>.#^.M....D.....eT.1...K......\..EZ......!.Y.O.9:.2.m.}..."yb.~.?.....-......T...uw .vF?...F.^.fs..(;<.N..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4008
Entropy (8bit):	7.934918709384154
Encrypted:	false
SSDEEP:	96:1mUCok0PFAok0ZzwBjmV7j6jML34SNIsRoZ5Z4BLagEUfoFiG:FCoptvlZsBjmV7j6jMLws+Z59gEUfoz
MD5:	68864373D6162E3865ADB6D749DCA094
SHA1:	9C05FE4509FA5F312525FBD2542FC992534504B3
SHA-256:	88B5F19B2693B090014A3BAD3E163BAAF828BB8DE513C31D95DEE5FA8D406A4B
SHA-512:	2FFD31D325C7B5D1518127B06A8D1798C7DD515B40C39D74C05215243AA1E640834C13EDF3B6945B683DBC6BEFAAEC00F3483E66F71D414EF22EF97115328AE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d.....J..b....tEXtSoftware.Adobe ImageReadyq.e<...JIDATx..]}..E..YVD..op]p......h..%(...FA/.9?.".w^......`.......^....K.<..b.P.r.....Y>".+.{.W.j.........LOw..z.z...DKK..)......o....0...c.o!......l..M...+W..../....O.../_N\.t.....2..2.7...K.Q..h....:....N^s.5..c....4(.0.....L...&..... ..m.;.\QQ..p"...C.#K...+..Y.p.......k....VE....t....(...@I.....@ss...>.{.n5P..QA..v..q4.....l.w ..,@@....M....4..fHdA.Kw..y...........=....r......N........5c@!..........ESS....=)....I.e.0..............".;..(...MA...`.........:...t."..uH...)..0..Cy.n..j.a.1{`n;u.$M+.....jy^7.0....A......!.r ..T...X].....C...\|.....e..[.J..[..`.......}.]@..{\|.%.S.v.3.&cu."...sRQw.u.......kQ__/..#..8qB.0....9#n..6QVV&...W_.:.u.f....7.t..Gcc.........%../....cR.6....."...{..)..e..q...@..p..}..,..).._A..Rzw>....Y}v.".h.^..O>)..eB.C.=$N.:%&O.,++.L3....;W.....$.....9s.hhh...={.,....>\....)S.H...8P..4H.m._.._...9X.(.....;%H.%P @...T.?..k....V..\..>}Z<..cR.55

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 910
Category:	downloaded
Size (bytes):	394
Entropy (8bit):	7.415734347333684
Encrypted:	false
SSDEEP:	12:X3+NSATg0LnrEpilZwG/WG8bzBtm5/u3LntW:X3UrXpeGCzvKuDtW
MD5:	5CA948AB538AEECD1AF47AF0702B7C93
SHA1:	33DABDD26310B7BAE9282FDA907F92E927BC29A2
SHA-256:	B16CB38D06EDDCB3885A9356F79A5119C538FC9CA4698B777E67BF857BC3ED8F
SHA-512:	5D010D6E98F3A834969A23D26FECF9B2AD34E5AA20EBFBAD2FE94097FFF83A0647B41F198FC9E195C50FE391E0A9FDC0C733A889344F56FD4E19579E3A89C988
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css
Preview:	..........}..0.........jI[..iF3.a.$..e.}Gk......s&.].1.....~.3%.Ph,\sUX...w1r.+=.,.b..us..[F..%W...=x..X.\.Jt..0Q.%.5.>.J.Q;... .~.....3xG.z.\*..{..bh.R..3g2...Z..........t._..;. =.m..a._.`...G.B.B.Z.c...l....#...XZ./is..O._#s...]\...ci.a.,.W.A>..J.a'..O<>N....[..j......?..r..>...Eb..".m#N.&..\?..........%[.........t.@.Y..X.1.&.,..0....U<p.d.)..v.';..D..G..o.`~..TB......

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2230
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	7.746827319291665
Encrypted:	false
SSDEEP:	24:X/8fkZEo1t1W0Pq8oDhldfZazkLnKqWsi:XsPopWWXiudsi
MD5:	C88B56EAA6074C6AE47FFCA5A10FB404
SHA1:	C322E34401174BA0C16E525BC6063BA111138198
SHA-256:	833CAA5785F7CF8947AD1B460CCA24FA03F2123D5B7D40B1E9194FB65D2F88FA
SHA-512:	D410A52B69B8FE9CF6BFB7A1ED2CAAADB610CD0FD1C8E1962386CE7D600176618E133569DC6DE5E07AD2BDAE1586300EF801FD06DA80CAF8D14EEF5E58D1AA38
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1
Preview:	............o.0..A..8!.$SI..uU'ulj+u.h..].B......U..8...n<L....?.=.8..iCx..L.V.s.1O.....qv~.....j'.v..E.N.Q.B......7.G.t.L...".w.#p.3)P{..0-`j..J...@.......,......`S.I.&)..S....i...+..\.s8..h..b...U..4.....9.\.<...N....Jr.D`c.H....B.hQ..7A'$o...;.{.0.(3.."..8+4/...^;.er.iw..`fh-..sh..Y....]....1...*\C/....R..kB.LjA1..$+..\|...o.bO.MR.\...:c..H`...l.......\|..........Za'...r...0...R..\...S.~.8!......5..;)...._..L.]...y....K'...~1....7Z\|#.............Iy...,U.O-.AM...S.....>G..y.37P....m...M.&..2u.0..yM.......1.Op.h...`B..J.W+Ur.\|..2...Tti...o.{..-..].w..o2......s.j..j....5.M..>2e8....0..vgN9nKs..$..h.....Z.V...s).........G.`....0~...0..>.X.@.G.$...;....Q3...hw........D.G.....95[...Vh.N.5Dy..j.....XyS....@..T.7....Wp.7..n.....+.......

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11001)
Category:	downloaded
Size (bytes):	11106
Entropy (8bit):	4.637529245894687
Encrypted:	false
SSDEEP:	192:7+PfqVglbGAickcP/cF5f2cX3C8m6+Nxnlam2ahjcK1Y1fFzFa7fOJdG3HoNJaNs:7qfqVglbGAijcP/cF5fRX3C8m6+bnlat
MD5:	274C935AF16AF79D6F2B17A6A2311D88
SHA1:	323F99CA60E6D327BBE5C12DC726A507E2676BBF
SHA-256:	53E4F94DEFF5D0ADB371A1CB688367AF93FCB81AB0BDEBC19D435F8B42E0A689
SHA-512:	D44C89732823A637F2C02962E38CA7785264716C409F8CB85D50C0A7C2C809C27ED008142BE9C27337F778FD11B22EB34B767D902791C0E14E5063D3D4F85395
Malicious:	false
Reputation:	low
URL:	http://ui.peoplefluent.com/versions/0.10/fluenticons.css
Preview:	/!. fluenticons v0.10.1. * . 2016-2021 PeopleFluent Inc.. */@font-face{font-family:fluenticons;src:url(fonts/fluenticons.e59448b9ddb42fdc93dd.eot?#iefix) format("embedded-opentype"),url(fonts/fluenticons.e59448b9ddb42fdc93dd.woff) format("woff"),url(fonts/fluenticons.e59448b9ddb42fdc93dd.woff2) format("woff2"),url(fonts/fluenticons.e59448b9ddb42fdc93dd.ttf) format("truetype"),url(fonts/fluenticons.e59448b9ddb42fdc93dd.svg#fluenticons) format("svg")}.pf-iconf{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.pf-iconf:before{font-family:fluenticons!important;font-style:normal;font-weight:400!important}.pf-iconf:before,.pf-iconf_align_top{vertical-align:top}.pf-iconf_align_middle{vertical-align:middle}.pf-iconf_align_bottom{vertical-align:bottom}.pf-iconf-address-card:before{content:"\f101"}.pf-iconf-alert-info-alt:before{content:"\f102"}.pf-iconf-alert-info:before{content:

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 72174
Category:	downloaded
Size (bytes):	24606
Entropy (8bit):	7.989620885580096
Encrypted:	false
SSDEEP:	768:Baz4PIBPhOa0TY22wPu82rCaIBuUE9jtr+q/:EHBsa0DuFOaeuR9Jr+q/
MD5:	73F29C18C6BF146E10CF6FF96F721AA9
SHA1:	E9A49D93652C5FC57E053B142A95E4F02EA45DC3
SHA-256:	6FF79B2E46EEB50A24C422CF2E2D1E5389959FE564B8CB53784A00A8394857D8
SHA-512:	401B9C46FF858745F9B4D844523311C7C99A91A86916F60A549D7808EC64F70C2C3B5238A7D101C6B6416D42E0319716E3CFF0A2B32711BD0DCF728284D544A1
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js
Preview:	............i{.F.(....B{..,.....4 ..-....q.9.Pt.@.$....$.g.T....yb.(.^..V.j==....?m..C...mt._f.u..,^F.t{.........j.o0k...Z.......2....g...#...?..l.__o.i}....M.y....QZ...c=_......_.....g.y.`....g..y..I.U...y.6.+....+..^~.>...y.m........s:M..............F7i..:..W..6...........;.U?k...\|..;.....R.y[.V.E.....I...~N.......U3...Y:_......@.t.:.t.v.}?Z.Gn.mW..c6K...E.....z.....%V.z..n..D.m..j.....8.w.........}..MW....>>,R.Y.h8{..7..<..on...7...z....\|....k6....>..~.s./...h..~....\|......r.M.7..~.......T...m..ga....z.....c....a...8..l....y=..c.+.E..{TO.f....$.q).......W.Z%...a;./. o4....X.:I...J.{.......l.\|.:5...,.]1....s.w...,y.!/.k...:_.......rc\|.G<..6.v.8Ya.:.o...Q#.j.=.b1}p1sQ>...p!=......c9$.\...`..1.. ..M..w=.V..W.....,Zv...i.k.9v.......j..:...F.QX.>l...y[.4...O...6W...6....jr.Q02.%.f.;... .l......FP.........Fn.\.....o....?9;.]...}.... ]{..4.<.v."j.7K...).CG.C.6V.._,.9..K.....{..4...C...`..7.)...e.Q..,.R.L.tv../..nS...X...`..X.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:mSDyD1iCkoScrL:mSDypos
MD5:	085215790719244F70816D9CCE3BB42D
SHA1:	9F1B9756545F54D6615450EE3B3972749B4BB039
SHA-256:	B396A8E2C4BDD559DF8D14E24807A016E40C3E314B273C3DBE2BF19E68A482D3
SHA-512:	D4EA2122F18690135B9A82A01D3C78AAE81F0857C9EBB2CA966C2DAABC3C9C8775CF94080068BBBEDF44D1AFD0CD4027ED6C0183E7534B0F8DEC4800365ED9E1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnwI0w6o8UvoRIFDTsDr4YSBQ1YFXPPEgUNElh4mw==?alt=proto
Preview:	ChsKBw07A6+GGgAKBw1YFXPPGgAKBw0SWHibGgA=

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15406
Category:	dropped
Size (bytes):	2018
Entropy (8bit):	7.857899495585244
Encrypted:	false
SSDEEP:	48:XyOJQNBd2+pOLBAPoyNND4YSMPFqvBI83lJ3dmwl3LnoOx:CO2vd2+pOL+LNpdteKoJ3bbnrx
MD5:	3AE1CBC0434A789C635F0C71BC36C1C5
SHA1:	DFD62260172A9647A2F59A8020A13E7056AD70A6
SHA-256:	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
SHA-512:	7408F896BF4D88C034D429C1C8F3FB8BA74B576A866C2AD9FD0317C0EC97D51FDB53D887F7F7F5457DEEFE7AFE4D492284B7F1527E6DCEC1071BE2C7CFB0745B
Malicious:	false
Reputation:	low
Preview:	...........[kl.U....\|..ng...[......L.h..\v.H.+.Q.....@..0..H\|..11>b\|`4D.........vg..(...)].K.B..vvwv....Y.s....{..A.J...1..~a.0A........2V...^uu.. \|U..........L./..q....e.>.Y..t+.k..K.n_H..3\...y.^....f?..f.P.y....a..j....w.fN..o.t.h.~8/.:..L.K.f.>q?.....C..1.....o.-..u.0...'.=.v......Y........O l.Tk.(.vDGb.[...28........ t.A.3...`.m..6.#.....47....^m..>7.l.O..c...M{C......=...M..3.../..f3..7..8_...m.K.<.4...3Ed.... .m....%...\|.g..l.<h.E...i.tr~F..........R..2!.....~.5..'.......C3..l............q?.C.....!..3....+~.\|d..e.6..3.._...b/...^\...\|.....k....F.....;R.c...>......).7...8..1.<.1w5.U.9.~.j..x..R.....f..r....../.:p...w..5._....&1\|p..#......2.\|..2..@gH..a/..M.........T..aZ....j?..z.i..Y8~.......t@.\>...../...r..3..2.{#.8:...I..#.@....{..C...n:....t.p..#.`.<.."...dw?..#..g{.. ..nu....8.k....OW?...+...?....;...[~/.~Cb.....}....i........q...i.nM//?.+...H......{z8".a/u...wF,..l7.s.....cH.=...p...{...\|suY.i.....^'..\'..$E...5.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	downloaded
Size (bytes):	144295
Entropy (8bit):	5.045579744742681
Encrypted:	false
SSDEEP:	3072:M7VyeDZydQfCRobiKz+o74dyPEtm/hgdhNYXaNALSpAM1SXIHK9w7CZw8ls0fsxO:M7VyeDZydQfCRobiKz+o74dyPEtm/hg2
MD5:	C42437B3253A8C5EFC35401012706E5B
SHA1:	3D753AD6B3843DA667D4F060719343B7B761E786
SHA-256:	BA613A1BC5467AAEEF5859B48160C1FBB973369549D2B3B32F94D736154A56DF
SHA-512:	D54CFC1656ED1100ECD7D672C1BBCC1C0536AFB25A16FEF1C812DD389D117B162668D1DD84B33D7726B8249F85576CE1CFD08897D2AF6ECD4ACD1F85B15A2465
Malicious:	false
Reputation:	low
URL:	http://ui.peoplefluent.com/versions/0.10/peoplefluent-vendors.css
Preview:	/!. peoplefluent-vendors v0.10.1. * . 2016-2021 PeopleFluent Inc.. */.pace{-moz-user-select:none;-ms-user-select:none;-webkit-user-select:none;pointer-events:none;user-select:none}.pace,.pace .pace-progress{z-index:10000}.pace .pace-progress{background:#1565c0;background-color:var(--primary);height:2px;position:fixed;right:100%;top:0;width:100%}.pace.pace-inactive{display:none}.pf{--version:"0.10.1";-ms-overflow-style:scrollbar;-ms-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0);-webkit-text-size-adjust:100%;background-color:#fff;color:#333;font-family:Roboto,-apple-system,BlinkMacSystemFont,Segoe UI,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-weight:400;line-height:1.5;margin:0;text-align:left}.pf .img-fluid,.pf .img-thumbnail{height:auto;max-width:100%}.pf .img-thumbnail{background-color:#fff;border:1px solid #dee2e6;border-radius:.25rem;padding:.25rem}.pf .figure{display:inline-block}.pf .figure

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 74074
Category:	downloaded
Size (bytes):	16673
Entropy (8bit):	7.986841483382695
Encrypted:	false
SSDEEP:	384:feicTZYwAi8ImMYhEA4iteVnrjeh1M0jF0mMl24NDHu:fSTawAUmMnVenMgFF4Ny
MD5:	B1B70EAAECB8D9431DF9731618D1C6D0
SHA1:	3BCE94DAD0DC8D41D1E3B6DAEF31A73123EA8BAA
SHA-256:	B4945ECFA08EE434D9050174819E6D615017867E7B5F792CE9456ADDDD0E77FC
SHA-512:	8ED1774FD84C3A8DDF1D904EB5F34E4AA0071F222A8061B029CC3428E9A6E8E90315BB27A7C2262667B03E1B3B5C3749E652303D349E7428E87C2E0F4731E582
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jsutility.js?22.03.1
Preview:	...........}m{.6..g...?0.vI.eY....,..-7../...6k{.P"m3.H..........^...$'iw..j.1I....`0....i4..8....?..s....._....X......W.a..k.}.....\|.c..p:..L.r'..5.q.pr.:.;...m5....x..7..o...Q..d..X.U.....t.fI....U.U.j(.....6....+.....H.EtUCr..7.)u.D....N.qb.!.4.....Z[.....m+\]-!"...j>6.1.fA......j.qh(F.....+..5n..7..qgv..i6C.Q.2..i..d.k..(.g.4..Q0...0L3w..n......?.i...P.4..7.\J'h....[.$.fnMg^......%.VWS....Eze.4....1...;o4......>....x.....TTq..nX.Swx.M.U...ge...V%.o .;.E .H.;..;.O..._TI&.....P.y....9..S.G....@G..9 ..(bu...k;....C..S[T..2..UK.h=.Xk-.y....Hs....:.. ..*...P..\%-.(5...X.(.......D.4..3..+H.R.,..?O)...G.=?G.L...Sp\|d...k..=I.d1v..}.Cr.4...zz..A..UN...u..Kd(..Iy...9.LB.Ma\|R.d..r..^m.s..jI._.$/....?$v:.._R...'T_..zD...8.{...{#....G..k}<cP.l.5.0...TtE+.0....E...i.B..........2....?..;....X.-#xjdq<...y.aQ++.C#..Q.l..X{e....k.+.D.d.9.Kt.k.........&..h....>.;.....0.AlR.zFf]'...p.u...p......I.....R.c.G.F..Y3..YW.....?......V.~<B.......W.....xTgA..."v.h<.tE....

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23523
Category:	downloaded
Size (bytes):	6319
Entropy (8bit):	7.963973538476937
Encrypted:	false
SSDEEP:	192:OVkFr2L62bhUbtX4zPU8fTXjQ6oDjSup1B:OVelRy2TjSup
MD5:	1BE7C44280538BF259174D9B597B5546
SHA1:	63D5A95225DFBD55D5FF075BDB95A0743D9B2111
SHA-256:	BDE95DCE5B774012BC704B81D447ECD9ED9373BA2CDCB15CE9CEABD0EB6937E3
SHA-512:	BE858D9EC2EA0A4D8FE421D34DF0DA4E34526EAB1C75BC435BC715162C4A17EF0072F31513ED81D259291F1FC5298BF9DCE7BE34557D25BB56453C2D3D89336F
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js
Preview:	...........<kw...._...%.K..Ws.(...49..v...=... ......e....... @R....=...E......"..D.....w..y>..L.....H[{?.r ...f.(...8M....../ev..{.,fi6......0x.fi".YQ,...j....7...(....4.q:..~.Y...@<...O[..Vz.A....d\.z.~G.......P.^..=Z.[....l.T ....F.EN.../.P....B&.....$..8..B..,...<....?..0/.y....)..s.E8....8......a..b$....8.a2..........CE.......a.K..cX%.y..[.&r....\|.M..@<98..g.E` .=~L...2)dv..E..E....H.....f.$..'.@.....v:m..L...J/...3.....<.}1..K....].....4..Q.^...v..... ...a..<...E:......9........$....h.`.b!.,.)..<..j.NpS.._.R..#.1.....".F..0nY..8......L......aV.+ <.....}kq.......SM.B.&......Y.t.[]Ep......d.....4.B..q..$.1...R=:.kZ...<.....DD...(.(.I_a.h.;Q.f ....&"R...s.\.1?.DW0..l.^,...Y.Od.~!>#$.W..s............t3.<.Lb..,C1.AU..s.).JR.a.8.i.u..........i....@...O....<..LN......^.ik......~..........~X..7C%<n:)^..M.X..)/.g..;...J..5K?..U;.Ej4Q..s..MGX..D.nb.w03..z.H),...w.....8...wH....WU.6.4..~U...7..M.x.e .....Xo...u...I.}.o.,m8..W...{...*=J.....l

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	206
Entropy (8bit):	3.8253250261415586
Encrypted:	false
SSDEEP:	3:yionv//thPlfv7hquaHCzoFlxIl+9/ZIUE9FQEul/lAlljp:6v/lhPqCzoFl6+/IPFQEqulVp
MD5:	000469BDD4D2E6CFB315DCC1C676348A
SHA1:	0A4B1439589DC0812AB1B3D67BFF21B60E700CB3
SHA-256:	34C689187341C53CACA1B84F98B8941A61B0807DCA7F7E1FBAE129217B2D7BB6
SHA-512:	F903AF8A9C65BD5AD29EB02D357D9304794E6D11AFF4035059F18CFFD4501F5C1E264D7024B00C3DB08CD2C29380F6FE3140CA2902ABFD742CD06310BC414A5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.............tIME....."'..4....pHYs..N ..N ..}......gAMA......a....]IDATx...1......Om...............................................................................Yd.o....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 14208
Category:	downloaded
Size (bytes):	3173
Entropy (8bit):	7.925566373738581
Encrypted:	false
SSDEEP:	96:HQC/mELcjGkQ9puECtzUnbIxCHmzbxQVdd+WIT:H7Xc5QjKzY00mzdykWi
MD5:	8CBE53BAA1423E2EB669C5585E3C7D6A
SHA1:	A3EB95D1E69F54A684D81F37E4D929443916AC93
SHA-256:	5B160BD8809796A70657A72BC4FD147B3F94841103A569B95B66A525F0E2B857
SHA-512:	74BF175B1050B9A29DE53689B50D62B7C7ED79D9223E3D70751BD60220CF2FC81A2A7E7F572DE2F18C69A6887F7A9EB358C33DF72125FEFFD49635FE2444A3E9
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1
Preview:	............]..6.=@....C....^..a.......d7..T..m.+.:...=......?.I...X...Cr..y..Ee.Vk1.$..u........?..?.....k.^q..V7..e........ ..\UJl..HV.....~...kN..M5H1H.4....[!;.a.Jl. ...w... .\|.W..U...+.'.Y/....B.J.t_-u6.L.G...}.<.1..B6...:r.7k.Lv..5..S..Ud'...uu.F..I..(Z.qL.hQf..\|......tL..&...x ;V....{...W.8;.d.$..l..............AuGz.K:T...&zTk..N.y,.i..-P..,..ww.z.z&=....p-........=Ap..a...$J..Q>......p...5..(i.......F.....C.]GJ..D....=g.I8.....N...J1"A...._+3.{..;.[d.B.Ca....]...S.y.......:5.Q.Uw.a.,....Hq.f.Q...l.k.....^}.YM.x6kDi...f.JX.]l..n......n..1NQ...4..R&u2T...B...XH.R.......t......Z....r.l.MZ1...y7..n[..."..E.......^..>...b..-hI...m,.I...X..`Ct...K@.......-[i-....78.1.R.m..g.A......+...c=Q@..-.O.\|0.I`.3.f..M....$......x.o$[..-.M/E....v.@.!;'..m........;.H.j...\|0.........s.q.......OlgB..@.-.Z8$'...R.Cy.PZ..D..<4A`...2..{F.p...,.Y.X.iO..U4A9n2XA....1...L).3..D$`D3.*.....i...p..!cl......`K.....&.ilM%.63.w.....S`.({.xa..-.A3.......P

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 10572
Category:	downloaded
Size (bytes):	3485
Entropy (8bit):	7.9477964056069546
Encrypted:	false
SSDEEP:	96:lmqqKOKQP54YTTl6P5wY6KhwXaMTD+frARDx:lnD9QP54Y96PGAGDx
MD5:	BAD3F62F0F43212ED2F07F627AA784A8
SHA1:	3D26DEAAA24B3E85C1D8095F2595A8A69B3C3163
SHA-256:	00024F3C1EC57425A54EB40D0C5A165F0D111ED214931E0321B1CD396BBA31FB
SHA-512:	4F793165FE1F1AF0C0FC338AA449FE4094FCB49F00CA8D1A3E475F6AB3EE55C16F246CA37724062AECA0E3FFF28E111BD1A8621AA2E22F3908F7F2396B57498E
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/common.js?22.03.1
Preview:	............ko.8...?p}.J.:J{{.a.&@.v....I.X..A.h..,.H:....~3.HYNz.....p...?=~....F.....g.~....?}..{..k........E@y.4.P4S\su....L.Y..3.l.U.....F..+.-.\.M.6L.S...........Y>>...uH....?..y......Z..3...l.2qc.W.+..m.<........l-.d1\-40J_.Q....3.90l....w.x.T.$:...E.;\|...\|.j+d%o........?..o.uY}a.,...H.fZ...T.........K.E+..7F.3..aDg/..=..[Q...l.P\|!o.iSj.g..G...;.....ho......3 (.....e.I.3n.$.4..`..b...R.-W1.kB....Gb.r.Yr..^1m..Y..2.<R.T....Z......0.2.8x...{JVr'......kWM.....td.......Pl.@W.........ja.`...>~@.....e..\..\|o.J-.H...%.&j>....0..3..Bd4@p.r.,v..4...+.....,.t...V.y.$.g...d...M...`...<....^q..w.#..........f......><...Y4...s..WQ..X..(.uv.F.K..H.0..=@.G.^X\|.S....{.....^..6..?...]........$...\..X......07..l!Yl{..B.}.X.Ho....u..f.b......~.?G....rH......L.......J.c:..G...6.j..-A...`x.n8L.X6..8N...(.<...h.L.`@NHj.......7.....g}.....$....f.A.r.={..Z..I.P(.M./.....jyZ6..KeK..Z..rlJ.....>@...(.QW......."..1..v.ZF..w.....q..>....-.......z.;

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15406
Category:	dropped
Size (bytes):	2018
Entropy (8bit):	7.857899495585244
Encrypted:	false
SSDEEP:	48:XyOJQNBd2+pOLBAPoyNND4YSMPFqvBI83lJ3dmwl3LnoOx:CO2vd2+pOL+LNpdteKoJ3bbnrx
MD5:	3AE1CBC0434A789C635F0C71BC36C1C5
SHA1:	DFD62260172A9647A2F59A8020A13E7056AD70A6
SHA-256:	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
SHA-512:	7408F896BF4D88C034D429C1C8F3FB8BA74B576A866C2AD9FD0317C0EC97D51FDB53D887F7F7F5457DEEFE7AFE4D492284B7F1527E6DCEC1071BE2C7CFB0745B
Malicious:	false
Reputation:	low
Preview:	...........[kl.U....\|..ng...[......L.h..\v.H.+.Q.....@..0..H\|..11>b\|`4D.........vg..(...)].K.B..vvwv....Y.s....{..A.J...1..~a.0A........2V...^uu.. \|U..........L./..q....e.>.Y..t+.k..K.n_H..3\...y.^....f?..f.P.y....a..j....w.fN..o.t.h.~8/.:..L.K.f.>q?.....C..1.....o.-..u.0...'.=.v......Y........O l.Tk.(.vDGb.[...28........ t.A.3...`.m..6.#.....47....^m..>7.l.O..c...M{C......=...M..3.../..f3..7..8_...m.K.<.4...3Ed.... .m....%...\|.g..l.<h.E...i.tr~F..........R..2!.....~.5..'.......C3..l............q?.C.....!..3....+~.\|d..e.6..3.._...b/...^\...\|.....k....F.....;R.c...>......).7...8..1.<.1w5.U.9.~.j..x..R.....f..r....../.:p...w..5._....&1\|p..#......2.\|..2..@gH..a/..M.........T..aZ....j?..z.i..Y8~.......t@.\>...../...r..3..2.{#.8:...I..#.@....{..C...n:....t.p..#.`.<.."...dw?..#..g{.. ..nu....8.k....OW?...+...?....;...[~/.~Cb.....}....i........q...i.nM//?.+...H......{z8".a/u...wF,..l7.s.....cH.=...p...{...\|suY.i.....^'..\'..$E...5.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18921
Category:	downloaded
Size (bytes):	2365
Entropy (8bit):	7.905834704910868
Encrypted:	false
SSDEEP:	48:XHy8zxQ0S7eojfaVYih1pxF1VPiTFp5NEXc+BkckcDxvGyv:C8PMeoGVYihXjZXsLcDxn
MD5:	9F11E50532DDA1992522B16CEC8F8279
SHA1:	A9E71ECF8A860F43A7A78BFB81C70726ADB4D0FE
SHA-256:	88F0387C1DB92BC89F7A547906A7091B4CFBD2D8CCF77E481F16CFA982B9B7F1
SHA-512:	866410D20B2848F32604AE6D630BE7504B06181E2F3FFF57619D0681002B4B2FC89396EE1A351C7182E5D15E864E993309CE380F50FBC1E777CFC16F1C70EA18
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css
Preview:	...........[m..6..l...E.."...n7.~.K.K.6..\|,...&..t....b.{..R".F../..8..p8....@..\\|<..<.G.G9H..VK_..p.^....[e..>U.1O......J...{.....?...[p....Vkx.....R.....T.51. JWe~...^.(.Ap.....A..i....X...X.U..U.V....[.$Y...~.W$..Bi..."+......n6a..L.b..Y\.(...L.QC..a.bi...{...1...1...x..:(....y..k..<.G.Cq.Q.....b.lrb..Kb........,.H..H.@.;"T.=...;X.kW....]..@..a..}.a.{.......?.an...i.......W.12.v.$.(..1.^\|%t..Q....p........5.._`..[puY._.CJ...s..=#. .BO......z..OUZS.`...I..ZZ.....gr.6.jsH.TC........l.-.;j.(......K....E..,.-...L..m..c.z..@r...N...T.l7......n.....O.^..g..i...hC........W..m.e...Q.V..T:......{Y..[....I.c.u......G./Q..\|.q....H..yg.%.3.U.3.B2..HP...g...!......V`.....C....8......Z.......6.Ld...zq..S...H3.$...&..pf...y....ub.d_........O........9.b..EO.Q......5F:d<....#N.o.,...-Q\|A.d#.5I.%!..(u.I.2.qR........l..{.fQ0...G........an.5.y..^}..?......No.:.fto.,..mb.....Q.:to5. ......!.M.V.Y.....\|..S..wd5Q........n.6...j...s.=..S....9....

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15406
Category:	downloaded
Size (bytes):	2018
Entropy (8bit):	7.857899495585244
Encrypted:	false
SSDEEP:	48:XyOJQNBd2+pOLBAPoyNND4YSMPFqvBI83lJ3dmwl3LnoOx:CO2vd2+pOL+LNpdteKoJ3bbnrx
MD5:	3AE1CBC0434A789C635F0C71BC36C1C5
SHA1:	DFD62260172A9647A2F59A8020A13E7056AD70A6
SHA-256:	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
SHA-512:	7408F896BF4D88C034D429C1C8F3FB8BA74B576A866C2AD9FD0317C0EC97D51FDB53D887F7F7F5457DEEFE7AFE4D492284B7F1527E6DCEC1071BE2C7CFB0745B
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/favicon.ico
Preview:	...........[kl.U....\|..ng...[......L.h..\v.H.+.Q.....@..0..H\|..11>b\|`4D.........vg..(...)].K.B..vvwv....Y.s....{..A.J...1..~a.0A........2V...^uu.. \|U..........L./..q....e.>.Y..t+.k..K.n_H..3\...y.^....f?..f.P.y....a..j....w.fN..o.t.h.~8/.:..L.K.f.>q?.....C..1.....o.-..u.0...'.=.v......Y........O l.Tk.(.vDGb.[...28........ t.A.3...`.m..6.#.....47....^m..>7.l.O..c...M{C......=...M..3.../..f3..7..8_...m.K.<.4...3Ed.... .m....%...\|.g..l.<h.E...i.tr~F..........R..2!.....~.5..'.......C3..l............q?.C.....!..3....+~.\|d..e.6..3.._...b/...^\...\|.....k....F.....;R.c...>......).7...8..1.<.1w5.U.9.~.j..x..R.....f..r....../.:p...w..5._....&1\|p..#......2.\|..2..@gH..a/..M.........T..aZ....j?..z.i..Y8~.......t@.\>...../...r..3..2.{#.8:...I..#.@....{..C...n:....t.p..#.`.<.."...dw?..#..g{.. ..nu....8.k....OW?...+...?....;...[~/.~Cb.....}....i........q...i.nM//?.+...H......{z8".a/u...wF,..l7.s.....cH.=...p...{...\|suY.i.....^'..\'..$E...5.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5054
Category:	downloaded
Size (bytes):	1504
Entropy (8bit):	7.854045174913635
Encrypted:	false
SSDEEP:	24:XFJQ3ScvP/zmxOGB+Hn7a2Pg+1bXpj5lOHJ+9XvfsoHtrT3iq14hovhPz0pDyQUa:XFTcfzmxDyn4ypjDsQ9/0oHRTz14yh4L
MD5:	5A09F242F6D520CA2645CABBC94994E3
SHA1:	BC872DC4DE9A2F4D54A4B2C1CA45FFE532F86701
SHA-256:	4686A837CB72AB3C5B903B2F19104C68E6103D6614B3C24305480D4E55B04B19
SHA-512:	2AE725A7696899329ED4FA18C93E2B844B0DAD9113838FE087EA4C21A17AE5B2D76F0AAED45FF1EC9488129E4D6526CA311F95879F9AB97AD3086C02004EF8A0
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/jquery.innerfade.js
Preview:	...........X.n.7.}.....u......>...4..&.A.8E...\/c.T.\+N .....tH.{..Y8......93.2=...>.{.{.).....m..yJ...S..9..j..g..'......s....^.Q......2].!.......y..Z?-t&.9....T..v..a\|.:^..V..x)W..7..C..z>..XX..Q4.)@g.62....w..5.F,...u9.... .....S.^s.$.I...3....z&".7..p..O.r....G..&d...W.V.................Q.O....'K)0!..O..ix..o...i..W..0..2..QCl..N...b+...]S...........d...H..9MI......3..4..s.0q5.^..y.0......LQ..(..."G...7c.....LJ.......f+..z./..zC...R..<_....yM;...!.4.C.....%...4.u+....;.F.#...3.P.sxa.....r.....a...q.K.&n.......BK.. /.q..D.9<...<3....2.w.9\Q....(.RGV<..:....$.b.rm..TC...Rc:....<r..F'..o......l...i!..Cx..G[Z...hd.gP[9...B..T....S1%..f`..{..z1K.P.<i....I.i.P.A...vCrL..H..e..h...4..QW{.6..V.3.....6......\|{SE].....j..l..._.m.9o{#5.....BM~.P...e.Vy.d....Z.F.....V.a.a9...w<7..\..u.W.bN.......e.o.V..R1....(G..`.....14{..b.$..4.\|^}..IM.0.2.sv..N.....=..v.+....%......{.x.s.......$.%y.M......s....)....T.r0.....i.....es....:.&.c8......

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1348
Category:	downloaded
Size (bytes):	564
Entropy (8bit):	7.614822915101465
Encrypted:	false
SSDEEP:	12:XjgRXrSSF9Vgk9UWpzF7R5MeE3Pk/my9yEdn3ZDNwag:XEu8Vn9Rf7u/k/nyEd3ZDNDg
MD5:	8331F459704C7CA0FAB77C59AB3CAFCC
SHA1:	B2EBEF8B94781FD0107AD6992909BB11C2D027A1
SHA-256:	670CCBF5A4EC4B315CF3FD0788A1DD8DBA134917FB9EBF964FC280B88D6EEE31
SHA-512:	1E3BC2D1E0E34D5EF571503CDC66F2E70BA167B64D1C65730E33C21367492AE706A6F05B4CCEA7967E2E790F3E99A190DDC48BA510A5490225CC6138863A62E6
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/BaseView.js?22.03.1
Preview:	...........TM..0.=..!.I6[zC-...R.S.UO.8.b.x"{................y..7c..x....bHu...bq...\|._.?...`....E~.......c@..a.[e....<..\!hr.).Q..+..T{.....+...K..2r..t.x....f...?..P)..#Ea....B.+x..j.p..5..lT.).....4..p.^...l.k.hDP[.(r.."C~.c!$L...^.(..a<..e.t..f.g..L.D%Y.JWg..^\|...l..]..a)...g.b.i..%...aJH/.KHJ.L.z..K..;......q...s.=.VDtl...;~.R..n....jtO..t..3..7V......n._:......h3.....a.A{..`..$......k_Y.n..#.5.I/.+....Q4M..M...;U./grt5....Vm...n.#.h_..A.._\|/....!.Z?.ZS........O.t%l{...c.z=5.-&.a5.H3....G..[.ojbo.Gn...s*..d.y.?..]..<...}.6pD...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11054
Category:	downloaded
Size (bytes):	2904
Entropy (8bit):	7.941972379665451
Encrypted:	false
SSDEEP:	48:XTyohneIRpFqzxjbfPCJJv3UZH28HAjp+SetRQpt6fI7cYgUDN2Wmg2BMvhPdj36:2oheyFU3CJpQH28gj4/RQt79gUDQWmgw
MD5:	F4A6357F0EED53813178F6A1568D4522
SHA1:	3EEBB7937D8181A77A74897CD0A3BCD22B956281
SHA-256:	151B4816D7210616D78949A809395B54D69FB3C2FB90CA40B17D91A2CAFF2B9F
SHA-512:	F4D48F2307D6895A08FBC6040AC767082B3AEED40F6157A044E3FC606569421C915F66642D3A9D8159D9C354458DFD51947E3E5A7A9BF3F14C273BE8DBBA2890
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base-plugin-custom.css
Preview:	.............n.:.}.B..hSX...Nb.....S`........A[..F.T.N......E"%.v/8.lK.p8..>...........y....{...&.S..1+x.."..n......_...'.Wd$..1...iR..8.........?,.t.D.j..k...h...S.=.',.y9.)....&O,.q?..M2.E,Y......Q.$@hN.>I.i...'.;&..Nfi..\.>Y.4~...q....x.4F.q.5..s.H=R.p.c.sB...D.`.;q.]....,e...dM.%K....x.m5.d..h..r%Z.M.... .<.....Lc....W,.h.."..'2.i1}.I....._Q.>t.x.1}..h.x.p...."..TH.c(..V=ggTj.......~.G...@.... ..u`o../..gk..R.4`..A.y...b....Y..n...Y.\...2..4'.^..&..lqva.b....4...>.qF_N3J8P...6a.7y.>%.h...9..3/.3.M...............<I...q$....m].........B\5...1)...:c.`...}.5.^.:.N...a...-.-..f...<.M.......f.Q>..A#.4f.w...oe[..........R.i............$WR...F.R..;q.. ..pm......5..])..r[5>.2..^..O......P..'..u-.1....V.S....(^%.q....S..I..7<L.a9...H..G \|j..Y.?.*.D.4....i..B....,._.......T~F.....\|....k:.....0.....jAz.nx.\|..e.K._.....Vy~..y.$.p-......V[.KV...v.V\r..\...~..M!....A.X..&.'.\].O..t].p-7\..z...#..TT..../X.../.\|..S.g.S4.{.:...N.JD.}sf.9....!..p.\|..?...m.w..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5032
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	7.8695393570714725
Encrypted:	false
SSDEEP:	24:XdeZIYQPfKpohmafjYT9/tj9FLrlqZFac6tyS9ljchiAayEF5:X/YQPBxfETZtjLYZFacgyG5+qf
MD5:	15D88D55885F2EA90A5A9425A5BE5392
SHA1:	CB0CADEA54A7F7D93F67370BCF6008E11CA016D3
SHA-256:	775925F46A270741BD0E1236E670513C99C76D33AA1F4BD701CB72CCAC0D24D2
SHA-512:	312E5A9BBAD30353EA53069C29B7F93E09225C04AFC2F3A78CFCDD0705B9318C08017B5FDAB832567F92D74ECAE5DCAFE4D4AE8A1D64A2A1CDAD2255A1D16F0D
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1
Preview:	...........X[o.6.~n....().${....5].`..=t.0 N.F.e&..S....9..P.l..:.!.y....^..S.G.<....d.s..;...i.k..d$E..`yBX>..0a.V..A\2.,[.L....RL+#e..T..(.z<..c1.bGa..0....G..H...Z.MG.o.d!......&?v.?....s...%x.={......q..Z...Y..#.-A.$"..[m2..6.9K...E..x3.....s../.......J.y...8H.>....s..I'......:..(...+..1..,,.9S.......6.)k..I;...S.....%..............\|.D....T,.T{...(...X)/.....-...%i.1.@.....\|$.3......4u.u<.V.Xc..f..w....."..jVD./.~..^.J...Ak.A.B:E,.y....I.5(..7.......^nq ..m.....%.m6..H..Aa..3f2}..H.u....Y..+../.{.... .`!...\|..U.-W..cH..R7.)...8u.......U.. ...Z..wL../.z=T....I...n\_.X.;..;r"...w...y.u.....M.P....$..V..7...../..M.....d48..$<W..1.#.FJ...3....Z.R;}..k.0cy.iL..~...E.l.....l.Z.5..6..z....Ry.`..<..h......y3Z....F<.....iHH1.[..p..\|5..S4.AI...._Om..<W.]Ae...-K.....lfF.!.S...x..5.[..m....w`.`4..om..!..C'..jE.W....h..A...>.h....}.[..v.i.[.B.,.6.H..=i.F..m6...c{r."[.x.U`.....j..l@$...."..7,..B.V.+....H..a....o.=lO...D....z0.m-..1,P..`.K.m,7G-

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15406
Category:	downloaded
Size (bytes):	2018
Entropy (8bit):	7.857899495585244
Encrypted:	false
SSDEEP:	48:XyOJQNBd2+pOLBAPoyNND4YSMPFqvBI83lJ3dmwl3LnoOx:CO2vd2+pOL+LNpdteKoJ3bbnrx
MD5:	3AE1CBC0434A789C635F0C71BC36C1C5
SHA1:	DFD62260172A9647A2F59A8020A13E7056AD70A6
SHA-256:	4708594AED5595A19D36814F0C74D5460B00348C091D83F418A5E547EF5482E3
SHA-512:	7408F896BF4D88C034D429C1C8F3FB8BA74B576A866C2AD9FD0317C0EC97D51FDB53D887F7F7F5457DEEFE7AFE4D492284B7F1527E6DCEC1071BE2C7CFB0745B
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/favicon.ico
Preview:	...........[kl.U....\|..ng...[......L.h..\v.H.+.Q.....@..0..H\|..11>b\|`4D.........vg..(...)].K.B..vvwv....Y.s....{..A.J...1..~a.0A........2V...^uu.. \|U..........L./..q....e.>.Y..t+.k..K.n_H..3\...y.^....f?..f.P.y....a..j....w.fN..o.t.h.~8/.:..L.K.f.>q?.....C..1.....o.-..u.0...'.=.v......Y........O l.Tk.(.vDGb.[...28........ t.A.3...`.m..6.#.....47....^m..>7.l.O..c...M{C......=...M..3.../..f3..7..8_...m.K.<.4...3Ed.... .m....%...\|.g..l.<h.E...i.tr~F..........R..2!.....~.5..'.......C3..l............q?.C.....!..3....+~.\|d..e.6..3.._...b/...^\...\|.....k....F.....;R.c...>......).7...8..1.<.1w5.U.9.~.j..x..R.....f..r....../.:p...w..5._....&1\|p..#......2.\|..2..@gH..a/..M.........T..aZ....j?..z.i..Y8~.......t@.\>...../...r..3..2.{#.8:...I..#.@....{..C...n:....t.p..#.`.<.."...dw?..#..g{.. ..nu....8.k....OW?...+...?....;...[~/.~Cb.....}....i........q...i.nM//?.+...H......{z8".a/u...wF,..l7.s.....cH.=...p...{...\|suY.i.....^'..\'..$E...5.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	3.8253250261415586
Encrypted:	false
SSDEEP:	3:yionv//thPlfv7hquaHCzoFlxIl+9/ZIUE9FQEul/lAlljp:6v/lhPqCzoFl6+/IPFQEqulVp
MD5:	000469BDD4D2E6CFB315DCC1C676348A
SHA1:	0A4B1439589DC0812AB1B3D67BFF21B60E700CB3
SHA-256:	34C689187341C53CACA1B84F98B8941A61B0807DCA7F7E1FBAE129217B2D7BB6
SHA-512:	F903AF8A9C65BD5AD29EB02D357D9304794E6D11AFF4035059F18CFFD4501F5C1E264D7024B00C3DB08CD2C29380F6FE3140CA2902ABFD742CD06310BC414A5F
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/logo.png
Preview:	.PNG........IHDR.......P.............tIME....."'..4....pHYs..N ..N ..}......gAMA......a....]IDATx...1......Om...............................................................................Yd.o....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1401
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	7.628252119542794
Encrypted:	false
SSDEEP:	12:X9NRvGf4Z5mp6LvxFf3YETJt2iTIkIJTu1rKAd:XfRv+Cu6Lvxp3YEdwiTIpdu1rKAd
MD5:	CDEAB9E01885432A978735DD53CEC579
SHA1:	1D8E1ABE8C3107F427E85ECF937CE95E2DB7DD66
SHA-256:	221FDA02DD891FC2FA739C26646286189352626BB3A34A5F82D3CEC5EAB3C58C
SHA-512:	A502FCE154F6172A01C4F8EB654974649F8CAFD9D73D5A5F9AE3565637692BD1A9F27F19C214F08AC4A598598E294AC625330FDFA6152C5DB82969F82787D49F
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1
Preview:	...........S]..0.\|N .akR.{=_.....B).{8..G......$9!....dc;.K? .mifgf...0.B.`k.'.vU.&rX.......<a..j4^Y..[.EOy....C......m...!.s...5..h......wv....N.Li]....-....m.....,/..m...8.36.T^h..\|#..MFZRCX........:.@8.P...].... ..d..!...'........<.Ow..l...h...r.9.N.7/JSpM5...l..6.#.=~q..?..Z..........,..Ec..vITJK..6^.<Q.F+.p..qR..\|...R4i&..CZ'.h.(....'.%i.jt;.....hw.....8)A>.`.%..q...zX..V.:.iZ..f...L..nn:.d.4.... .4.......2...lHl.O##O....VYW':vX..nc..P...L)..^..rn.g...Cq..l..9.....vw.....iF.#..l..y....o.....T....R.../..Av..t5B....0..M....8n.?d<....l.11}..<}.)./"..;y...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2545
Entropy (8bit):	7.166508861670024
Encrypted:	false
SSDEEP:	48:HzkvvqZ5vmZv9Cd9c567nXCp1MWBXpSP+km6dAuzvdEKP:H4XYJndGU7nyp1RXplkHdAiv6
MD5:	DF46993044576F83F2C2CC1A64E18F31
SHA1:	1E0D02A9DD841F94D68BC0A1DA91F858AC9874D7
SHA-256:	68255B5E88E8C44694211D8D86C3460BE92BB6F3D1DD252DC0BF783E833CB067
SHA-512:	E72827E5ECFA9ACB3237C14D7A445C10E4C813181F24D2662EC2441804A7A92701B5868D5AC9423F00E297B7DF454B88C7B46723562D282AC93720436B0F7578
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif
Preview:	GIF89a..........qqq.......................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,........... .$.AeZ...<...Q46.<...A.......H.a....:....ID0.F...a\xG.3...!...O:-....Rj...TJ..........t...........~."...ds]......)t...-"...i;H>.n.Qg]_......R.3.....GI?.....v$...j3!.!.......,........... .$.0eZ..y..0..q ..P..W...)";..qX.^..D50......<H3.!.....k-.n..a. .(.i...d.$P@y.w`.J..#.....?..y........o...g.....f....'8..{..'C.p`j.n."...2.{.`x...jy.4...C,.4..o#n.$.....!.!.......,........... .$. eZ...$.2.....q....E. ....p$H@D/.....G.D.j8v#..P((D..... ..N.(3..#.y....(@...gUx.kK.).....?K...............$..."...........K.....W......x..?.G...#.W....n.h.K,.....+.....!.!.......,........... .$ .eZ..Y.$1..Q(c......O'"............. 1....q.d"..A.....V.x8p..4988.MRC.@....e.3@.iI.)..'.?I.........@.......,.....#.........5..,.....".E..z...?..@.E...@.....).....*!.!.......,........... .$.(e..$....C.E1..;...('2$..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 13808
Category:	downloaded
Size (bytes):	3682
Entropy (8bit):	7.951586585683819
Encrypted:	false
SSDEEP:	48:XgBcpWT5gz1Ni1z93d6iIJ+w3XfOK2KQcx+O1fnFDOJTIYe3Ao8RHHt9mD1sR3F:MTazXi1z9tCJcK06fnFDOhIYbRLeSV
MD5:	1A936401FE24A0C683E366670B1665F6
SHA1:	5475BE32F80B44A724EB64784C276BC360FBC461
SHA-256:	B4F3D8F03D7F864513DD5BADAEA31FBB9A4D24C31F14162172301C2015C11D4B
SHA-512:	B22AD70B3FA8A881DB138F31138F490794B266C89C396A159E9734C9495E91CD47F435EE3D87637947481240ADA1D7275ABD3837E78A4321D82F1D35918F3411
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1
Preview:	............is..:......j$.9.4v...^.;c.M;.?P$d!.I..+.V......<$.:o..Ud....bo.\|........h....4e..fO_.~.}...%;..[q..DDa.S.W.9..F{......ME.h...3..N9.p"\|.......l.G.X...L..(.qS8.E....c........c.F...L].,.R......$.l.^BDn.`.HY....s=/.}7.8..tJ$.<.I.?.%.. ..X.:...M."....c...4..K...v.\|.L..C$......x.......w.......Y.......g.....-.....9../.@KL..{..0.9....W..Yy.u}........g..:...4.CD.......F.....C5X.V6.,Hx:..FYZ.M.Bn%..~.;.....,..<N.+.,.D1..X.6.E.`..6..C...C.$VDFqL/......l[c.z.s?._..[+..............8..>8;?8>.....j.;jG..q.b.?=..z.wS...:8..OOpzxr<<...v.!.0\`..[.....<..X.q.....a B....>...d.4....G_.2/p..o..K...%X?....@7..0. ...X.......-.b~...CD..A1..w.........u..$1...'...?(.....n.%. .+...k...=.s....w.....!_n\.v...P.t.q..A.$.5...c'.h...C.^...e....c......'.j.r..D...h.....H.._.jd.x.&B=.u..R.l.a........F.p....\|..R.P.w+.1....@V.5..@$)iQ.v.m.o.^M.&.5....E0]....T...z....*.;.]e6...`..+........{lg.e3..q4.W".@..t....'"...8.....}.:\.T.z5(.]..1+.t..zr....b..M..Sl0...{..AbLv.c.~.7....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 253669
Category:	downloaded
Size (bytes):	68029
Entropy (8bit):	7.996405110087103
Encrypted:	true
SSDEEP:	1536:VUYUC21XbeQ9Zo3CAiDd1UAfnQWmOIo0fry5Jn9B9TeJ:JU9LXvzp1UFWm/5fr2nDpeJ
MD5:	C10ED8605CD3A62D30D6BFD0FE981487
SHA1:	6854BE66391CE424BEE775D8EABBD134053F2E98
SHA-256:	1BCA88E4A548C9976A5DEB5A87843DD55274E361A0EBB966E1DCF0DF271D0876
SHA-512:	B63AAE0EFCF2F075D3D0DAE30AB469E11456E41CBA95B7F257867912247430861B5F5D355ED0BE72BAAF4951F0D1B5FC9DD5C008301E3EF7493D48F793E27004
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1
Preview:	.............c..0........`.).N..,....w.$...m.U.DB".....mE....2w.(9m...."...3.~N..............G.&.....~=.O>....N>..'G.]....._,.-G.......h....hG.o..n..+zX.m.?.&.Z..X.s.....'.gs...W..Z.?..j^...W.:.~......U..6u....W.A-.......z{}.~.j.6.O3.W..........U..J......z....O...h.vx[~(y.x.......n..o._...~6.M.Z.....x1...J...JhfX."2.4..\|^o..&..m[...W.\#..j.^.....\|U.......Z...........,W@...U}...77z..m.^w.....}Qo...zS...6W..3.+..4...u.7.m.........B..}Q.........n......p.a.a..jqT..bsD.]...fz..r^TM.8z............V...>R.Q..w.>Z..eU....Q~.....<b...D..m.H....}T.S...."kG..weS^......iTV0..b..P..6ND..h..Z..EQE.Pm.;,..E9mG...i.''...../...~....u..[F..#.z.m...n.m....;.\|]~(......e..n.W0d../..E......q\6....%..C.e....`p.d....L....vY6...v.j..V._.......'.D.W.z.6...z.O.e...nL..zI......W.,.CSu.(.E..\..U.4~).....uQ-......zsSl.%.H....,."w9zJ.R.....`.......[.,/...;=...w=s.o.p^....n....\|.wR.8....~....m.M..5..zS.....W$*.......c.Wok..- ...-.......6..-......

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22827
Category:	downloaded
Size (bytes):	4830
Entropy (8bit):	7.960797965095332
Encrypted:	false
SSDEEP:	96:djNDJdAudwuVtaWY2PtnChdInFwmISeEY31POvuL/GmRp1mP:VNDD60M+lnDISeEY31P95IP
MD5:	A7343C33B83829FF0CE7951897EBA7A5
SHA1:	1317130945072103BAA854EE176341D8BC7EC241
SHA-256:	EC47D96B4434AF2995D02B9F43B8F18C5A18D1F3DA1318ABDBAB6911E8A06FB9
SHA-512:	CDADB4F1C1B47DC72F79E3218AA884394DD45C4D02C7FDBD006D1B7729312DB9D81A29620DD9AD700AA7512120A3322410CD45F42EB601CD769AD5A03E2864CE
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.css
Preview:	...........<.o.8.?7....aws.........i.K.E.n.x8..D.Be.'.I.E....DJ.l...=.go76E....\|.........O.^.\...9..uo.......qrB.{.u#....Zfq.93w...O.Y...!yK.....{HR7J..&.,...t...co..0...p.....'...g.5K.%.i.b...}.'.:..!......:...!X.s..y.4.....h:wp...o....?.,^.....I...d......`..{r$..6......Q.7I..w..8..d>....:......h...a.}..:.(...t..@S.@.."..3X.......)%n....9.\|...=.4....... .2jB..s.'...&..5]gY.9Q.L.ycJ=..v<`..+.>....r.h..uF...$..+7R;..K..L.9.B..K7.NH.N.(..1....E..f.)s.0..]C:.N+...8....8v.R`A.9.Ky<...(N.n.rF......_.......{A.Zg..L..K\......m..c../.......$.I....#.).4.M.V.....?...............S........%..gS~...h.......S..I\?X.@dv....v\/!...&.g<>.Ln..MN..$..%.j.v..X.Ou....M...Co..Vr+.T .v....}..4.W...N....}.....1.].<..<..Xiq.M.#..:..O4^1.Q...Q[.6RZ+..."..D.>.B..h..L....@.C....f2V.W..H.?3.V>36W....)8n......,[S.#u.Q....&j[.l.m...J.....@.'7....+..q.=....Y.......^_..I.[E...-...i.....Y+..c'.VZ`..i.....H...D...qM......*.-....].owS....uA...SG..=.w..W....y........X..4.....w

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 573743
Category:	downloaded
Size (bytes):	82736
Entropy (8bit):	7.995164829266983
Encrypted:	true
SSDEEP:	1536:yFsMRBNQeM1ss40LALeyI9dtO6wetX98ExGhxNyl+9qCHTA:yFsMRDlM1540L/dpwM9xxGhN9qB
MD5:	516809D8C0956C826193E7813C086C5A
SHA1:	28FC9DCCFD16D172F5FD94A62B8295A4BA048491
SHA-256:	EBD2D3535B28825CE097990D44E1528E9540F9443FC0954C0CB4E6D6A51BD293
SHA-512:	CF830868CBD9DA6A9045B62D6C031A06110B1403EA435B70F2515FA37AFCFC66EEC93EEEEE0216E090095561C5F64560DAB16E0DCC2ABECB894A006DFA913EC5
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/styles_core/base.css
Preview:	..............7.(...O.-]u[R..\...ly.-....W.L..dR...k.Zw......?.#}.p1#..r ..{.K.rU"....@ ..........&j...,.[..V..`....<YW..$y.,!..2H..I.....V.....p..Fg..G...8tL.U.../.h6.W..$..(Y...,.7yxJ[=i..?.O..Q.M.8.Nx../F...&....X../.Y.8..}4...z...8.]...,Z.1.w[v..H.3F......4.`.{...Q.....OV.4..G.py='.. .e.C.=.i..yt....$..w.cg.,....\|...0......([....$N...8.....:({Z...h.G...I.......(...3.O/.4..A....lu..8.n.,IO.ID.."\....N..........p.uyF.2G..!.....w.a7.SJ.EJ.~b....,.b...X.t.........{.~...$U... <..E...=.SFv...`..i....5.3;.V.,X.....Al>]O.t..'...u.?....S...w..i...WAa.J2..T,zb.R.Go...^..N...4.g....4..!U...i7....}.&.......mm...N.._..z......,.d.4...zuv....0..N.....=..3..$&b.v.K...L...i...@o.%.W.f....\...g-..L.N.j..C..2....@.<.#.....4...d.L7Y.J..l...N.r...y...X.4-.t.L69.O.~@?.R58.58..Gm...p0...Z.....p6..s.P7..z. ..tf.......'........^VJ.6u...%...,.4.........r.Y. Yb/....;a.j%Gh.I..'.^!..:][......zj....V(.... ..w............S}..S...D8..>.d..;.:...0.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.09306920777189
Encrypted:	false
SSDEEP:	3:CB0uSDwL:C0uSc
MD5:	496D5D9A0FFA08B2687114CCCE51B41E
SHA1:	AA523FB1C3211A9E571B675EB43CB6F7F930C95E
SHA-256:	8BAD46EC1E5C52007B0DB73259B0DA6EF28C8CE68FDA3CD4AE0FE14A0F772F1C
SHA-512:	57EE711B61BE3E5B1ED1203FCB8FD548E66051729F1D30C5CC393A77F51AB1C4F4D344E80B4FF67694B1104F7EB0B37A2576C326F32E40D96166E788B064D94C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn79KMDCfWXuBIFDa5550MSBQ2d1uoN?alt=proto
Preview:	ChIKBw2ueedDGgAKBw2d1uoNGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55300)
Category:	downloaded
Size (bytes):	55431
Entropy (8bit):	5.12873770157069
Encrypted:	false
SSDEEP:	384:l5zMT9aHHp327TnW2fOHjeu/Kvskioc3L+Z6nxnLMxWZd2mEqHy+CH93du:l5zMZ1Pndu/KvsVoc3qEx68
MD5:	FE0353CE42289417AC5A99BF338C9FBB
SHA1:	7FB1590FF88A61B87C46B2DA43DBD278DE010F43
SHA-256:	21DAFCA9A4A64F73404F86C61D112DA1DA785BB69256233DA8117CACFAE5CF19
SHA-512:	4F23EFB0E22FC7C194F3F27FD2F6C35DB64A4F3BF0248FD76AEC4FDBFCF32DB8A0865ED9CA537E31A6868B122F51FA595C5CACE4DDDD1841940C500D17942221
Malicious:	false
Reputation:	low
URL:	http://ui.peoplefluent.com/versions/0.10/peoplefluent-components.css
Preview:	/!. peoplefluent-components v0.10.1. * . 2016-2021 PeopleFluent Inc.. */.tippy-box[data-animation=fade][data-state=hidden]{opacity:0}[data-tippy-root]{max-width:calc(100vw - 10px)}.tippy-box{background-color:#333;border-radius:4px;color:#fff;font-size:14px;line-height:1.4;outline:0;position:relative;transition-property:transform,visibility,opacity}.tippy-box[data-placement^=top]>.tippy-arrow{bottom:0}.tippy-box[data-placement^=top]>.tippy-arrow:before{border-top-color:initial;border-width:8px 8px 0;bottom:-7px;left:0;transform-origin:center top}.tippy-box[data-placement^=bottom]>.tippy-arrow{top:0}.tippy-box[data-placement^=bottom]>.tippy-arrow:before{border-bottom-color:initial;border-width:0 8px 8px;left:0;top:-7px;transform-origin:center bottom}.tippy-box[data-placement^=left]>.tippy-arrow{right:0}.tippy-box[data-placement^=left]>.tippy-arrow:before{border-left-color:initial;border-width:8px 0 8px 8px;right:-7px;transform-origin:center left}.tippy-box[data-placement^=right]>.tip

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 992 x 1121, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	5906
Entropy (8bit):	4.22007655708657
Encrypted:	false
SSDEEP:	48:LD9MMyyyyyPetduyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyl:F6/7
MD5:	884BED887BCC0EA1C9F53A4494F0DE32
SHA1:	5E4771575F5877944CE083DC20E88846FC5A79D2
SHA-256:	1AA71888C47B3E0F9ACE52CFF2CCC2D4E26CE0F0A09E9B3A6738820C0E03DD20
SHA-512:	073398E33A8E3BADD854198915D504A577D52B8381633E67D9902E0AD372C28CDD3ADFE82A912F111DC0851312931C5A67627C13A9EA15D23414D65906A89A29
Malicious:	false
Reputation:	low
URL:	http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png
Preview:	.PNG........IHDR.......a.....-.x.....tIME.....+.........pHYs..N ..N ..}......gAMA......a.....IDATx.....0...$x....&......*.!.=...........O...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........2..g...>6...."... D...@..t........"... ..:......@.@........!c.uz....#... D...@..t....A.........:\|.........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........"... D...@.@........!....B.:....t........

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 15:13:41.224926949 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:41.240565062 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:41.349932909 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:50.875765085 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:51.000495911 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:51.063046932 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:52.466229916 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 15:13:52.466316938 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:13:52.718086004 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:52.719218969 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:52.959919930 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:52.960036039 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:52.960124969 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:52.960200071 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:52.979413033 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:52.981797934 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.222989082 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:53.223089933 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.227829933 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:53.290332079 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.436285973 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.679023981 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:53.798526049 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.807214022 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:53.808160067 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.050345898 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.050369978 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.050445080 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.120070934 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.339627028 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.339658976 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.339678049 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.339750051 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.344974041 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.345027924 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.530697107 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.532390118 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.533149004 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.534270048 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.658948898 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:54.659080029 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:54.659164906 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:54.662228107 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:54.662269115 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:54.687367916 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.776470900 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.776499033 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.776519060 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.776551008 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.776587009 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.778944016 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.778964043 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.778980970 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779015064 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779031992 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779057026 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779073954 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779078960 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779094934 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779110909 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779117107 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779146910 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779161930 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779182911 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779201984 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779222012 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779267073 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779284954 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779303074 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779308081 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779320955 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779337883 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779345989 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779356003 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779375076 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.779381037 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.779434919 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.887614012 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.887691021 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.927383900 CEST	80	49716	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:54.930423975 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:54.996629000 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:55.020478010 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020500898 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020512104 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020519972 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020528078 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020548105 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020567894 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020581007 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.020643950 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:55.020692110 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:55.095833063 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:55.137217999 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.138057947 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:55.139560938 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.139714956 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.139759064 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:55.139818907 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:56.086966991 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:56.087017059 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:56.087893963 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:56.090924025 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:56.090959072 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:56.091002941 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:56.287463903 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:56.330876112 CEST	80	49716	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:56.330893040 CEST	80	49716	18.196.219.159	192.168.2.5
Apr 26, 2024 15:13:56.330961943 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:13:56.935040951 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:56.935453892 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:56.999553919 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:13:56.999597073 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:13:57.193769932 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:00.279246092 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.279267073 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.279325962 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.279356003 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.296854019 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.296925068 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.633416891 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.633485079 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.673221111 CEST	49710	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.673299074 CEST	49713	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.673311949 CEST	49709	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.674257040 CEST	49714	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.678162098 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.678838015 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.913712025 CEST	80	49713	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.913733959 CEST	80	49710	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.914175034 CEST	80	49709	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.915941000 CEST	80	49714	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.919383049 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.919461012 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:00.920756102 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:00.920819044 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.103204966 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.214237928 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.214288950 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.345072985 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.345170021 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.477899075 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.477925062 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.477948904 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.477988958 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.562735081 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.797672033 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.866244078 CEST	80	49716	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.866403103 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:01.932575941 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:01.932656050 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.040122032 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.078128099 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.078161001 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.078392029 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.080533028 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.080552101 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.211566925 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.211621046 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:02.211980104 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.213016033 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.213035107 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:02.340140104 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.340234041 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.343257904 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.343267918 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.343617916 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.392441034 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.440119028 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.498500109 CEST	49716	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.547426939 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.588051081 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.588140011 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.588187933 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.593091011 CEST	49722	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.593101978 CEST	443	49722	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.699954033 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.700001955 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.700011969 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.700083017 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.700114965 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.701117039 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.701133013 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.715174913 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:02.715277910 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.739717007 CEST	80	49716	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.750138998 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.750186920 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:02.751643896 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:02.793432951 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.793458939 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.793473959 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.793519020 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.798171997 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:02.941993952 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.942018032 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:02.942056894 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.942100048 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:02.954998970 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.955069065 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.971199036 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.971244097 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.971581936 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:02.973974943 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:02.999886036 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:03.016132116 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:03.045927048 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:03.203692913 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:03.203782082 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:03.204058886 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:03.252396107 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:03.252455950 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:03.252477884 CEST	49726	443	192.168.2.5	23.204.76.112
Apr 26, 2024 15:14:03.252487898 CEST	443	49726	23.204.76.112	192.168.2.5
Apr 26, 2024 15:14:03.291527987 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:03.291552067 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:03.291671038 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:04.978117943 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:04.978259087 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:04.978315115 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:05.656975031 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:05.704108953 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.752080917 CEST	49715	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:05.752123117 CEST	443	49715	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:05.772031069 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:05.783112049 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:05.852787971 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:05.995148897 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995177984 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995187998 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995210886 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995240927 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995291948 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:05.995363951 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995397091 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995419025 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:05.995425940 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:05.995454073 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:05.995474100 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:06.015038013 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.015054941 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.015069008 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.015114069 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.015121937 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.015155077 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.024446011 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.024507999 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.024688005 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.103816032 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.103871107 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.103887081 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.103904009 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.103918076 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.103939056 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.103976011 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.104490995 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.104537010 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.170730114 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.177371979 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.177687883 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.178535938 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.178586006 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.178628922 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.286418915 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.286493063 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.286624908 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.298320055 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.298409939 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.298716068 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.412244081 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.412328959 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.412523031 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.418380022 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.418567896 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.418792009 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.418798923 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.418876886 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.419173002 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.422846079 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.422867060 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.422910929 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.422939062 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.423132896 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.423217058 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.423269033 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.423273087 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.423314095 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.423413992 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.426717997 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.426789999 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427059889 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427104950 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.427211046 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427223921 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427263975 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.427449942 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427488089 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.427589893 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427788973 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427802086 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427838087 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.427943945 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427948952 CEST	49738	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.427956104 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427970886 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.427977085 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.428013086 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.428303957 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.428447008 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.428504944 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.431940079 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:06.431977034 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:06.431999922 CEST	49724	443	192.168.2.5	13.85.23.86
Apr 26, 2024 15:14:06.432009935 CEST	443	49724	13.85.23.86	192.168.2.5
Apr 26, 2024 15:14:06.440732002 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441095114 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441112041 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441123009 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441148996 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.441174030 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.441232920 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441246033 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.441287994 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.441375017 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.450964928 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.500955105 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.519016027 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 15:14:06.551949024 CEST	80	49738	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.552428961 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.552521944 CEST	49738	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.552536964 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.552726030 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553442001 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553605080 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553617001 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553627968 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553679943 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.553781986 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553797960 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553809881 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553857088 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.553915977 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553929090 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553940058 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553951025 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553953886 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.553965092 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553972960 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.553977013 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.553989887 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554001093 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554013014 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554016113 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554024935 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554038048 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554049969 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554053068 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554061890 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554068089 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554074049 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554183006 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554585934 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554609060 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554658890 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554670095 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554682016 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554698944 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554718018 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554723024 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554804087 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554815054 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554825068 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554838896 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554843903 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554852962 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.554869890 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.554888964 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.557364941 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.557375908 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.557444096 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.558147907 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.558202982 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.558259010 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.560762882 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.560775042 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.560827971 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.561680079 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.561733007 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.561865091 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.565557003 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.565568924 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.565629005 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.565831900 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.565843105 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.565887928 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.567768097 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.567820072 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.567876101 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.568674088 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.568706989 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.568720102 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.571254969 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.571393967 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.571448088 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.572077990 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.572092056 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.572124004 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.574620962 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.574718952 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.574791908 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.575783014 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.575795889 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.575841904 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.578121901 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.578291893 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.578349113 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.579365015 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.579376936 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.579417944 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.655195951 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.660981894 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.660995960 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.661007881 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.661101103 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.663417101 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.663429976 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.663500071 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.663521051 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.663533926 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.663543940 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.663589001 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.667920113 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.667931080 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.667974949 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.672532082 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.677568913 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.678210974 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.678224087 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.678294897 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.679055929 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.679066896 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.679192066 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.680032969 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.680083990 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.680115938 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.681117058 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.681143045 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.681207895 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.683764935 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683778048 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683790922 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683804035 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683815956 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683820963 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.683830023 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683845043 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.683850050 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.683859110 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.683865070 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.683872938 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.683907986 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.685749054 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.685762882 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.685811996 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.687664032 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.687696934 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.687756062 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.688572884 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.688587904 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.688636065 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.691535950 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.691576004 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.692040920 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.693120003 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.693145990 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.693202019 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.696053982 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.696065903 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.696146011 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.696973085 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.696985006 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.697032928 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.699819088 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.699830055 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.699865103 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.700133085 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.700478077 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.701095104 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.701903105 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.702035904 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.702210903 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.704087973 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704144001 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704170942 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704199076 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.704214096 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704236031 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704262018 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.704268932 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704349041 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.704555035 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704566002 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704616070 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.704720974 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704731941 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.704771042 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.704936981 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.705199003 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.705250025 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.705815077 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.705826998 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.705857992 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.707134962 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.707148075 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.707195044 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.709824085 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.709836960 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.709887028 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.711213112 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.711380005 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.711435080 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.714525938 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.714536905 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.714570999 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.716485023 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.716496944 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.716542006 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.720954895 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.720980883 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.721050024 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.725014925 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.725027084 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.725111961 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.727794886 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.727807045 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.727864027 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.730604887 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.730617046 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.730679989 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.732877970 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.732889891 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.732935905 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.735791922 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.735802889 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.735852957 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.738493919 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.738507032 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.738562107 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.741836071 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.741848946 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.741911888 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.745290041 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.745327950 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.745383978 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.747289896 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 15:14:06.748964071 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.749056101 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.749159098 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.752952099 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.752964973 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.753012896 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.755971909 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.756017923 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.758752108 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.758802891 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.758820057 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.758872032 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.793373108 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.793373108 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.797688007 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.797708035 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.797766924 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.805731058 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.805814028 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.805871964 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.810087919 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.810162067 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.810219049 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.814888954 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.814944029 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.815335035 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.819756985 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.819771051 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.819823027 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.826558113 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.826572895 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.826631069 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.831377029 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.831393003 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.831440926 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.838316917 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.838331938 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.838386059 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.842986107 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.843017101 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.843082905 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.855380058 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.855484962 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.855518103 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.855576992 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.858776093 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.858789921 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.858835936 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.858876944 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.862066984 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862080097 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862119913 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862131119 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862168074 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862179995 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.862205982 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.862224102 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.862246990 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.881673098 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.881688118 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.881747007 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.881781101 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.888015032 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.888030052 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.888113022 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.924963951 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.924977064 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.924988031 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.924998999 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.925046921 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.925098896 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.927643061 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927655935 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927709103 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927722931 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927720070 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.927736044 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927747011 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927757978 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.927772999 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.927812099 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.928818941 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.944797993 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946070910 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946085930 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946098089 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946162939 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946171045 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946176052 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946187973 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946202040 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946233988 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946247101 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946247101 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946279049 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946280003 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946326017 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946378946 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946387053 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946400881 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946413040 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.946445942 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.946841002 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.948920965 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.949321985 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.949353933 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.949418068 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.951219082 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.981476068 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981503963 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981522083 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981539011 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981555939 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981571913 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981589079 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981605053 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981621981 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981628895 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.981643915 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981650114 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.981662035 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981679916 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981687069 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.981724977 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.981745958 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981761932 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981779099 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:06.981820107 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:06.983161926 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.983233929 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.983557940 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.983627081 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.986509085 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.986526966 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.986583948 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.986637115 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.987448931 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.987799883 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:06.987839937 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:06.987931967 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:07.035407066 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.107733011 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:07.107805967 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:07.107886076 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:07.108491898 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:07.108527899 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:07.108622074 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:07.169606924 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169624090 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169641972 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169653893 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169665098 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169666052 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.169677973 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169718981 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.169735909 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169748068 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.169775963 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.171164989 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.173397064 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.189224958 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.189244032 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.189308882 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.191055059 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.199971914 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.199987888 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200001955 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200015068 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200030088 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200045109 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200058937 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200093985 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200114012 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200126886 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200139046 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200150013 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200186968 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200186968 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200218916 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200232029 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200244904 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200258970 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200272083 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200284004 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200297117 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200303078 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200325966 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200352907 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200367928 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200392008 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.200416088 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.200447083 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202050924 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202466011 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202554941 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202569008 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202584028 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202595949 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202622890 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202651978 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202657938 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202706099 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202709913 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202754021 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202765942 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202802896 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202826977 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202852964 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202879906 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.202883959 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.202931881 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222389936 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222410917 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222460985 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222474098 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222513914 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222539902 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222542048 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222580910 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222594023 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222605944 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222618103 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222635031 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222661018 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222721100 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222755909 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222799063 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222805977 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222822905 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222837925 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222846031 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222863913 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222873926 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222898006 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222912073 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.222938061 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.222987890 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223001957 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223012924 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223030090 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.223043919 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223056078 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.223057985 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223095894 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.223109961 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223133087 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223190069 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223201036 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.223248959 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223263025 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223275900 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.223299980 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.223326921 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.298491001 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.411629915 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.411652088 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.411741972 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.411740065 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.411859035 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.411916018 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.411959887 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.411988020 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.412038088 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.412064075 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.412214041 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.412267923 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.412309885 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.416651964 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.416683912 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.416749954 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.434777021 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.434814930 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.434844017 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.434864998 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.435028076 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.435029030 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.443339109 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443389893 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443443060 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443485022 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.443619967 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443670034 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.443698883 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443783998 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443841934 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443890095 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.443897963 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.443939924 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.444015026 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.444144011 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.444200993 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.444247007 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.444266081 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.444314003 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.444314957 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.446571112 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.463571072 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.463644981 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.463706970 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.463731050 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.463851929 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.463965893 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.464211941 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464396000 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464452028 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.464478016 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464554071 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464737892 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464796066 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.464816093 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464859009 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.464884043 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.464942932 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.468084097 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.501076937 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.543709993 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.653898954 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.653923035 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.653987885 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654012918 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.654031992 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654052019 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.654052019 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654078007 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654095888 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654119968 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.654144049 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.654462099 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654500961 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654525042 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.654566050 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.676944017 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.895919085 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.895941019 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.895978928 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.895996094 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896014929 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896045923 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.896047115 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.896095991 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896121979 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896140099 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896162033 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.896182060 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.896316051 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896354914 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896374941 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896393061 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:07.896414042 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:07.896428108 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:08.138065100 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.138098001 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.138118982 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.138236046 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:08.730679989 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:08.742506981 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:08.774753094 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:08.974119902 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.985611916 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.985646963 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:08.985701084 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.025955915 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.025980949 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.025998116 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.026012897 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.026057005 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.026092052 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.101313114 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.290286064 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.290570021 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.341240883 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.536241055 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.541610003 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.541747093 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.541759968 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.541773081 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.541827917 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.541827917 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.541929007 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.592817068 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.596853018 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.596918106 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.635432005 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.670192003 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.863672018 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.863693953 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.863800049 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.864037037 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.864120007 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.864162922 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.864180088 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.900252104 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.900295019 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.900312901 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.900394917 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:09.900525093 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:09.900826931 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:10.002794981 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:10.173732042 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:10.392946005 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:10.414942980 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:10.468384981 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:12.042922020 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:12.043049097 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:12.880815029 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:12.916769981 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:12.916829109 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:12.937827110 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:12.937886953 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:13.027965069 CEST	49733	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:13.028014898 CEST	49718	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:13.268593073 CEST	80	49733	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:13.268611908 CEST	80	49718	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:13.499784946 CEST	49719	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:13.742144108 CEST	80	49719	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.041208029 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.041281939 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:15.047853947 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.047913074 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:15.375056982 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.375121117 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.375154018 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:15.375160933 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:15.400348902 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:15.400422096 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.664973021 CEST	49717	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.665071011 CEST	49730	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.665108919 CEST	49732	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.665142059 CEST	49720	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.665159941 CEST	49734	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:16.908070087 CEST	80	49732	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:16.909353018 CEST	80	49734	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:16.909966946 CEST	80	49717	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:16.910172939 CEST	80	49730	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:16.910192013 CEST	80	49720	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.442502975 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.442872047 CEST	49742	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.682812929 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.682912111 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.683124065 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.685291052 CEST	80	49742	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.685368061 CEST	49742	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.947902918 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.947933912 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.947998047 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.948014975 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.948040962 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.948096991 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:18.948167086 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.952871084 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:18.952959061 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:24.445173979 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:24.445247889 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:24.648655891 CEST	49741	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:24.888149977 CEST	80	49741	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:37.061161995 CEST	80	49738	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:37.061222076 CEST	49738	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:38.408730030 CEST	49738	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:38.537622929 CEST	80	49738	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:38.927829027 CEST	80	49742	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:38.927901983 CEST	49742	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:40.409244061 CEST	49742	80	192.168.2.5	18.196.219.159
Apr 26, 2024 15:14:40.657172918 CEST	80	49742	18.196.219.159	192.168.2.5
Apr 26, 2024 15:14:45.370012999 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.370054960 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:45.370189905 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.370683908 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.370701075 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:45.841212988 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:45.841334105 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.845024109 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.845037937 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:45.845396996 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:45.853817940 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:45.896120071 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.321561098 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.321588993 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.321616888 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.321717024 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.321717024 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.321737051 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.321820021 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.321974993 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.322029114 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.322048903 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.322057009 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.322088003 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.322204113 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.330707073 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.330707073 CEST	49743	443	192.168.2.5	20.12.23.50
Apr 26, 2024 15:14:46.330729008 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:46.330738068 CEST	443	49743	20.12.23.50	192.168.2.5
Apr 26, 2024 15:14:51.562455893 CEST	49737	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:51.686820030 CEST	80	49737	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:51.718694925 CEST	49736	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:51.842586040 CEST	80	49736	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:52.109323978 CEST	49735	80	192.168.2.5	18.173.166.51
Apr 26, 2024 15:14:52.245500088 CEST	80	49735	18.173.166.51	192.168.2.5
Apr 26, 2024 15:14:54.563745975 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:54.563786030 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.563993931 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:54.564115047 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:54.564122915 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.950447083 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.950829983 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:54.950845957 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.951169014 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.951634884 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:14:54.951693058 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:14:54.999980927 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:15:04.954797029 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:15:04.954874992 CEST	443	49745	192.178.50.36	192.168.2.5
Apr 26, 2024 15:15:04.954938889 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:15:06.414201975 CEST	49745	443	192.168.2.5	192.178.50.36
Apr 26, 2024 15:15:06.414230108 CEST	443	49745	192.178.50.36	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 15:13:50.134656906 CEST	53	53484	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:50.320225954 CEST	53	53114	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:52.395153046 CEST	59422	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:52.395406008 CEST	61506	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:52.445019007 CEST	53	61323	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:52.535072088 CEST	53	59422	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:52.536515951 CEST	53	61506	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:54.517919064 CEST	56369	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:54.520420074 CEST	58230	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:54.543740988 CEST	53145	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:54.544066906 CEST	59637	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:13:54.643274069 CEST	53	56369	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:54.645819902 CEST	53	58230	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:54.686314106 CEST	53	59637	1.1.1.1	192.168.2.5
Apr 26, 2024 15:13:54.686575890 CEST	53	53145	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:00.811270952 CEST	53	62496	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:06.169167995 CEST	49470	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:14:06.169645071 CEST	49917	53	192.168.2.5	1.1.1.1
Apr 26, 2024 15:14:06.297131062 CEST	53	49917	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:06.297806978 CEST	53	49470	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:13.009563923 CEST	53	50701	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:33.149260044 CEST	53	60107	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:49.923156023 CEST	53	61067	1.1.1.1	192.168.2.5
Apr 26, 2024 15:14:55.534398079 CEST	53	59397	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 15:13:52.395153046 CEST	192.168.2.5	1.1.1.1	0xef0b	Standard query (0)	lingos.netdimensions.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:13:52.395406008 CEST	192.168.2.5	1.1.1.1	0x8ab5	Standard query (0)	lingos.netdimensions.com	65	IN (0x0001)	false
Apr 26, 2024 15:13:54.517919064 CEST	192.168.2.5	1.1.1.1	0x70ae	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:13:54.520420074 CEST	192.168.2.5	1.1.1.1	0xbfd7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 15:13:54.543740988 CEST	192.168.2.5	1.1.1.1	0xd769	Standard query (0)	lingos.netdimensions.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:13:54.544066906 CEST	192.168.2.5	1.1.1.1	0xb6d7	Standard query (0)	lingos.netdimensions.com	65	IN (0x0001)	false
Apr 26, 2024 15:14:06.169167995 CEST	192.168.2.5	1.1.1.1	0x6243	Standard query (0)	ui.peoplefluent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:06.169645071 CEST	192.168.2.5	1.1.1.1	0xd59d	Standard query (0)	ui.peoplefluent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 15:13:52.535072088 CEST	1.1.1.1	192.168.2.5	0xef0b	No error (0)	lingos.netdimensions.com		18.196.219.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:13:54.643274069 CEST	1.1.1.1	192.168.2.5	0x70ae	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:13:54.645819902 CEST	1.1.1.1	192.168.2.5	0xbfd7	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 15:13:54.686575890 CEST	1.1.1.1	192.168.2.5	0xd769	No error (0)	lingos.netdimensions.com		18.196.219.159	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:05.544635057 CEST	1.1.1.1	192.168.2.5	0xfec8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:14:05.544635057 CEST	1.1.1.1	192.168.2.5	0xfec8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297131062 CEST	1.1.1.1	192.168.2.5	0xd59d	No error (0)	ui.peoplefluent.com	d11mswrjgd8r5y.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297806978 CEST	1.1.1.1	192.168.2.5	0x6243	No error (0)	ui.peoplefluent.com	d11mswrjgd8r5y.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297806978 CEST	1.1.1.1	192.168.2.5	0x6243	No error (0)	d11mswrjgd8r5y.cloudfront.net		18.173.166.51	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297806978 CEST	1.1.1.1	192.168.2.5	0x6243	No error (0)	d11mswrjgd8r5y.cloudfront.net		18.173.166.110	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297806978 CEST	1.1.1.1	192.168.2.5	0x6243	No error (0)	d11mswrjgd8r5y.cloudfront.net		18.173.166.89	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:06.297806978 CEST	1.1.1.1	192.168.2.5	0x6243	No error (0)	d11mswrjgd8r5y.cloudfront.net		18.173.166.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:14:21.228305101 CEST	1.1.1.1	192.168.2.5	0xe67	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:14:21.228305101 CEST	1.1.1.1	192.168.2.5	0xe67	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

lingos.netdimensions.com

ui.peoplefluent.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:13:52.981797934 CEST	445	OUT	GET /lingos HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:53.227829933 CEST	507	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 13:13:53 GMT Server: Apache Location: http://lingos.netdimensions.com/lingos/ Content-Length: 247 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6c 69 6e 67 6f 73 2e 6e 65 74 64 69 6d 65 6e 73 69 6f 6e 73 2e 63 6f 6d 2f 6c 69 6e 67 6f 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://lingos.netdimensions.com/lingos/">here</a>.</p></body></html>
Apr 26, 2024 15:13:53.436285973 CEST	446	OUT	GET /lingos/ HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:53.679023981 CEST	690	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:53 GMT Server: Apache Accept-Ranges: bytes ETag: W/"292-1710156337654-gzip" Last-Modified: Mon, 11 Mar 2024 11:25:37 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 246 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 25 8e c1 6e 83 30 10 44 ef f9 8a ad ef b0 90 70 a1 05 0e 05 a4 56 a5 2d 42 8e a2 1c 51 d8 80 55 63 53 b3 0d bf 5f 48 4e 23 cd 68 9e 5e f2 54 7c e7 f2 5c 97 f0 26 3f 2b a8 8f af d5 7b 0e c2 43 3c 1d 72 c4 42 16 8f 21 f2 83 10 a4 6b cd ac 58 59 d3 6a c4 f2 4b 80 18 98 a7 67 c4 65 59 fc e5 e0 5b d7 a3 6c 30 8c e3 18 9b 32 f7 06 1e 75 14 84 de 56 84 fb 7d 84 da da 99 fc 8e 3b 91 ed 92 6d cd 76 90 0c d4 76 6b 42 32 12 b7 b0 11 3d fa fd 53 b7 54 34 74 75 34 0f 02 2e d6 30 19 4e 45 f0 02 c7 a6 4a 51 2b d3 db 19 67 72 37 4d 8c f4 33 ad ec 5e 19 01 78 47 b1 62 4d d9 89 f4 c5 8e 04 6c 41 0e 04 e5 0a 71 93 53 33 c1 87 b1 8b a6 ae 27 a8 75 cb 57 eb c6 04 1f 9f 55 08 1f 46 6b de 0d ff 01 55 fd 9d a6 24 01 00 00 Data Ascii: %n0DpV-BQUcS_HN#h^T\|\&?+{C<rB!kXYjKgeY[l02uV};mvvkB2=ST4tu4.0NEJQ+gr7M3^xGbMlAqS3'uWUFkU$
Apr 26, 2024 15:13:53.807214022 CEST	399	OUT	GET /favicon.ico HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:54.050345898 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 13:13:53 GMT Server: Apache Last-Modified: Fri, 11 Mar 2022 19:39:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 2018 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e0 03 69 eb 17 83 8b bc d2 1f f1 b1 71 88 c1 fd 69 d8 6e 4d 2f 2f 3f d3 2b fd 1c 86 48 a7 a2 ef 7f 07 8f 7b 7a 38 22 ca 61 2f 75 9f 00 7f 77 46 2c fe e2 6c 37 b3 73 a5 fb 04 f8 1a 63 48 ca 3d f0 f1 1a 70 d9 03 9d 7b 10 eb 9f f3 7c 73 75 59 d9 69 b7 1e 17 e1 0c 5e 27 a9 Data Ascii: [klU\|ng[Lh\vH+Q@0H\|11>b\|`4Dvg()]KBvvwvYs{AJ1~a0A2V^uu \|UL/qe>Yt+kKn_H3\y^f?fPyajwfNoth~8/:LKf>q?C1o-u0'=vYO lTk(vDGb[28 tA3`m6#47^m>7lOcM{C=M3/f378_mK<43Ed m%\|gl<hEitr~FR2!~5'C3l.q?C!3+~\|de63_b/^\\|kF;Rc>)781<1w5U9~jxRfr/:pw5_&1\|p#2\|2@gHa/MT.aZj?ziY8~t@\>/r32{#8:I#@{Cn:tp#`<"dw?#g{ nu8kOW?+?;[~/~Cb}iqinM//?+H{z8"a/uwF,l7scH=p{\|suYi^'
Apr 26, 2024 15:13:54.050369978 CEST	1032	IN	Data Raw: 86 5c 27 14 eb 24 45 14 e1 84 aa b0 35 8d e9 f6 5d bc 5e 43 d5 f8 2c 25 6c d5 4c b8 d8 1a 5b 68 5e 6e c1 54 eb 21 5e 8f e8 3e 37 b0 fe c2 f5 57 5c 6d 5e 73 60 61 f3 06 5f fd 0f e3 0a cd 71 20 04 b5 d6 19 03 d6 00 34 fb 10 de ad df e5 b5 14 52 d7 Data Ascii: \'$E5]^C,%lL[h^nT!^>7W\m^s`a_q 4RTZKqQ2QhueF3!Z[vcB&em4oV5{=v#QB~;odF/^<wnfI[rx}:>4pH7f~
Apr 26, 2024 15:13:54.532390118 CEST	394	OUT	GET /lingos/nd/fresco/login/scripts/jquery.innerfade.js HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/login Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:54.776470900 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:54 GMT Server: Apache Accept-Ranges: bytes ETag: W/"5054-1412255904000-gzip" Last-Modified: Thu, 02 Oct 2014 13:18:24 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 1504 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 58 db 6e 1b 37 10 7d 96 01 ff c3 c0 75 bb bb 8e b4 92 d3 3e 14 b2 1d 34 8d 9b 26 0f 41 d0 38 45 1f ea a2 a0 b4 5c 2f 63 8a 54 97 5c 2b 4e 20 a0 bf d1 df eb 97 74 48 ee 85 7b b1 e2 b8 59 38 f6 8a 1c 0e cf cc 39 33 a4 32 3d 82 b3 87 3e fb 7b fb 7b d3 29 bc fb ab a0 f9 6d cc 84 a0 79 4a 12 1a bf 53 e5 cc 39 d1 c5 6a 0e 8f 67 b3 ef 27 b3 c7 93 e3 ef ec e8 73 96 af c8 1c 5e d1 84 51 91 e6 b4 10 09 85 17 32 5d 11 21 e0 1b f8 91 f0 84 2a f8 79 f1 c6 5a 3f 2d 74 26 f3 39 bc 95 b9 d2 54 94 d3 76 ea 15 61 7c 0e 3a 5e d8 a1 1f 56 be c3 78 29 57 d6 e8 37 ba 98 43 a6 f5 7a 3e 9d 0e 58 58 9b 05 51 34 01 29 40 67 14 36 32 bf 06 99 a2 77 ad e1 35 b9 46 2c e5 f2 b5 cc 75 2a 39 93 f1 15 fb 20 85 f1 10 17 d7 53 b2 5e 73 b6 24 9a 49 a1 a6 8a 33 c4 92 c9 cd d4 7a 26 22 81 37 84 a7 70 11 c3 4f e2 8a 72 b5 cc 08 e7 95 47 9d 13 26 64 8a 11 16 57 99 56 b1 cc af a6 06 13 1c 99 7f 00 a7 05 07 96 9c 1d 08 ba 51 07 4f c0 0d 9a e7 94 b3 27 4b 29 30 21 1a 8e 4f a7 f8 69 78 ee f1 8e b9 6f bd b9 d3 69 c1 cb 57 f7 fb 30 0c be 32 bb 06 51 43 6c f8 d1 4e 8e 00 c3 62 2b 1b b0 be 5d 53 e4 06 7f 9b 94 d5 c3 10 18 fb 00 64 0e 81 cd 48 00 e1 39 4d 49 c1 f5 bc 9c 8b c6 95 33 b5 a6 34 99 c3 73 92 30 71 35 99 5e a0 bd 79 b9 30 c3 c0 04 ac 18 e7 4c 51 84 9d 28 e3 f1 9a de 22 47 f8 1e 2a 2e 37 63 10 12 f5 c4 cd 4c 4a 94 8e fc 9d dc 94 b7 97 66 2b 2a 0b 9c 7a 8b 2f b0 a0 7a 43 a9 a3 dd 80 52 bd ed 3c 5f a8 e2 99 ef a9 15 79 4d 3b 1a 2a 8a 05 21 96 34 18 43 90 a3 00 e4 ca 25 c2 bd ff a9 34 c9 75 2b 1f f5 82 d2 3b 8c 46 86 23 94 06 cd 33 ca 50 19 73 78 61 ff 9a ad 0c d8 72 1a d3 04 94 d3 95 61 13 91 13 71 0b 4b a5 26 6e cd e4 86 f0 82 fa fb 90 42 4b dc a3 0c 20 2f 84 71 b0 e4 44 a9 39 3c bb b8 98 3c 33 af b0 c9 d8 32 f3 77 a1 39 5c 51 fd ef df ff 28 b0 52 47 56 3c a7 b5 3a 1a cf cb 8c f1 24 a7 62 0e 72 6d d4 80 e4 54 43 a0 10 ef 52 63 3a 1a 17 a2 e0 3c 72 aa db 46 27 e0 d4 6f ab e7 c1 9d 09 8e 6c 19 ed ef 85 69 21 96 06 43 78 18 c1 47 5b 5a f8 1c c6 a9 68 64 0d 67 50 5b 39 c0 ca da 42 f9 e4 54 17 b9 11 09 53 31 25 cb ac f1 89 66 60 0b c6 7b 0e bd 7a 31 4b c6 50 f9 3c 69 0c b7 d5 87 ed 49 83 69 10 50 cd 41 e3 c7 c7 76 43 72 4c a9 d6 48 a4 c2 65 de cc 68 14 b4 aa 34 98 9b 51 57 7b e3 36 e4 c0 56 a0 33 a8 c7 ca d2 e9 9a 36 ae bc e5 b5 e0 bb c6 ae da 7c 7b 53 45 5d b3 8e d8 8d b9 d3 6a d7 d0 97 6c e9 d4 d3 5f cf 6d a9 39 6f 7b 23 35 8f 05 8f 11 96 42 4d 7e 97 50 fa 1e fb 65 12 56 79 1e 64 d4 ac af 0c e2 5a ed 46 8a 95 bc bd c7 b0 56 d6 ad 61 ed b0 61 39 aa d7 86 be Data Ascii: Xn7}u>4&A8E\/cT\+N tH{Y8932=>{{)myJS9jg's^Q2]!yZ?-t&9Tva\|:^Vx)W7Cz>XXQ4)@g62w5F,u9 S^s$I3z&"7pOrG&dWVQO'K)0!OixoiW02QClNb+]SdH9MI34s0q5^y0LQ("G.7cLJf+z/zCR<_yM;*!4C%4u+;F#3PsxaraqK&nBK /qD9<<32w9\Q(RGV<:$brmTCRc:<rF'oli!CxG[ZhdgP[9BTS1%f`{z1KP<iIiPAvCrLHeh4QW{6V36\|{SE]jl_m9o{#5BM~PeVydZFVaa9
Apr 26, 2024 15:13:54.776499033 CEST	674	IN	Data Raw: 77 3c 37 e8 03 5c f4 00 75 11 57 1e 62 4e c5 95 ce e0 09 1c b7 e4 65 e3 6f b9 56 2a 0c d6 52 31 93 00 db e0 28 47 89 dd 60 f5 bb b9 92 c2 31 34 7b b7 d9 8d 62 92 24 b6 d3 34 f0 7c 5e 7d 88 e6 49 4d af 30 d1 32 0c 73 76 82 7f 4e a1 03 1b 07 1f 3d Data Ascii: w<7\uWbNeoVR1(G`14{b$4\|^}IM02svN=v+%{xs$%yMs)Tr0ies:&c8)tKg~Vw~aH^8>ePWa%]f="9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:13:53.808160067 CEST	513	OUT	GET /lingos/servlet/ekp/login HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://lingos.netdimensions.com/lingos/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:54.339627028 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:53 GMT Server: Apache Cache-Control: private, no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: fullscreen=* Content-Security-Policy: script-src 'self' .peoplefluent.com .netdimensions.com 'unsafe-inline' 'unsafe-eval'; Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Set-Cookie: JSESSIONID=85810CA45C30F222D6A2BCD090D39EE5; Path=/lingos; HttpOnly;SameSite=None;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8 Data Raw: 61 63 66 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 19 fb 53 db 38 fa 67 f2 57 a8 a6 37 09 5d 6c e7 41 28 a4 49 66 76 21 bd 32 47 0b 43 e9 b6 9d 4e 6f 47 b1 e5 58 c5 af 95 64 02 ed f4 7f bf 4f 92 e5 d8 c6 b4 b4 9d bb b9 30 40 2c 7d ef b7 e4 e9 a3 e3 b3 a3 cb f7 e7 0b 14 8a 38 42 e7 6f fe 38 3d 39 42 96 ed ba 6f 47 47 ae 7b 7c 79 8c de bd b8 7c 79 8a 06 4e 1f 5d 32 9c 70 2a 68 9a e0 c8 75 17 af 2c 64 85 42 64 13 d7 5d af d7 ce 7a e4 a4 6c e5 5e 5e b8 37 92 d6 40 22 17 5f 6d 51 c1 74 7c e1 5b f3 ce 54 31 bc 89 a3 84 cf 5a c8 0c 0e 0f 0f 35 b6 82 25 d8 87 7f 31 11 18 49 58 9b fc 9d d3 eb 99 75 94 26 82 24 c2 be bc cd 88 85 3c fd 34 b3 04 b9 11 ae c4 7d 86 bc 10 33 4e c4 ec cd e5 73 fb c0 42 2e 50 11 54 44 64 7e 4a 30 4b 68 b2 42 e7 11 16 41 ca e2 a9 ab 37 3a d3 88 26 57 28 64 24 98 59 2e 7c 5f a5 dc 0d f0 35 05 f2 0e fc b1 90 00 6e 33 8b c6 78 45 dc eb c4 77 62 ea b1 94 a7 81 90 db 89 85 18 89 66 16 0f 53 26 bc 5c 20 b5 06 54 b9 c7 68 26 10 67 de 86 6c e2 bb 01 23 dc 4b dd 28 5d d1 c4 d5 30 dc fd f4 77 4e d8 ad 3d 70 f6 9c 21 90 4f 9c 4f dc b0 55 ba 7d c2 d7 58 c3 5a f3 69 81 f5 53 2c 1c 9a 24 84 05 d8 27 ff 05 16 19 23 02 28 86 a9 48 dd 4f 25 47 bd 7a 2e 57 bf c1 b3 74 9c 95 8b 00 3c 57 95 41 f9 47 1b 59 dc 46 84 87 84 00 42 dd 61 0f 91 c9 e3 e6 59 4b 03 cf 35 71 d4 73 4c 7c 8a 81 93 c7 08 01 df aa 18 99 59 15 34 14 63 9a a0 aa 24 0d d1 55 d0 a9 fd 26 f1 79 67 99 fa b7 e8 4b 07 c1 27 c6 0c 04 9d f4 b3 9b 67 9d ad 0c fb 3e 28 a2 9f e4 ee 12 7b 57 2b 96 e6 89 3f d9 0e 82 e0 59 e7 6b 27 1c Data Ascii: acfS8gW7]lA(Ifv!2GCNoGXdO0@,}8Bo8=9BoGG{\|y\|yN]2p*hu,dBd]zl^^7@"_mQt\|[T1Z5%1IXu&$<4}3NsB.PTDd~J0KhBA7:&W(d$Y.\|_5n3xEwbfS&\ Th&gl#K(]0wN=p!OOU}XZiS,$'#(HO%Gz.Wt<WAGYFBaYK5qsL\|Y4c$U&ygK'g>({W+?Yk'
Apr 26, 2024 15:13:54.339658976 CEST	1289	IN	Data Raw: 02 e6 96 46 b3 97 a9 10 69 3c 19 8c 25 c2 d7 0e 96 5b 5e 1a a5 6c b2 3d f0 87 64 fc 14 88 4a be b6 4f bc 94 61 99 8a 93 24 4d 88 02 9e 84 e9 35 61 15 94 21 de 3b 78 4a 5a 50 80 3f 61 60 62 85 b7 2d 13 0e 94 57 a8 52 48 f7 09 6a 0a ab 32 3f c3 0c Data Ascii: Fi<%[^l=dJOa$M5a!;xJZP?a`b-WRHj2?,iore$,Y f("@Ij3,@5E89)BBWE*-B30mY#4f7E9a4~f %+()ZxAZ%"o@+cBA4ym/a
Apr 26, 2024 15:13:54.339678049 CEST	983	IN	Data Raw: 88 de c7 3d 3f f5 72 49 6f c7 61 70 a8 ba ed 05 79 e2 c9 e8 ea ed e8 96 fd b8 67 e1 0f 70 86 ff f7 ac 5b b9 e4 e9 7e b4 76 aa 37 57 3d 10 66 eb 71 af ab e6 ed ee ce e6 1a ad f7 05 7c 42 63 15 f3 52 ac 09 ea ca e5 2e 54 99 0c fc 09 23 4a bf bf 8b Data Ascii: =?rIoapygp[~v7W=fq\|BcR.T#JIy-5 o1wfHE__#69/]UrE!!j%I]Xc*>4u4ah^F]3$XN:8?J+>km03z\I
Apr 26, 2024 15:13:54.344974041 CEST	20	IN	Data Raw: 61 0d 0a 03 00 18 7e c3 ce 2e 20 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a~. 0
Apr 26, 2024 15:13:54.530697107 CEST	394	OUT	GET /lingos/nd/fresco/login/scripts/jquery-1.4.2.min.js HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/login Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:54.779094934 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:54 GMT Server: Apache Accept-Ranges: bytes ETag: W/"72174-1412255904000-gzip" Last-Modified: Thu, 02 Oct 2014 13:18:24 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 24606 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd bd 69 7b db 46 96 28 fc 9d bf 82 42 7b 14 c0 2c 91 94 9d be cf 34 20 98 af 2d db 1d f7 c4 71 12 39 db 50 74 2e 40 80 24 b8 81 e2 a2 c5 24 e7 b7 bf 67 a9 2a 54 81 a0 ec ee 99 b9 79 62 11 28 d4 5e a7 ce 56 e7 9c 6a 3d 3d a9 d5 9f d6 c7 3f 6d d2 e5 43 fd 1f d1 6d 74 d5 5f 66 8b 75 fd fb 2c 5e 46 90 74 7b de fc b6 f9 0c f3 8c d6 eb 85 df 6a 8d 6f 30 6b b3 9f cf 5a 90 8a 1f 2e f3 c5 c3 32 1b 8e d6 f5 67 ed f3 b6 a8 ff 23 1f cd eb 3f a7 ab 6c 88 5f 5f 6f a2 69 7d 9a f5 d3 f9 2a 4d ea 9b 79 92 2e eb eb 51 5a 7f ff ee 63 3d 5f d6 ff fe e3 f7 f5 5f d3 e5 2a cb e7 f5 67 2a df aa 79 d8 60 be 1c b6 e4 67 d9 ee bb 79 7f ba 49 d2 55 fd 2a fb fc 79 9a 36 c7 2b a3 d4 8a d2 c6 2b d5 d1 83 5e 7e 84 3e bc ce c7 79 fd 6d 0e 9d 8a d6 d0 01 cc f6 73 3a 4d a3 83 9e 8a fa ab ab d7 a2 1e cd 13 ea f0 f7 46 37 69 8c d1 3a f5 eb 57 d1 ba fe 36 8d eb e7 cf eb cf 9e f9 cf 9f fb df fe 3b b5 55 3f 6b ff b5 dd 86 7c ad 9a 3b d8 cc fb d8 94 fb 52 dc 79 5b f5 56 9f 45 ae b7 cd 06 ee 49 bf 99 ad 7e 4e a3 e4 c1 db ae 97 0f db 55 33 c9 fb 9b 59 3a 5f bf 99 a6 f8 03 ef b0 40 f9 74 ea 3a d3 74 b0 76 bc 7d 3f 5a f7 47 6e e4 6d 57 e9 fa 63 36 4b f3 cd da 9d 45 e2 dc 0b 96 e9 7a b3 9c ef fb cd 25 56 e8 7a fb bd 6e ef a7 c8 8d 44 ec 6d e3 e6 6a d9 ef f4 9b d1 38 ba 77 b7 9b e5 d4 a7 14 11 ad 1e e6 7d 7f 10 4d 57 a9 80 b9 89 3e 3e 2c 52 df 59 11 68 38 7b cf ef 37 87 d3 3c 8e a6 6f 6e a3 a9 1b 37 d7 e9 fd 7a b7 e3 df cb 7c be 86 8e e2 6b 36 9f a7 cb ef 3e be ff 7e b7 73 1c 2f 88 9b 8b 68 09 9f 7e c8 93 f4 f4 d4 7c 83 1e ce f2 db f4 72 94 4d 13 37 f6 8a 7e fe 8e dd 14 89 18 88 54 8c bd ed 6d b4 ac 67 61 d4 9c a6 f3 e1 7a 14 c0 84 ad a1 63 f9 a0 1e 87 61 e8 e4 f1 38 ed c3 94 6c 07 f9 d2 c5 ac 79 3d 9b d7 63 0f 2b c9 45 dc cd 7b 54 4f a2 66 a6 1e ed a1 86 e4 24 0c 71 29 c2 93 f1 e9 e9 e0 f4 14 57 e0 ad 5a 25 c8 8b 95 e5 61 3b c8 2f b2 20 6f 34 bc d4 8d b0 a6 58 0c 3a 49 b3 1f c1 4a d0 7b 2e d4 07 cf f3 13 e8 6c d1 88 7c c8 3a 35 cc d2 c6 2c fe 5d 31 c6 7f c0 d2 73 16 77 9e de 11 2c 79 cd 21 2f a6 6b cc c5 1f 3a 5f 9d 16 a6 f8 f2 9f c5 97 f5 72 63 7c 98 47 3c 7f de 36 81 76 9b 38 59 61 a4 3a d6 6f a6 b7 08 51 23 80 6a d8 3d d1 62 31 7d 70 31 73 51 3e 8f 10 b0 70 2a 21 3d ec c2 fc e1 1f a8 63 39 24 a0 5c 89 b1 c8 60 e8 13 31 17 cb 20 0b fb 4d 04 16 77 3d ca 56 c2 a1 da 57 b0 ee 08 d7 2e 2c 5a 76 9b be cd 96 69 02 6b 85 39 76 bb 93 0c ff d1 87 dd 2e 6a c6 9b f5 3a 9f 9f 9e 46 dc 51 58 d1 3e 6c f8 89 e3 79 5b b3 34 96 0d b0 4f 9b 90 cb 36 57 88 17 dc 36 af d5 Data Ascii: i{F(B{,4 -q9Pt.@$$gTyb(^Vj==?mCmt_fu,^Ft{jo0kZ.2g#?l__oi}My.QZc=__gy`gyIUy6++^~>yms:MF7i:W6;U?k\|;Ry[VEI~NU3Y:_@t:tv}?ZGnmWc6KEz%VznDmj8w}MW>>,RYh8{7<on7z\|k6>~s/h~\|rM7~Tmgazca8ly=c+E{TOf$q)WZ%a;/ o4X:IJ{.l\|:5,]1sw,y!/k:_rc\|G<6v8Ya:oQ#j=b1}p1sQ>p!=c9$\`1 Mw=VW.,Zvik9v.j:FQX>ly[4O6W6
Apr 26, 2024 15:13:54.779110909 CEST	1289	IN	Data Raw: 04 d6 6a 72 b1 51 30 32 81 25 db 66 e1 a6 3b e9 05 19 20 91 6c 88 b0 0c 00 b7 98 46 50 e8 83 00 c8 84 a6 b8 cd ce a0 b9 d8 ac 46 6e d6 5c 01 1a e8 af f3 a5 e7 6f 9a ab 05 d5 3f 39 3b 83 5d b5 1f 87 7d 18 cc 1a a6 20 5d 7b cd fe 34 07 3c b0 76 07 Data Ascii: jrQ02%f; lFPFn\o?9;]} ]{4<v"j7K)CGC6V_,9K{4C`7)eQ,RLtv/nSX`.X"`vi]s !L1<8LAi1&"7]#%@N0?Dyqy
Apr 26, 2024 15:13:54.779161930 CEST	1289	IN	Data Raw: 7a 98 aa 8f 96 1c 02 fd d3 f3 c1 d2 5c e4 f1 8e 51 1d 66 29 a6 34 06 fd 68 0f 26 52 4f c6 62 45 93 94 36 36 c0 0f e6 05 4c a9 ca 02 9b 23 b8 df be 43 ca 00 47 f0 2a f8 6d 01 52 76 ea 1b 64 c0 98 6c b9 54 7b b1 ce a9 e2 8a 6c 3f 33 c4 d2 74 b5 a1 Data Ascii: z\Qf)4h&RObE66L#CG*mRvdlT{l?3tE^]lP6IL"R}Qb! <4[A{8tXypy)% \|K@5b)ik3/7i$s_I%EHd~3N@ ""^K
Apr 26, 2024 15:13:54.779182911 CEST	1289	IN	Data Raw: 1f 99 c7 44 09 62 7b a5 c8 ac 66 7b 23 ad e8 44 35 93 7a 06 11 e2 17 e8 d7 f2 32 82 a5 42 a4 12 db 29 15 8c b4 a1 73 0c db 62 ac 4f a0 44 16 8e 79 4b 96 f8 12 62 49 90 71 c8 88 c1 18 f0 06 64 11 97 59 ce 08 a4 6d 51 4b 0a bd 34 ab a3 69 42 88 75 Data Ascii: Db{f{#D5z2B)sbODyKbIqdYmQK4iBuI/ADRTnJOlM<bh4q%pgW`l7>~p ,ej!]pWVki*4/s^B@Q!FRUdk2&$g HjkK&s
Apr 26, 2024 15:13:54.779201984 CEST	1289	IN	Data Raw: 01 de 4e bd 2d 80 b2 02 6a fc 1e 70 77 e8 9c 2f ee 9d 80 b5 9f 56 df 27 d8 61 05 f2 61 d1 77 9d 34 69 e6 83 01 08 22 bf 51 dd c0 37 aa 5a 4c a8 99 78 95 14 68 8f 2c 98 1e c4 84 47 31 0f 6b c7 86 41 08 a7 31 21 5a b9 0c 27 28 12 ce 89 0a 00 1b 33 Data Ascii: N-jpw/V'aaw4i"Q7ZLxh,G1kA1!Z'(3Gi!e(ywB1ZRlrojMoF(G{Q&a4!G'rz/V$>RCz\|>}I#tDVj+~:MUwhH6y'!w
Apr 26, 2024 15:13:54.779267073 CEST	1289	IN	Data Raw: 82 7f 6a 55 53 ae 75 ac 57 75 dc 34 da b7 56 35 15 63 7b 55 91 50 23 d1 7c 94 90 49 c3 b0 83 5d a9 0e 91 64 bb 38 bd b0 33 a2 62 c9 83 34 9c 74 c7 64 97 b4 cd c3 41 27 f7 4f 32 34 9d e7 8e a5 00 4f dd bc e3 28 4c e1 a0 04 aa a1 d1 e9 b9 86 11 4f Data Ascii: jUSuWu4V5c{UP#\|I]d83b4tdA'O24O(LObs]bZ"/;DZwlRub]mb<+Bm%LS;O{"}gVP)g:o@!W4#hh{>g,M:1'4jgZ'K*7r
Apr 26, 2024 15:13:54.779284954 CEST	1289	IN	Data Raw: 08 fb e7 74 f8 e6 7e e1 3a ee a7 dd f5 75 d3 73 1a ec 90 95 97 a1 1e b0 a9 82 7c c8 47 46 66 98 bf 83 ba 6b 17 9e 76 4f 3c 87 00 64 19 5e a2 d1 22 59 f8 6e e7 07 50 9e 32 94 e3 c0 5e 85 83 dd ae 1d bc ba 58 2a be fd 15 f2 ec 9b 70 d9 7d c5 87 55 Data Ascii: t~:us\|GFfkvO<d^"YnP2^X*p}U9aavM<"9=]$( V'$xC(C\I`COewYolK}pS/P_M\lWfeK<Lng8.eI>Wb;
Apr 26, 2024 15:13:54.779303074 CEST	1289	IN	Data Raw: a9 94 8c 47 89 1e 61 07 27 89 b4 7f ab 2b d5 27 23 92 fc 03 d3 59 70 bd 52 6a 29 0f 2f 8f 28 64 01 d9 ad 6f c8 53 5f cd 63 85 41 95 54 d3 17 0e ea dc 99 b9 59 bc b0 79 94 c7 66 7a 0d 0e 8d 88 2a 4a 63 0c 8d aa 74 a9 b0 60 5b d6 4b b4 e8 ae 70 26 Data Ascii: Ga'+'#YpRj)/(doS_cATYyfzJct`[Kp&U8'2(= g lX':&JAvA"eIE^G>^F\| (@dT~f:-BK_?a/cCgIE!!?5Kqasp2R7TG&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:13:54.533149004 CEST	411	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/js/jquery.prettyPhoto.js HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/login Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:54.778944016 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:54 GMT Server: Apache Accept-Ranges: bytes ETag: W/"23523-1466192378000-gzip" Last-Modified: Fri, 17 Jun 2016 19:39:38 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 6319 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 3c 6b 77 db b6 92 9f ad 5f 81 a8 b9 25 15 4b 94 9d 57 73 e5 28 b9 89 9d 34 39 b7 dd 76 93 b4 dd 3d 8e d7 87 92 20 8b d7 14 a9 92 94 65 af af fe fb ce 0c 06 20 40 52 92 d3 c7 ee 3d db 0f 8d 45 0c 06 03 cc 03 f3 22 fb 0f 44 ef 0f fa af b5 77 1c 87 79 3e 10 8b 4c 16 c5 cd 8f b3 b4 48 5b 7b 3f e5 72 20 be 8b 2e 66 c5 28 bd 16 e3 38 4d a4 98 a6 99 f8 c7 bf 2f 65 76 d3 da 7b b5 2c 66 69 36 10 1f 0b b9 98 85 30 78 1c 66 69 22 fc 59 51 2c 06 fd fe 6a b5 0a 92 b4 37 0f b3 8b 28 e9 c1 c4 9e cc b2 34 cb 83 71 3a ef b4 f6 7e 96 59 1e a5 c9 40 3c 0c 9e 04 4f 5b 7f d4 56 7a e2 41 bf d5 f2 a7 cb 64 5c 00 7a ff 7e 47 dc b6 f6 ee 07 d6 ce c4 50 dc 5e e9 d5 3d 5a de 5b 1f b5 f6 10 6c 9a 54 20 0d a2 1c 9e 46 c9 45 4e f8 f6 f4 2f 80 50 c7 11 c8 eb 42 26 13 1f 07 f7 c2 24 9a 87 38 eb e3 42 ca 09 2c 92 a4 d9 3c 8c bd ae e8 3f 10 d3 30 2f fa 79 9c ae fa ea 29 12 0c 73 d2 45 38 8e 8a 9b 81 38 08 9e 1d 10 e0 cf 61 bc 94 62 24 8b 95 94 89 38 10 61 32 11 87 0c 9d cf d2 d5 a7 a8 88 81 43 45 b6 94 04 8f 7f f4 a7 61 9c 4b 06 0a 63 58 25 93 79 f4 df 5b c1 26 72 1a 2e e3 e2 7c 15 4d 8a d9 40 3c 39 38 e8 da 8f 67 12 45 60 20 1e 3d 7e 4c cf c7 e9 32 29 64 76 9e cb 45 98 85 45 9a 9d c7 e1 48 c6 b0 cb be da e0 a7 99 14 66 90 24 a6 80 27 17 40 0d 9c 93 e0 e9 b0 93 76 3a 6d 8b 87 4c 04 80 cc 81 4a 2f c6 c5 ce 33 00 9a c8 89 c2 e7 3c 12 7d 31 09 b3 4b eb a7 1a ce 7f 5d 86 99 d4 a3 e6 d7 34 1c cb 51 9a 5e f2 2a b3 08 76 05 a2 0e db a4 13 20 fc ef e0 61 2e 80 3c a2 93 86 45 3a fa 87 1c 17 02 c4 39 14 8b f0 02 00 81 e3 02 24 e2 d3 87 9f de 88 68 ca 60 e1 62 21 c3 2c 17 29 c8 93 ad 3c bc dc 6a 9e 4e 70 53 c0 db 5f 97 52 ed e6 23 e2 31 eb 10 84 08 8b 22 8b 46 cb c2 30 6e 59 a4 8b 38 bc b1 b8 06 ca 96 a2 4c 8d 81 ce 1b 91 17 61 56 88 2b 20 3c 05 ad fd 84 1c 7d 6b 71 14 90 86 b1 bd c5 f7 53 4d bf 42 98 26 80 04 a9 00 ad 86 59 b0 74 01 5b 5d 45 70 06 ea 09 8e ad a2 64 92 ae 18 e5 18 34 fc 42 2e a2 71 b1 cc 24 12 31 0a c7 97 83 52 3d 3a b7 6b 5a e9 18 d9 3c 11 12 0e e4 a6 88 e6 b0 b7 44 44 85 9c 8b 28 17 28 b4 49 5f 61 9a 68 bc 3b 51 ad 66 20 fd f6 d9 02 26 22 52 a3 00 0b 73 b9 5c c0 31 3f 9f 44 57 30 04 96 6c d8 5e 2c ce 81 d8 f3 59 1a 4f 64 d6 7e 21 3e 23 24 fc 57 81 81 73 b6 06 ab a3 b1 9c 16 ed 17 cf fb f0 74 33 d0 3c 9a 4c 62 b9 13 2c 43 31 ad 41 55 7f ba 73 c6 29 a8 4a 52 d0 bf 61 94 38 1b 69 a6 75 d7 f2 e5 f8 86 b5 1c 90 da 1a 69 08 a7 f9 1e 40 eb db ad 01 4f 01 d6 c5 b6 f7 3c 14 b3 4c 4e 87 ed af da 16 a0 bc 5e 80 69 6b 8b 02 ed d9 b0 fd 86 7e 92 Data Ascii: <kw_%KWs(49v= e @R=E"Dwy>LH[{?r .f(8M/ev{,fi60xfi"YQ,j7(4q:~Y@<O[VzAd\z~GP^=Z[lT FEN/PB&$8B,<?0/y)sE88ab$8a2CEaKcX%y[&r.\|M@<98gE` =~L2)dvEEHf$'@v:mLJ/3<}1K]4Q^*v a.<E:9$h`b!,)<jNpS_R#1"F0nY8LaV+ <}kqSMB&Yt[]Epd4B.q$1R=:kZ<DD((I_ah;Qf &"Rs\1?DW0l^,YOd~!>#$Wst3<Lb,C1AUs)JRa8iui@O<LN^ik~
Apr 26, 2024 15:13:54.778964043 CEST	1289	IN	Data Raw: 04 82 15 bd 00 1c ea c9 f3 7e 58 c1 e6 ae 37 43 25 3c 6e 3a 29 5e ba 04 4d c0 58 b7 0d 29 2f f0 67 0d bb 3b 03 e4 ef 2a 4a 97 b9 35 4b 3f aa d3 55 3b 19 45 6a 34 51 e7 b2 8c e3 73 b0 ca 4d 47 58 dd d3 44 c2 6e 62 94 77 30 33 d3 e8 7a eb ae 48 29 Data Ascii: ~X7C%<n:)^MX)/g;J5K?U;Ej4QsMGXDnbw03zH),w8wHWU64~U7Mxe XouI}o,m8W{=JlNU*@J{^h~ArAIE$I\|8y?~
Apr 26, 2024 15:13:54.778980970 CEST	1289	IN	Data Raw: 77 f6 f4 a4 30 2e ac 39 f6 d1 34 2d 41 38 4b f8 35 ff b1 96 70 a7 f0 ae 0d 27 9a 88 e3 79 86 2f 3b 09 13 2f 85 d8 01 23 e0 56 f7 18 71 85 b5 1b a8 b7 91 3a 23 16 aa 75 ab 55 57 ef 74 21 81 bf b4 c1 ae da 43 d7 5e 91 b7 07 13 96 59 a2 2e 5a a5 fd Data Ascii: w0.94-A8K5p'y/;/#Vq:#uUWt!C^Y.Z4uMyXd]x@_p:?F#v8QI;1UjIYI)u^:&?GLE:g?Y@OGP(WL
Apr 26, 2024 15:13:54.779031992 CEST	1289	IN	Data Raw: 04 f5 b9 10 38 7a bf 83 fb ff 4f 99 6f 4a 57 7f b2 00 ec 35 ef 6c 7f 78 f8 e4 48 b8 63 4e a5 64 33 88 55 29 d1 40 40 c1 ab c9 44 e4 10 e7 49 d3 29 87 b0 59 1a 83 4f 99 ed 62 64 b5 d6 fa af c4 cc 26 5b 66 81 99 32 a6 8d cc 48 f6 76 19 20 f9 fd df Data Ascii: 8zOoJW5lxHcNd3U)@@DI)YObd&[f2Hv 1JUopAh\z4'x4^isuOCJ(EA<4,u"zC;dJ\2w033oa;)3DU:[vU[zTt7~X
Apr 26, 2024 15:13:54.779057026 CEST	1289	IN	Data Raw: 10 b8 33 8d ba 9f 89 a8 6a 19 63 53 7a 57 43 43 5e ef 50 47 65 8d 3c 27 8d e2 f0 69 87 cc 6c 41 e0 44 61 e1 64 42 9f 05 40 37 57 87 62 c1 32 b1 9b 99 ed 5e 14 f1 5b 89 ab b8 98 77 a1 ce 0a 0e 39 2d 51 a7 74 6b d3 f5 5d db cc 6b 1d a2 5a c0 b5 2d Data Ascii: 3jcSzWCC^PGe<'ilADadB@7Wb2^[w9-Qtk]kZ-q9;':j<>26P}!_et5.'5m+#\j=S,lcedE`0TJJ3ot#39[Nz~UIiT?v{*Ml
Apr 26, 2024 15:13:54.779073954 CEST	335	IN	Data Raw: a0 52 69 a7 91 06 3e 10 07 1c c3 c3 ef a3 7a 03 5d 80 da c9 1f e4 90 c2 b3 3d 49 17 fd 86 af 76 68 7f 55 d7 96 68 70 4b 3a 50 34 e3 12 4e d6 4f 54 b1 aa 8a d5 ae 2c e3 7d fc 46 41 f9 29 85 ad df f1 a8 7e e0 b0 c5 07 40 38 02 08 23 39 c3 69 2d 6e Data Ascii: Ri>z]=IvhUhpK:P4NOT,}FA)~@8#9i-nrAmtS^,ag8D3zN,/FvaCS*QOSW]\.0wJaSH]&iWP[?avo<N}Yic?>gm$F@/G\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:13:54.887691021 CEST	421	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/login Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:55.139560938 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:13:55 GMT Server: Apache Accept-Ranges: bytes ETag: W/"18921-1412255904000-gzip" Last-Modified: Thu, 02 Oct 2014 13:18:24 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 2365 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 5b 6d 8f db 36 12 fe 6c ff 0a b6 45 81 eb 22 b2 e5 cd 6e 37 f1 7e ba 4b d3 4b 81 36 09 d2 7c 2c 10 c8 92 bc 26 a2 95 74 12 bd d9 ed 62 ff 7b f9 2e 52 22 f5 46 fa 12 2f 10 db 92 38 f3 cc 70 38 f3 0c cd ac cf 40 e0 e9 b5 5c 7c 3c c0 1a 3c 14 47 10 47 39 48 13 88 56 4b 5f c2 03 70 b6 5e 2e 17 09 bc 5b 65 f0 e6 80 3e 55 c5 31 4f d2 04 ac ca f2 13 2a 4a fa 9e a5 7b 04 1e c1 2e 8a 3f df d0 fb 5b 70 ac b2 7f ad 56 6b 78 1b dd a4 f5 ba ac 52 84 1e de 1f 0a 54 ac 35 31 eb ba ac 20 4a 57 65 7e f3 13 08 5e bc 28 ef 41 70 f9 1c ff 9b 17 41 95 96 69 84 ae c1 13 58 9f 81 8f 58 15 55 13 17 55 9e 56 04 d5 00 a8 5b 98 24 59 da 82 f5 c3 7e bf 57 24 96 11 42 69 95 af e3 22 2b c6 c8 ac c8 1d 1f 96 6e 36 61 af a9 4c 91 62 ab 0d 59 5c e4 28 cd 11 f9 4c 80 51 43 b0 99 61 18 62 69 03 83 e8 7b 04 89 0a 31 8b cf a6 0d 31 f9 83 bb 78 08 b0 3a 28 10 b0 9b d9 79 c5 1f 6b 1e ea 99 9e 3c bd 47 db 43 71 87 51 cd 9b 9b 1d ca df 62 19 6c 72 62 ac 17 4b 62 b6 a9 b3 13 1f ab 9a c0 2c 0b 48 9e e0 48 c9 40 b0 3b 22 54 e4 3d 10 b1 ee 3b 58 1c 6b 57 98 ef b9 1c 0d 2a 5d 18 83 40 c5 d0 61 b0 e9 7d 19 61 87 7b 88 f3 e7 1b 12 e6 e7 3f eb 61 6e c6 f7 9a 69 1d 89 ce c9 91 06 8c 17 57 d3 31 32 08 76 a4 24 d6 ab 28 f6 91 31 c2 b1 5e 7c 25 74 0e fa 51 a0 f3 e6 c9 70 ac 17 db 18 07 fd 98 15 35 c9 e4 5f 60 82 0e 5b 70 75 59 de 5f 83 43 4a 9e db 82 f3 73 f2 cd 3d 23 93 20 d8 8c 42 4f d1 f4 ba f7 07 0c 7a 7f cc b2 4f 55 5a 53 0b 60 9e e1 a4 d9 49 d0 c0 5a 5a a3 aa 2a be c8 ac e1 67 72 ae 36 a6 6a 73 48 81 54 43 b5 02 98 03 84 af ee 0a 6c e1 2d c8 a3 3b 6a e5 28 a0 ab 04 d6 d1 2e 4b f5 e4 11 94 45 0d 11 2c f2 2d 81 f1 e2 8a 4c 98 f0 6d 92 ee a3 63 86 7a 2a 06 d3 40 72 bc 8f d5 4e c2 a5 c7 15 54 cd 6c 37 90 d1 83 2e e0 10 ac 6e b0 f9 81 03 f1 4f b8 5e 84 06 67 fc 87 69 1b c7 b9 14 68 43 b4 8b cb 1d cb bc 14 c9 be c9 57 9f d9 6d fe 65 83 97 15 51 92 56 bf e1 54 3a 13 18 13 b0 ba 81 7b 59 cd f9 5b 1b d9 ef f4 49 00 63 9e 75 96 8b f5 98 1e 02 47 ec 2f 51 f5 19 7c e0 a8 71 90 df a6 cb c5 48 e6 cf 79 67 82 25 b8 33 7f 55 8a 33 f1 b7 42 32 06 e0 48 50 9c 9c be 67 c1 c9 c0 21 01 a0 03 cb 1c c3 56 60 d3 e2 d7 ee ac 99 bd 43 07 97 bd 0b 38 99 f3 82 07 11 cc e4 5a 0f c7 1f 09 d6 c1 a5 36 b4 4c 64 0b ee 07 7a 71 06 de 53 87 e1 14 48 33 ba 24 0d 95 ef 26 a9 03 70 66 8f d4 06 79 82 16 a9 03 75 62 87 64 5f cc ee 0d 92 05 9b 8b 13 4f d2 1e 19 97 c8 a4 ee c8 8a d1 b9 39 b2 62 f3 e5 45 4f ad 51 17 a7 af ce a8 a7 dc b8 35 46 3a 64 3c b0 c2 0b f2 23 4e 07 6f 8a 2c a1 ae 15 2d 51 7c 41 fe 64 23 d0 b1 35 49 eb b8 82 25 21 Data Ascii: [m6lE"n7~KK6\|,&tb{.R"F/8p8@\\|<<GG9HVK_p^.[e>U1OJ{.?[pVkxRT51 JWe~^(ApAiXXUUV[$Y~W$Bi"+n6aLbY\(LQCabi{11x:(yk<GCqQblrbKb,HH@;"T=;XkW]@a}a{?aniW12v$(1^\|%tQp5_`[puY_CJs=# BOzOUZS`IZZgr6jsHTCl-;j(.KE,-Lmcz@rNTl7.nO^gihCWmeQVT:{Y[IcuG/Q\|qHyg%3U3B2HPg!V`C8Z6LdzqSH3$&pfyubd_O9bEOQ5F:d<#No,-Q\|Ad#5I%!
Apr 26, 2024 15:13:55.139714956 CEST	1289	IN	Data Raw: d1 ca 28 75 b7 49 1b 32 dc 83 71 52 ba b4 e8 9b d9 82 f5 c5 80 87 0e 6c 00 a6 7b 03 66 51 30 a9 ff b2 47 93 97 f6 ab 07 a2 a7 ee ab a3 61 6e f3 35 c4 79 a7 f6 5e 7d c0 fe 3f cc b7 b7 81 eb 83 e7 99 ff 4e 6f df 3a e0 66 74 6f 1a 2c 97 e6 6d 62 fb Data Ascii: (uI2qRl{fQ0Gan5y^}?No:fto,mbQ:to5 !MVY\|Swd5Qn6js=S9oMtjo@yO^JM3s%mVhvGtm\$c[`wIx.SDS
Apr 26, 2024 15:13:55.139759064 CEST	234	IN	Data Raw: 26 11 89 2c cc 00 5d f2 f5 2a 0a 52 b0 39 e7 a5 8d 7e 6a 05 55 37 1d 8b f1 02 dc 85 16 af da be 1d 23 54 38 cb 07 32 5b 80 ef e0 6d 59 54 28 ca 91 ca 52 ac db 7d 4b 59 6b da 7c 47 06 ae 75 70 29 37 49 18 27 d8 30 52 c0 b6 39 78 1b 22 72 8d 72 9a Data Ascii: &,]*R9~jU7#T82[mYT(R}KYk\|Gup)7I'0R9x"rrg-+B=q/fVXiEyVsEo=begx[kb_!}t`w0AOv(Y'"Wx:bf"G<(^%b_jkWI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:13:56.087893963 CEST	288	OUT	GET /favicon.ico HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:13:56.330876112 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 13:13:56 GMT Server: Apache Last-Modified: Fri, 11 Mar 2022 19:39:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 2018 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e0 03 69 eb 17 83 8b bc d2 1f f1 b1 71 88 c1 fd 69 d8 6e 4d 2f 2f 3f d3 2b fd 1c 86 48 a7 a2 ef 7f 07 8f 7b 7a 38 22 ca 61 2f 75 9f 00 7f 77 46 2c fe e2 6c 37 b3 73 a5 fb 04 f8 1a 63 48 ca 3d f0 f1 1a 70 d9 03 9d 7b 10 eb 9f f3 7c 73 75 59 d9 69 b7 1e 17 e1 0c 5e 27 Data Ascii: [klU\|ng[Lh\vH+Q@0H\|11>b\|`4Dvg()]KBvvwvYs{AJ1~a0A2V^uu \|UL/qe>Yt+kKn_H3\y^f?fPyajwfNoth~8/:LKf>q?C1o-u0'=vYO lTk(vDGb[28 tA3`m6#47^m>7lOcM{C=M3/f378_mK<43Ed m%\|gl<hEitr~FR2!~5'C3l.q?C!3+~\|de63_b/^\\|kF;Rc>)781<1w5U9~jxRfr/:pw5_&1\|p#2\|2@gHa/MT.aZj?ziY8~t@\>/r32{#8:I#@{Cn:tp#`<"dw?#g{ nu8kOW?+?;[~/~Cb}iqinM//?+H{z8"a/uwF,l7scH=p{\|suYi^'
Apr 26, 2024 15:13:56.330893040 CEST	1033	IN	Data Raw: a9 86 5c 27 14 eb 24 45 14 e1 84 aa b0 35 8d e9 f6 5d bc 5e 43 d5 f8 2c 25 6c d5 4c b8 d8 1a 5b 68 5e 6e c1 54 eb 21 5e 8f e8 3e 37 b0 fe c2 f5 57 5c 6d 5e 73 60 61 f3 06 5f fd 0f e3 0a cd 71 20 04 b5 d6 19 03 d6 00 34 fb 10 de ad df e5 b5 14 52 Data Ascii: \'$E5]^C,%lL[h^nT!^>7W\m^s`a_q 4RTZKqQ2QhueF3!Z[vcB&em4oV5{=v#QB~;odF/^<wnfI[rx}:>4pH7f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:01.214237928 CEST	529	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:01.797672033 CEST	529	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:01.932575941 CEST	1289	IN	Data Raw: 78 81 f8 ef 44 eb df 35 2e 24 fe d0 75 42 29 de bc 9a 71 7a 99 78 05 f1 a8 00 41 a0 53 07 96 bd 82 db 4a bd 7c 4c e5 1a 52 fd f4 cc cf 32 34 c8 4d b3 11 a4 77 88 1f 15 19 f8 ef 4b a2 3e 6c 1d f0 f9 ac a3 45 b0 2d bf a0 e0 64 6e c0 76 3d e8 cd ab Data Ascii: xD5.$uB)qzxASJ\|LR24MwK>lE-dnv=nfgJw{YFt#l:eNIcf%(v3>aK`p_y}Pzt6L7lSK`QAoK#nFPFp^lGH6^7MN?
Apr 26, 2024 15:14:02.700001955 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:01 GMT Server: Apache Accept-Ranges: bytes ETag: W/"4008-1412255906000" Last-Modified: Thu, 02 Oct 2014 13:18:26 GMT Content-Length: 4008 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 64 08 06 00 00 00 4a 1e e8 62 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f 4a 49 44 41 54 78 da ec 5d 7d 8c 14 45 16 af 59 56 44 16 97 6f 70 5d 70 81 c3 c8 02 0a 82 68 00 91 25 28 c8 1d a0 46 41 2f d1 88 39 3f 12 22 89 77 5e e0 d4 c3 05 bd 9c 60 14 ff d0 7f 88 97 b0 5e 8e 84 c3 e3 8f 4b e0 3c 94 c0 62 f8 50 d0 8b 72 e0 02 2e 9f ba 59 3e 22 df ab 2b 02 7b ef 57 fb 6a af b6 ac 9e e9 ee e9 9e 99 9e e9 97 bc 4c 4f 77 d5 ab ea 7a bf 7a ef d5 eb 9a 9e 44 4b 4b 8b 88 29 a6 e2 c5 8b 17 8b 1b 6f bc d1 e9 fa 30 e2 c9 c4 63 89 6f 21 ae 08 a8 dd 12 fe 6c ca c4 4d 02 ec e0 2b 57 ae 88 8b 17 2f 16 fd f4 d3 4f 1d c0 97 2f 5f 4e 5c ba 74 a9 99 8b 1d a5 32 ff a5 32 db 89 37 bc f4 d2 4b bb 51 d5 94 b5 68 d1 a2 fc 04 82 3a f8 e1 87 1f da 4e 5e 73 cd 35 03 e8 63 0e 0d cc e3 34 28 03 30 80 8a 03 a6 92 4c 80 00 fd 26 85 03 04 82 00 20 08 00 6d e7 89 3b a3 5c 51 51 d1 10 70 22 91 98 d5 a1 43 87 23 4b 97 2e fd 2b 95 af 59 b8 70 e1 c1 82 b0 08 fa 97 6b af bd 16 03 56 45 87 cf d3 e7 74 0c 16 0d 8c 28 2e 2e c6 40 49 8e 12 a1 ff 00 40 73 73 b3 04 00 3e cd 7b c2 b1 6e 35 50 9e c0 51 41 e7 17 76 ec d8 71 34 01 e2 8d 05 0b 16 6c ca 77 20 b4 d3 2c 40 40 83 b1 84 06 4d 82 e0 aa ab ae 12 34 18 82 66 48 64 41 00 4b 77 fe fc 79 f1 fd f7 df 0b f3 9e 14 08 f0 09 c6 3d e2 1a ca 80 c8 72 fc 92 ea 10 16 96 4e 2a 18 8b c0 ee 00 96 e0 0e 35 63 40 21 b8 83 8c 80 00 fd fe f1 c7 1f 45 53 53 93 b4 04 fa 3d 29 ab a0 97 d7 49 95 65 eb 30 86 8e 9f 7f ed b5 d7 0e bf f0 c2 0b 87 0a c1 22 cc 81 3b 90 e8 28 2e 8e f4 4d 41 b1 88 03 60 0d 00 02 fd 9e 08 f0 d2 05 3a ad 96 ba 74 e9 22 cb e8 75 48 d6 af c8 82 cc 29 04 8b 30 8c 03 43 79 f3 6e 97 94 6a d6 61 c0 31 7b 60 6e 3b 75 ea 24 4d 2b be 83 ae be fa 6a 79 5e 37 d7 30 d3 a8 87 99 87 41 07 a3 0c 94 07 c5 81 21 1b 72 20 0f e5 54 90 a7 cf 58 5d b6 09 02 c8 07 43 0e ca e0 7c e7 ce 9d c5 c4 89 13 65 fd ad 5b b7 4a 97 a1 5b 06 80 60 fc f8 f1 b2 ec e6 cd 9b e5 7d c1 5d 40 1e 95 7b 7c c9 92 25 ef 53 df 76 e7 33 10 26 63 75 e0 a5 22 06 e7 dc b9 73 52 51 77 dd 75 97 fc 84 02 bf fe fa 6b 51 5f 5f 2f c6 8c 19 23 af 9f 38 71 42 0e 30 06 17 d7 cf 9c 39 23 6e bb ed 36 51 56 56 26 95 f0 d5 57 5f c9 3a dd ba 75 93 66 fc fa eb af 17 37 dd 74 93 04 47 63 63 a3 d8 bf 7f bf 04 c1 e0 c1 83 25 88 94 2f c7 0a e0 d8 b1 63 52 b9 36 80 a2 8e 02 a3 22 d4 01 08 7b f6 ec 29 15 be 65 cb 16 71 e1 c2 85 b6 40 19 e7 70 1f df 7d f7 9d 2c cb ab 09 29 8f fa 5f 41 80 c2 52 7a 77 3e bb 86 b1 b8 59 7d 76 a4 22 0c 68 af 5e bd c4 93 4f 3e 29 95 08 65 42 c6 43 0f 3d 24 4e 9d 3a 25 26 4f 9e 2c 2a 2b 2b db 4c 33 94 02 10 Data Ascii: PNGIHDRdJbtEXtSoftwareAdobe ImageReadyqe<JIDATx]}EYVDop]ph%(FA/9?"w^`^K<bPr.Y>"+{WjLOwzzDKK)o0co!lM+W/O/_N\t227KQh:N^s5c4(0L& m;\QQp"C#K.+YpkVEt(..@I@ss>{n5PQAvq4lw ,@@M4fHdAKwy=rN5c@!ESS=)Ie0";(.MA`:t"uH)0Cynja1{`n;u$M+jy^70A!r TX]C\|e[J[`}]@{\|%Sv3&cu"sRQwukQ__/#8qB09#n6QVV&W_:uf7tGcc%/cR6"{)eq@p},)_ARzw>Y}v"h^O>)eBC=$N:%&O,++L3
Apr 26, 2024 15:14:02.941993952 CEST	1289	IN	Data Raw: cc 9d 3b 57 82 e4 e8 d1 a3 12 24 f7 df 7f bf 98 39 73 a6 68 68 68 90 00 98 3d 7b b6 2c 0b 00 0c 1f 3e 5c 0c 18 d0 8a cf 29 53 a6 48 00 0d 1c 38 50 0c 1a 34 48 b6 6d 8b 5f f4 e8 5f 8f 05 d4 39 58 02 28 1a 0a bf f3 ce 3b 25 48 95 25 50 20 40 19 b5 Data Ascii: ;W$9shhh={,>\)SH8P4Hm__9X(;%H%P @T?kV\>}Z<cR555krv4B0G%ggSJVTV\);D\0{>lzvOP<O0)(K0qnw TA3#jaz-JJJRz!
Apr 26, 2024 15:14:02.942018032 CEST	1289	IN	Data Raw: 9b 95 46 4c 1e 2c 82 1a 4c 53 01 4e 64 2b e7 47 19 36 25 2a 8b 64 b6 a1 ce e9 60 88 01 10 f0 f2 31 88 01 f5 63 9e 9d da 35 15 6e 03 46 1c 23 04 47 f2 59 03 12 3b c9 12 35 5e 67 b7 97 84 52 36 da 8d 29 45 42 29 5d ab e0 b7 7e b6 da 8d c9 b2 7c 0c Data Ascii: FL,LSNd+G6%d`1c5nF#GY;5^gR6)EB)]~\|5x1vMw8eh!Nv 6Njgzi[`&k+&G7dtH8BA)^OgCneq:b7u7}? [h~<B)1v*c[vcr
Apr 26, 2024 15:14:03.045927048 CEST	423	OUT	GET /lingos/favicon.ico HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/servlet/ekp/login Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:03.291527987 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:03 GMT Server: Apache Accept-Ranges: bytes ETag: W/"15406-1647027594000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:54 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 2018 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da 23 Data Ascii: [klU\|ng[Lh\vH+Q@0H\|11>b\|`4Dvg()]KBvvwvYs{AJ1~a0A2V^uu \|UL/qe>Yt+kKn_H3\y^f?fPyajwfNoth~8/:LKf>q?C1o-u0'=vYO lTk(vDGb[28 tA3`m6#47^m>7lOcM{C=M3/f378_mK<43Ed m%\|gl<hEitr~FR2!~5'C3l.q?C!3+~\|de63_b/^\\|kF;Rc>)781<1w5U9~jxRfr/:pw5_&1\|p#2\|2@gHa/MT.aZj?ziY8~t@\>/r32{#8:I#@{Cn:tp#`<"dw?#
Apr 26, 2024 15:14:03.291552067 CEST	1179	IN	Data Raw: a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e0 03 69 eb 17 83 8b bc d2 1f f1 b1 71 88 c1 fd 69 d8 6e 4d 2f 2f 3f d3 2b Data Ascii: g{ nu8kOW?+?;[~/~Cb}iqinM//?+H{z8"a/uwF,l7scH=p{\|suYi^'\'$E5]^C,%lL[h^nT!^>7W\m^s`a_q 4RTZK
Apr 26, 2024 15:14:05.852787971 CEST	467	OUT	GET /lingos/servlet/resetpassword HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.103816032 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:05 GMT Server: Apache Cache-Control: private, no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: fullscreen=* Content-Security-Policy: script-src 'self' .peoplefluent.com .netdimensions.com 'unsafe-inline' 'unsafe-eval'; Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Set-Cookie: JSESSIONID=14809B0D2EFF56DE91F5151DC9FE075D; Path=/lingos; HttpOnly;SameSite=None;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8 Data Raw: 31 33 37 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 5b ed 8f 1b c7 79 ff 5c fd 15 63 16 28 29 54 dc bd 17 49 96 4f c7 4d 79 47 9e 8f d1 91 bc 92 3c 49 d7 c8 58 0c 77 87 e4 fa 76 77 98 d9 dd a3 28 c3 80 dd a4 48 11 b8 08 fa 21 36 8a 04 45 1c cb 71 62 d8 b0 8c 24 a8 64 c7 f1 87 73 be 0a a7 6f f2 b7 0b d0 b8 49 d3 fe 0f 7d 66 66 f9 ce e1 8b 14 15 3e 5b b7 c3 d9 df f3 cc 6f 9e 79 e6 99 67 86 73 9b cf e5 ca db b5 c3 fd 3c da ad 15 f7 d0 fe c1 d6 5e 61 1b 25 d2 ba 7e 63 7d 5b d7 73 b5 9c 7c 71 51 5b 59 45 35 86 fd c0 09 1d ea 63 57 d7 f3 a5 c4 39 14 ff 24 5a 61 d8 de d0 f5 4e a7 a3 75 d6 35 ca 9a 7a ad a2 b7 42 cf bd a8 bb 94 06 44 b3 43 3b 61 6c f2 1a e4 62 bf 99 49 10 3f 81 6c 87 65 12 6e c8 f8 1b 82 6d 03 6d 7a 24 c4 c8 a2 7e 48 fc 30 93 2c e4 33 c4 6e 92 24 e2 ea d3 e4 db 91 73 9c 49 de 4c 1f 64 d3 db d4 6b e3 d0 a9 bb 24 69 6c 86 4e e8 12 a3 42 02 12 a2 28 20 0c b5 71 10 74 28 b3 37 d0 3e a1 6d 97 ec b8 11 e8 43 7b c5 ea a6 2e c1 9b ae e3 1f a1 16 23 8d 4c 52 d7 23 47 6b 0b 60 43 00 35 8b 7a fa 31 61 01 f4 34 d0 57 b4 d5 15 5d be 70 80 59 a0 59 41 90 44 61 b7 4d 32 c9 90 dc 0e 75 f1 99 11 37 93 0c c2 ae 4b 82 16 21 61 72 e9 16 86 5f a7 8f 89 6f 53 f6 ff d2 14 bc 6e 53 1f 4a 0b b7 f6 dc b7 9c 06 7a ae 90 7f 69 b4 61 28 37 69 a0 fb b6 de 60 24 b0 a8 2e 85 4c 8b 32 a2 d7 31 f8 c0 c2 fa a1 f7 4e 03 d4 3f 97 4e f3 b6 9e a0 a9 42 7e d9 d6 d2 69 63 33 b0 98 d3 0e 85 83 46 b8 09 82 df c4 c7 b8 2a 2a 93 c6 39 4e e7 dc 31 66 28 97 ad e5 77 ca 95 62 b6 56 3d 2c 6e 95 f7 8a e5 52 6d b7 8a 32 e8 5b Data Ascii: 137e[y\c()TIOMyG<IXwvw(H!6Eqb$dsoI}ff>[oygs<^a%~c}[s\|qQ[YE5cW9$ZaNu5zBDC;albI?lenmmz$~H0,3n$sILdk$ilNB( qt(7>mC{.#LR#Gk`C5z1a4W]pYYADaM2u7K!ar_oSnSJzia(7i`$.L21N?NB~ic3F**9N1f(wbV=,nRm2[
Apr 26, 2024 15:14:06.103871107 CEST	1289	IN	Data Raw: 20 e0 47 98 75 93 17 92 3b a4 ce e2 62 11 33 ab 05 cf 6c 9b 39 ae f8 cc 6b bf 19 f9 44 3c 5c fe 29 1b 35 a3 20 84 42 95 b4 43 e2 d5 09 83 72 d9 0a a9 2c 95 e8 71 af 32 47 ac 5e 31 f9 d2 d5 a9 84 aa bb e5 4a 6d 94 95 64 24 c9 48 2a c3 44 24 0f 49 Data Ascii: Gu;b3l9kD<\)5 BCr,q2G^1Jmd$HD$ICre3_+9!mHB-", +Z;#z7IlL6$I~ZJ/J]" l(b/$]@3{%;{{lTTDC81~a
Apr 26, 2024 15:14:06.103887081 CEST	1289	IN	Data Raw: 12 93 dc 71 64 3b c4 b7 62 6a d9 f8 d3 d8 1c 2b f8 ed 28 34 05 09 53 92 30 a1 45 53 46 33 b3 64 0e 5a 1b 04 3f 87 cb 8c 12 1f 8d 80 43 1c b5 b1 f6 78 9f e3 e6 f8 80 98 75 62 82 63 13 66 c1 4c 31 a1 cb 26 76 db e0 80 72 b2 68 d3 92 08 58 92 f9 d1 Data Ascii: qd;bj+(4S0ESF3dZ?CxubcfL1&vrhXKRtBxm9a@V[xJ4%1vZ%Bm`Iouc(CuF;"0^rQ;0%g-je _yr}1_)l?y
Apr 26, 2024 15:14:06.103904009 CEST	1289	IN	Data Raw: 9b 3a d4 cb f6 da c6 66 03 5a e9 a9 ee 60 e6 f3 af 39 0c 11 93 f3 69 e0 e9 8e 9c fd 41 c1 83 cc 89 2f 64 dd 0b e3 df 98 f1 43 f3 c8 07 45 4e d3 87 58 b6 a9 73 d5 40 b1 cd db 89 53 0f 79 36 4c 84 66 91 83 a5 68 5b de 25 3b 2f 49 16 72 9a 90 e0 d9 Data Ascii: :fZ`9iA/dCENXs@Sy6Lfh[%;/Irs;LzI7JIELM0Q&%d0D&Y5yr;t\<1 \jeFHf2<0'm*rbcFL.W.1}\|5_V7PZRHkxD
Apr 26, 2024 15:14:06.103918076 CEST	628	IN	Data Raw: aa 3d 7d 00 8a 7f 72 fa 5b f1 79 76 4f 16 92 32 96 82 2b 67 a2 22 c7 3b 7d e7 f4 13 e8 fc bd 47 6f 9d 7e 06 ca de 00 e5 f7 40 f5 50 ed e9 bd 19 3d 58 4a da 78 22 31 65 4a 30 75 fe 6e 5d 7d fc de 97 df 7d fc e0 f1 c7 8f 7f fe e5 f7 1f ff 02 a5 c4 Data Ascii: =}r[yvO2+g";}Go~@P=XJx"1eJ0un]}}wA{WfIcie.+/Gf^Li"^(_gw?wn^95wuvsvD/gbIyWo~}s
Apr 26, 2024 15:14:06.104490995 CEST	20	IN	Data Raw: 61 0d 0a 03 00 88 02 6b 91 99 4b 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: akK0
Apr 26, 2024 15:14:06.178535938 CEST	400	OUT	GET /lingos/nd/fresco/styles_core/base.css HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.440732002 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"573743-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec fd e9 96 1b 37 b2 28 8c fe df 4f c1 2d 5d 75 5b 52 91 e2 5c d3 b2 cf d6 6c 79 92 2d c9 d6 d0 bb 8f 57 92 4c 16 d3 95 64 52 99 c9 2a 95 6b d5 5a 77 f8 ee b4 d6 9d a7 97 b9 3f ee 23 7d af 70 31 23 00 04 72 20 93 b2 7b 1f 4b dd 72 55 22 10 08 04 80 40 20 10 88 f8 9f ff bf ff bf ce d5 26 6a af 82 8b 2c cc 5b f2 e7 56 1c 1d 60 df c9 cf ed 3c 59 57 82 9b 24 79 9e 2c 21 e8 f5 32 48 cf a2 d5 49 b7 d5 19 85 cb 56 b7 d5 bd 81 15 e2 70 ee a5 a0 9d 46 67 8b 1c 47 c6 d1 dd 38 74 4c 93 55 1e ae c4 2f 8b 68 36 0b 57 d7 eb 24 8b f2 28 59 9d 04 93 2c 89 37 79 78 4a 5b 3d 69 1f b3 3f eb 4f a7 17 51 16 4d a2 38 ca af 4e 78 15 17 2f 46 ae 97 0b 26 dd 07 95 10 58 95 ae 2f a3 59 be 38 19 9b 7d 34 c6 e1 a0 80 f1 a2 7a b0 c9 93 c2 be 38 b4 5d af 83 d9 2c 5a 9d 31 16 77 5b 76 fb 8c 48 00 33 46 86 94 d0 88 90 a6 2a 19 34 1d 60 83 7b aa f0 9f c6 51 96 b7 b3 fc 2a 0e 4f 56 c9 2a 34 fa 12 47 ad 70 79 3d 27 03 ae 20 d2 65 10 43 18 3d f4 69 18 07 79 74 11 9e fe 9e 24 cb 93 9e 77 e2 b8 63 2a 67 d4 2c ba b8 2e a9 7c 12 cc f3 30 bd 96 bf fd fd ef a7 b3 28 5b c7 c1 d5 c9 24 4e a6 e7 a7 d3 38 0c d2 13 c2 8f 05 3a 28 7b 5a 80 92 86 68 15 47 ab b0 cd 49 91 1f db cb e4 f7 b6 28 c9 f2 80 94 dc 33 e1 4f 2f c2 34 8f a6 41 dc 0e e2 e8 6c 75 c2 1b 38 9d 6e d2 2c 49 4f d6 49 44 fa 9a 22 5c ad bb b2 0d 4e e1 ec 09 dc e1 f4 f1 b1 15 1c 14 70 cf 2a 75 79 46 9a 32 47 0e e5 21 ce 99 0a ac b0 da 77 98 61 37 7f 53 4a ad 45 4a 1e 7e 62 9d f6 b3 87 2c 9d 62 0e d9 00 58 b3 74 fd 95 8f db e7 95 9b ae b0 a7 f3 7b 16 7e b2 c6 a4 b2 24 55 08 c9 f2 20 3c ae df 45 b3 e4 9a ed 3d dd 53 46 76 b1 80 2e 60 87 d5 69 8e ac cb f7 35 8d 33 3b 8f 56 ed 2c 58 b6 b0 16 0e ca 41 6c 3e 5d 4f 92 74 16 a6 27 84 b1 d1 ac 75 bb 3f 1e 1e 06 dd 53 fe b1 cd 77 1c ba 69 8c c8 96 0a 57 41 61 1b 4a 32 d4 a2 c4 54 2c 7a 62 1b 52 1b 47 6f fd 89 fd 5e 9d 8a 4e 16 c6 e1 34 0f 67 db 10 a3 2a db 34 b5 19 21 55 da 0f b6 69 37 b8 9e 10 89 7d 96 26 9b d5 ec e4 f6 ec 88 fe 6d 6d d2 f8 8b 4e e7 81 fa 5f 90 91 7a d9 03 8a 99 fc 1b 2c 1f 64 eb 34 ca c3 ce 7a 75 76 b7 95 86 eb 30 c8 db 9f 4e cd 91 0d 06 f4 af 3d b2 a4 33 a7 d3 24 26 62 ff 76 b7 4b 98 ed ec ad 4c ec cc c2 69 92 06 ac 40 6f d9 25 9d 57 c2 a6 66 ff a9 00 2a a7 5c ce 06 b1 67 2d 82 d5 4c cd 94 4e 9f 6a a5 9d 43 f2 ef a9 b1 32 e9 bc a6 82 80 fc 40 da 3c a1 23 e9 f6 b8 d6 cc aa 34 c6 10 fc 64 9e 4c 37 59 dd 4a 8b 84 6c 06 c6 c4 98 4e a7 72 dc e6 f3 79 a5 01 e1 58 aa 34 2d a8 74 1a 4c 36 39 dd 2a 4f 2a cd 7e 40 3f 1d 52 35 38 03 35 38 fb e5 b4 9e 47 Data Ascii: 1faa7(O-]u[R\ly-WLdRkZw?#}p1#r {KrU"@ &j,[V`<YW$y,!2HIVpFgG8tLU/h6W$(Y,7yxJ[=i?OQM8Nx/F&X/Y8}4z8],Z1w[vH3F4`{QOV4Gpy=' eC=iyt$wcg,.\|0([$N8:({ZhGI(3O/4Alu8n,IOID"\NpuyF2G!wa7SJEJ~b,bXt{~$U <E=SFv.`i53;V,XAl>]Ot'u?SwiWAaJ2T,zbRGo^N4g4!Ui7}&mmN_z,d4zuv0N=3$&bvKLi@o%Wf\g-LNjC2@<#4dL7YJlNryX4-tL69O~@?R5858G
Apr 26, 2024 15:14:06.441095114 CEST	1289	IN	Data Raw: 6d c1 a8 fe 70 30 18 8d cb 5a 15 9a 9e d1 f9 70 36 1f 95 73 d9 50 37 ab cf 7a d5 20 9f f4 74 66 8b 89 7f d4 a5 7f e5 c4 27 15 cc 9e d8 13 be 90 a5 d8 5e 56 4a e3 36 75 b0 1d 0e 25 c8 da ef 2c c1 34 12 0b fc 9d bb f9 d3 b5 ab 97 72 85 59 d4 20 59 Data Ascii: mp0Zp6sP7z tf'^VJ6u%,4rY Yb/;aj%GhI'^!.:][zjV( wS}SD8>d;:0EXSrVlQttY=6RC\rIN>YXVWhMfd9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:01.214288950 CEST	529	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/nd/fresco/login/scripts/prettyphoto/css/prettyPhoto.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:01.477899075 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:01 GMT Server: Apache Accept-Ranges: bytes ETag: W/"2545-1412255906000" Last-Modified: Thu, 02 Oct 2014 13:18:26 GMT Content-Length: 2545 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/gif Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 ff ff ff 71 71 71 e3 e3 e3 fb fb fb ed ed ed d2 d2 d2 f1 f1 f1 bf bf bf e0 e0 e0 c7 c7 c7 e8 e8 e8 ce ce ce db db db f7 f7 f7 b2 b2 b2 bb bb bb d7 d7 d7 aa aa aa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a 90 97 1a 54 4a 82 83 2a 02 05 09 09 05 02 83 0d 74 06 0d 86 88 8a 8c 8e 81 84 97 03 7e 97 22 06 0c 05 64 73 5d 9a 0a 05 05 0c 9a 29 74 96 06 a5 2d 22 02 96 00 69 3b 48 3e b3 6e a7 51 67 5d 5f 2a 04 0c 8b 00 0a ae 52 b1 33 0c 0c 81 02 c1 47 49 3f 0d 0c ce cb b4 a8 76 24 c3 bd 9b 06 6a 33 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b0 20 20 8e 24 c0 30 65 5a 0e 04 79 1c a4 30 a8 a3 71 20 a3 e3 8c 50 a4 d0 a3 57 0b a0 13 29 22 3b a0 08 71 58 88 5e cf 08 44 35 30 90 12 87 86 09 d5 88 3c 48 33 11 21 b1 10 88 06 05 6b 2d 11 6e 10 08 61 80 20 91 28 c4 69 86 b7 96 64 80 24 50 40 79 06 77 60 84 4a 87 88 23 0a 0c 05 05 0c 3f 87 0d 79 04 06 0d 8b 8d 8f 88 92 6f 95 89 9e 67 86 9e 0d 02 0c 66 81 94 84 04 27 38 87 93 7b 00 06 27 43 00 70 60 6a 00 6e b5 22 af 00 0a 32 b8 7b 94 60 78 02 90 06 6a 79 bc 34 02 02 c1 43 2c b3 34 a3 b7 6f 23 6e a1 24 bc c7 c3 9f c0 87 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b8 20 20 8e 24 80 20 65 5a 0e 04 99 24 a4 32 a8 a3 91 08 e3 71 8c 8c d3 d2 a2 45 c2 20 d2 89 08 8e 07 70 24 48 40 44 2f a8 83 a1 1a 10 47 85 44 c3 84 6a 38 76 23 99 c8 50 28 28 44 03 c6 b6 b6 98 01 20 8e 08 4e a4 28 33 dc b4 c1 23 12 79 92 0c 0c 05 28 40 09 11 07 67 55 78 2a 0d 6b 4b 8e 29 04 08 0c 0c 08 3f 4b 0d 06 04 04 06 0d 91 93 95 8f 98 9a 9c 8f a5 24 03 8a a6 22 0d 0a 02 96 2a 99 06 a9 06 02 02 88 4b 99 04 8d 0d b5 57 00 b2 a7 be 9d 04 78 8d bf 3f 8c 47 be 00 a9 23 9d 57 06 d0 ba 8f 9a 6e 9a 68 d7 4b 2c 8d d9 00 9d cd 2b 7f cb e0 97 c6 2a 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ac 20 20 8e 24 20 08 65 5a 0e 06 59 14 24 31 a8 a3 51 28 63 92 8c c8 d1 d2 a2 d7 4f 27 22 1c 0e c0 91 a2 c0 08 c2 00 8b 03 82 d6 20 31 0a b3 13 a0 71 d8 8d 64 22 03 83 41 10 0d 10 d5 1a 56 c4 78 38 70 c5 f1 34 39 38 38 1c 4d 52 43 c0 40 01 17 0e 09 65 2a 03 33 40 0d 69 49 8a 29 06 0a 27 0a 3f 49 10 0f 11 11 0f 10 8d 8f 91 40 93 95 97 8b Data Ascii: GIF89aqqq!NETSCAPE2.0!Created with ajaxload.info!, $AeZ<Q46<AHa:ID0Fa\xG3!O:-RjTJt~"ds])t-"i;H>nQg]_R3GI?v$j3!!, $0eZy0q PW)";qX^D50<H3!k-na (id$P@yw`J#?yogf'8{'Cp`jn"2{`xjy4C,4o#n$!!, $ eZ$2qE p$H@D/GDj8v#P((D N(3#y(@gUxkK)?K$"KWx?G#WnhK,+!!, $ eZY$1Q(cO'" 1qd"AVx8p4988MRC@e3@iI)'?I@
Apr 26, 2024 15:14:01.477925062 CEST	1289	IN	Data Raw: a0 a1 8b 2c 04 9b 8c a5 86 23 0d 04 a5 8b 06 ac 89 03 b0 35 a9 00 2c aa ac a9 b5 af 22 88 45 9b b5 7a ad 00 06 3f af 89 40 b9 45 83 b2 83 40 b2 89 ac b8 c1 29 bb c0 a2 bd c8 2a 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b5 20 Data Ascii: ,#5,"Ez?@E@)!!, $(e$CE1;('2$!DS%!)e[TE50p F{V8,%`3gIw3h")q4)#g#S$"$>%
Apr 26, 2024 15:14:01.477948904 CEST	369	IN	Data Raw: 10 b1 0c e0 31 9c 88 96 f3 89 76 2f 80 4b 64 a8 a9 06 8a 56 f1 74 4b 0e 47 82 88 03 32 32 f4 00 03 eb 8e 37 82 44 22 8f af aa e9 24 29 0e 91 84 b1 e9 95 51 8d f8 bc 8a 71 70 38 0e 0c 79 0d 6c 06 0d 7c 7e 80 82 84 36 7a 8d 77 32 03 6a 23 04 0b 07 Data Ascii: 1v/KdVtKG227D"$)Qqp8yl\|~6zw2j#F"%VC]6a$Q:2\EFI&x"F4$]#x!!, $4eZiJ16<B?$rTHzDP'"l(15y8
Apr 26, 2024 15:14:06.178586006 CEST	396	OUT	GET /lingos/nd/fresco/javascript/jsutility.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.426717997 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"74074-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 16673 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6d 7b db 36 b2 e8 67 ef f3 f4 3f 30 dc 76 49 ad 65 59 b2 93 b4 89 2c b7 b2 2d 37 be c7 2f b9 b6 d3 36 6b 7b f5 50 22 6d 33 91 48 1d 92 b2 ad a6 b9 bf fd ce 0c 5e 08 90 a0 24 27 69 77 cf d9 6a b7 31 49 0c 06 83 c1 60 30 18 0c 80 eb 69 34 cc c2 38 b2 ae c3 c8 3f 19 bc 73 a3 ba e5 d7 ac 0f 5f fd c5 82 df 9d 97 58 93 ba 15 d6 ad 87 f6 57 7f 61 df c2 6b cb 7d e2 d7 d8 0b fe 7c ab 63 f9 f1 70 3a 0e a2 4c 83 72 27 90 12 35 00 71 f0 70 72 ed 3a df 3b b5 9a b5 6d 35 ad bf fd cd 9a 78 09 80 37 ae 13 6f 1c a4 8d 51 10 dd 64 b7 b2 58 81 55 03 ba 88 1a e9 74 90 66 49 18 dd 00 e6 55 ab 55 bb 6a 28 e5 8a 8c 11 15 9a 83 36 eb d6 a4 06 e9 2b 1f b5 1a b8 0f 48 f6 45 74 55 43 72 fc 86 37 1a 29 75 a2 44 fc 06 00 b2 4e d7 71 62 b9 21 a4 34 db d6 93 07 cc 16 5a 5b 00 06 df c7 a2 0e 6d 2b 5c 5d 2d 21 22 88 8b f0 6a 3e 36 bf 31 f2 66 41 92 e6 98 d9 fb 1c d4 6a ab 71 68 28 46 b2 a5 a6 b7 1a 2b 85 a7 35 6e 82 ac 37 0a f0 71 67 76 e0 17 69 36 43 b9 51 8e 32 09 b2 69 12 91 64 10 6b af 85 28 f9 67 fd 34 c8 ce 82 51 30 cc 02 ff 30 4c 33 77 7f bf 6e a5 c1 08 ff 04 87 3f ed 69 02 06 ef 50 e0 34 0a d2 a1 37 09 5c 4a 27 68 cc 89 8d 19 dc 5b dd 24 f1 66 6e 4d 67 5e ca 98 97 02 ab f6 f7 25 93 56 57 53 a5 2e 1c cd 45 7a 65 01 34 80 c5 13 a4 31 85 0f 8d 3b 6f 34 0d 08 e5 0a d1 c6 3e 00 18 cf d4 78 17 87 91 8b e4 54 54 71 f7 d6 8b 6e 58 0d 53 77 78 db 4d ea 96 87 55 f4 97 ae 67 65 85 10 9b 56 25 b5 6f 20 b6 3b 80 45 20 a8 48 dd ba 3b 84 b7 3b 0e 4f e5 e3 07 5f 54 49 26 dc 1d c8 02 85 50 f8 79 bd 01 85 c2 39 ea 84 0a 53 1c 47 cb 1b 8c d2 40 47 a0 f7 39 20 09 bb 28 62 75 ef e0 11 6b 3b 07 bb 09 0b 43 c1 aa 53 5b 54 b8 d0 32 c8 e5 55 4b 94 68 3d e9 58 6b 2d 8d 79 c4 c0 03 ad 48 73 de f6 e3 a8 c5 3a 1f d4 20 af b1 2a 07 88 b8 50 9f 95 5c 25 2d e4 28 35 e9 1a a2 58 93 28 88 b7 9c e6 c7 f2 b6 c9 a5 44 a0 34 f0 b7 c0 33 a4 cc 2b 48 14 52 d0 2c 94 8c 3f 4f 29 fd ae c0 47 c4 3d 3f 47 fe 4c 0d 81 d5 53 70 7c 64 8f 1f 17 6b 1d d6 3d 49 ff 64 31 76 c9 fd 7d ad 43 72 85 34 bc 8d b8 7a 7a 84 c2 41 84 8b 55 4e 87 c1 19 75 8e e0 a9 4b 64 28 ba dc 49 79 1d 1c a8 39 90 4c 42 1c 4d 61 7c 52 9b 64 8e c6 72 ea 8e 10 5e 6d cc 73 a9 a6 6a 49 9e 5f 2e 24 2f 82 c0 f3 fe 3f 24 76 3a 05 fd 5f 52 8d d0 08 27 54 5f f7 1a 7a 44 dd ca ea 38 8e 7b e3 d4 c4 7b 23 d3 eb c4 b5 02 47 90 ce 6b 7d 3c 63 50 9c 6c 85 35 92 30 8d 03 d4 82 54 74 45 2b a6 30 ba aa 1c 16 45 94 9a 8f 69 ca 42 f7 d0 0a e5 05 b3 fe bd 82 85 32 1c bc 9e 9c 3f c0 99 3b d2 03 e1 b5 cb 58 c4 2d 23 78 6a 64 71 Data Ascii: }m{6g?0vIeY,-7/6k{P"m3H^$'iwj1I`0i48?s_XWak}\|cp:Lr'5qpr:;m5x7oQdXUtfIUUj(6+HEtUCr7)uDNqb!4Z[m+\]-!"j>61fAjqh(F+5n7qgvi6CQ2idk(g4Q00L3wn?iP47\J'h[$fnMg^%VWS.Eze41;o4>xTTqnXSwxMUgeV%o ;E H;;O_TI&Py9SG@G9 (buk;CS[T2UKh=Xk-yHs: *P\%-(5X(D43+HR,?O)G=?GLSp\|dk=Id1v}Cr4zzAUNuKd(Iy9LBMa\|Rdr^msjI_.$/?$v:_R'T_zD8{{#Gk}<cPl50TtE+0EiB2?;X-#xjdq
Apr 26, 2024 15:14:06.426789999 CEST	1289	IN	Data Raw: 3c ca c2 c9 79 f0 90 61 51 2b 2b 0c 43 23 0b b3 51 c0 6c a3 02 58 7b 65 85 15 89 a5 6b 84 2b d5 44 99 64 9f 39 a9 4b 74 9b 6b e3 f8 07 b2 c3 eb e1 0d a1 26 11 d8 68 08 9c dd 86 e9 3e 98 3b 85 01 90 b4 c7 30 cb 8d 41 6c 52 93 7a 46 66 5d 27 d4 fc Data Ascii: <yaQ++C#QlX{ek+Dd9Ktk&h>;0AlRzFf]'pupIRcGFY3YW?V~<B.WxTgA"vh<tEVVj9+_Z;z)ySk$8\h577A~feo&o6x
Apr 26, 2024 15:14:06.427059889 CEST	1289	IN	Data Raw: 22 b1 00 b1 8d 08 14 0a 75 ef a3 49 38 0c fe cb a2 27 f6 27 6f 14 fa 07 7b 67 13 6f 18 f0 ee 9d d6 2d 68 a7 f8 9e be fd 71 3e da 27 2e ba 69 b7 51 4a a4 5f 76 0b de 7e c5 28 32 90 21 91 da d5 52 ff 21 52 87 24 60 7d 47 7d 5b d3 de 1a da db 0f da Data Ascii: "uI8''o{go-hq>'.iQJ_v~(2!R!R$`}G}[eQ.89\caZ^@;Zv3VIh~zM7A~hrF[ YjNeOy{"k0PYC#>K F'I0=`&2oz4{c&EeG9Q!P.d\
Apr 26, 2024 15:14:06.427211046 CEST	1289	IN	Data Raw: 3e 4a a3 eb 63 bb a0 8d 0e 40 34 30 e4 fd 0f 8d b3 dd 62 9e 4c e6 5a dd 66 8e 4c 5d 39 7f be 1b 93 57 ec 20 3a c5 b9 a5 3b 0e a3 ba 35 f6 60 fe 9e 96 ad 14 dc 69 93 06 90 03 d8 80 7e 56 f9 0a b9 6a 4c 89 aa 10 5b 2a 84 f7 a0 f9 60 15 66 94 69 d4 Data Ascii: >Jc@40bLZfL]9W :;5`i~VjL[`fiPFS]wM?m9bx7uTghcjtJnp)uV69h(_hhJNTSZQDph>dZ>.k+ltE.,{9m#saRTk
Apr 26, 2024 15:14:06.427223921 CEST	1289	IN	Data Raw: b2 5b 30 17 f5 bc c8 97 35 44 e0 40 ba 97 0e 83 08 5d 29 1a 96 32 fb c4 9a c2 c8 1b e0 90 4e e2 48 c2 1b f8 fd 1c c7 15 1f d4 5c d1 52 d2 3a c9 bd cc 0b 79 8f 35 fa 2c ce 63 e3 3d 86 f7 73 f9 cb 24 e1 33 38 0c 63 c9 e7 b3 58 41 b2 88 c7 7f b2 ee Data Ascii: [05D@])2NH\R:y5,c=s$38cXAXOr-`4%CbfApM>HewDMGA_qczX$kk5cNM&eI1il'GZRb#%j^02
Apr 26, 2024 15:14:06.427449942 CEST	1289	IN	Data Raw: 57 d5 f5 a5 50 de ba 0b 9c 29 1e 71 78 65 89 76 84 69 1b 27 33 8e 68 39 1f 8d 5b 4d af a0 37 a1 1c ed 04 14 82 c9 35 e3 f3 5a 37 cc 82 b1 a4 53 12 37 f6 c2 88 b6 5d 1c 9d fd b8 73 f2 0b db 59 d2 41 d8 d2 48 06 16 f2 38 e4 47 63 b3 8d f5 61 30 e2 Data Ascii: WP)qxevi'3h9[M75Z7S7]sYAH8Gca0]IIglZ^hO{nLf07aMZR*!:yjwwz5N5ST.qX6t95/Uqg!]/c5oHZ\b<U"i#q
Apr 26, 2024 15:14:06.427589893 CEST	1289	IN	Data Raw: 66 ab 6e 6d 7c 57 b7 f0 ef 66 b3 f0 b7 f4 ed 4a 47 34 12 98 04 a2 17 8f 43 a4 f4 f0 c1 34 1c f9 7b de cc 9d d5 ad b1 72 26 68 de a9 33 e1 d9 cd b2 d2 d6 02 1f 32 a6 35 e7 0a 6d df 97 d6 d6 fa f9 de f6 16 fe c7 d6 6f a8 c7 77 52 00 da 76 72 7c 63 Data Ascii: fnm\|WfJG4C4{r&h325mowRvr\|c\|{49YXOfQwmx*01#~</+3h{=o(O8Cip#-25M)y-Z cXnoV+\o720TxeobjOc
Apr 26, 2024 15:14:06.427788973 CEST	1289	IN	Data Raw: f9 37 e7 e7 7f ba 28 ff 53 53 fe 7d 71 90 a5 21 2b 4b d3 4f 10 51 25 c0 de f2 c3 3b 2e 00 0e f6 ab 35 32 4a 9d 6d f5 fb 4d 12 4f 27 f0 89 d6 60 b6 ed 7c 64 ca 15 33 1b fe 1a 88 81 14 b2 bd b5 ce a0 f5 a5 19 9a ce c6 11 bb 71 aa 73 69 0b 25 e3 68 Data Ascii: 7(SS}q!+KOQ%;.52JmMO'`\|d3qsi%hHM(\|pKm.t.g< L+@ngF]S!m;#M~FsoZ;v.;UWPOQfMGozpFXY#czSX2X^sD
Apr 26, 2024 15:14:06.427802086 CEST	1289	IN	Data Raw: f4 ea b4 b7 0f 96 93 53 6d f1 42 96 98 1d 13 d2 99 07 43 7e b3 eb d2 11 58 f9 38 5c 70 9c f1 a3 bd 72 c1 63 f1 82 6c 99 95 da 80 58 d0 9e 57 e6 d2 25 3e 2d 96 48 3d fc cb e1 df 34 d6 88 db 53 5f ae 98 0d 73 31 c2 c2 81 52 ac 2f 57 0c 1a fd 61 3c Data Ascii: SmBC~X8\prclXW%>-H=4S_s1R/Wa<M@m\|:'+xgdljsygU2'$btK3_8/+J.O-EbfRdq#{'[^0`jTqY9oC>}Rq
Apr 26, 2024 15:14:06.677568913 CEST	418	OUT	GET /lingos/nd/fresco/javascript/jQuery/jquery-migrate-3.3.0.min.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.924963951 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"11015-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 4024 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 5a 6d 73 db 36 12 fe 7e bf 82 46 33 36 19 21 94 9d dc 27 29 8c c6 8d ed 4b 3b 75 5e ec f4 7a 33 b2 ea a1 45 48 82 4d 11 0c 00 da 56 4d dd 6f bf 5d 80 af 12 e5 64 7a 5f 44 10 04 16 8b c5 ee b3 2f 50 ff e5 9e 73 fb 25 63 72 e5 9c f3 b9 0c 35 73 ee df f8 6f fc 43 27 77 dc a9 e7 7c 4a 59 f2 eb a5 73 26 b2 24 0a 35 17 89 13 26 91 23 f4 82 49 67 2a 12 2d f9 4d a6 85 54 30 fc f6 1b 92 f1 85 9c f7 63 3e 65 89 62 ce cb fe 3f 08 4c 64 33 9e b0 88 04 81 5e a5 4c cc 8a 05 fd a5 5d f0 3c d3 6c 7f df dd ee 0c f6 0e 3d 3a cb 92 29 ae eb 6a ef 89 64 40 53 c1 9a 53 4d 86 a4 fc 52 d3 b5 0b ed ef db a7 1f 2e a3 91 6d ba 63 62 b9 23 93 9a 20 f3 9e 24 d3 99 4c 1c ed 32 fa c0 93 48 3c 78 6b 6f 40 c4 cd 2d 83 15 2a b2 4b 11 65 31 90 b5 4f 9f 3d a6 42 6a 35 6a bf 06 da 95 ec 5b c6 25 73 cb b5 bc 92 e8 40 17 bb ab 56 71 2b 2e 14 4d 36 36 56 7e 72 58 83 c5 c3 b7 41 cd 38 05 59 dc 87 d2 91 34 09 fa 7f ba 57 51 cf bb f2 9b 8f 3e e5 41 02 9c b1 29 90 c8 f3 f1 84 8a f2 5d 9b f7 e1 4c 48 57 06 47 43 f9 36 78 33 94 bd 9e f7 c4 67 6e 8f 8f e5 e4 5d 4f c0 af 57 ac 7b 34 2c fb df 36 fb 5f 1d ad 4b c6 d6 ae f2 67 89 6f f7 4c 99 b7 56 e5 19 fe 9b 49 05 fc 06 c4 28 14 a1 89 0f 1a a3 04 8a b2 6a fa b1 98 c3 e1 ab fd 7d 90 1b 8c 82 71 c0 60 eb b3 4b 7e fd 72 fe cb bf 2e 8e bf 9e 0e 4a 5d 35 23 7b ce c5 e9 97 df 7f b9 38 3d 01 51 57 ab fe 11 ca 84 27 73 b5 b1 48 8b 4a a9 ea 69 9c cd 79 e2 c4 22 8c 58 e4 2c b3 58 f3 34 66 8e e6 4b a6 80 e6 f7 09 70 e5 f0 44 e9 30 8e 41 bf 7b ae 6a aa ef 88 90 01 71 1e b8 5e c0 02 73 58 67 ee 84 70 80 f7 8c 78 3d 42 9d 7b 2b 1d 87 f4 36 05 e6 79 43 73 ba c1 d3 ba 56 86 0c 95 01 bb 75 50 b1 35 ac 66 9e b0 28 4b c1 ea 5a fb 97 63 36 c9 73 17 1f 60 4a db 12 f2 d3 4c 2d 80 2c d5 fb fb da 7f 80 de fd fd 3d b5 61 96 f6 43 6b f3 a4 c7 1a f2 fe 2a c3 29 43 02 ba d5 70 3d cf 5b 57 dc a3 85 69 2a 51 d7 3f 19 eb f2 ad 61 7e 96 22 65 52 af cc e7 27 d8 d6 8c cf 33 19 de c4 6c 00 1c b3 24 5b b2 ea 6d ce f4 a0 b2 81 ca 30 32 37 f1 a8 5c 53 d5 fc 0a a2 b2 fd 01 5b af 1b 6c f0 9a 0d 36 d6 93 60 17 39 3f 4c d3 78 e5 ea 05 57 34 94 73 e0 22 d1 ca 5b af 9f 93 77 a7 88 03 30 bd 7b c1 23 e7 30 08 82 4d 91 b9 ed 0e 03 77 55 d7 05 83 1d b5 18 04 75 e8 38 c3 98 25 73 bd 08 0e d7 94 fc 1c 4e ef de 8b 65 1a 22 76 81 96 44 62 6a 38 07 75 c1 ce 73 11 c1 a2 19 c0 93 b5 21 d0 dd 44 68 c7 7e e4 20 64 ab ab 5f 00 c3 ee 94 83 a3 89 55 44 41 43 5c 7b 1a 18 43 e7 09 d7 34 c2 36 60 19 8d 83 fe d5 d8 bd 52 2f c7 af ae 1e 26 3d 68 78 ee f8 bf f9 9f 2f 5e 4e Data Ascii: Zms6~F36!')K;u^z3EHMVMo]dz_D/Ps%cr5soC'w\|JYs&$5&#Ig-MT0c>eb?Ld3^L]<l=:)jd@SSMR.mcb# $L2H<xko@-Ke1O=Bj5j[%s@Vq+.M66V~rXA8Y4WQ>A)]LHWGC6x3gn]OW{4,6_KgoLVI(j}q`K~r.J]5#{8=QW'sHJiy"X,X4fKpD0A{jq^sXgpx=B{+6yCsVuP5f(KZc6s`JL-,=aCk)Cp=[WiQ?a~"eR'3l$[m027\S[l6`9?LxW4s"[w0{#0MwUu8%sNe"vDbj8us!Dh~ d_UDAC\{C46`R/&=hx/^N
Apr 26, 2024 15:14:06.928818941 CEST	421	OUT	GET /lingos/nd/fresco/javascript/alternaterows/jquery.alternaterows.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.171164989 CEST	1051	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"1401-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 593 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 53 5d 8b db 30 10 7c 4e 20 ff 61 6b 52 90 7b 3d 5f 92 b7 bb 10 ca 91 42 29 94 7b 38 fa d2 47 9d b4 8e 05 b2 14 24 39 21 94 fc f7 ae 64 63 3b d7 4b 3f 20 8e 6d 69 66 67 66 b5 be fb 30 9b 42 ba 60 6b f7 27 a7 76 55 00 26 72 58 de df df df ae 16 cb 15 3c 61 f8 ac 6a 34 5e 59 e3 e1 5b 90 45 4f 79 d4 1a 12 c5 83 43 8f ee 80 a3 cd ef 95 f2 e0 6d 19 8e dc 21 d0 73 a8 10 84 35 a5 92 68 82 e2 1a b8 91 b0 77 76 ef 14 06 ee 4e a0 4c 69 5d cd 03 09 81 2d df 10 06 96 6d c7 05 be 0e 84 2c 2f e0 87 6d 92 b2 af 38 19 33 36 80 54 5e 68 eb 11 7c 23 2a b8 c6 4d 46 5a 52 43 58 15 c0 1a 1d ed 00 17 c2 3a c9 8d 40 38 aa 50 a5 08 01 5d ed a3 bf f8 a2 95 20 83 98 64 f9 ce 21 92 df 00 27 db 00 dd d1 a1 a4 2a c1 b6 e4 8b 3c a9 4f 77 b3 e9 6c ca ca c6 88 68 83 c1 1c 72 f8 39 9b 4e e8 37 2f 4a 53 70 4d 35 0c 0f f8 6c 8f 1e 36 d0 23 9d 3d 7e 71 b6 d9 3f 86 e0 5a ca e4 c0 1d b8 16 16 a8 f3 85 f2 2c 0b fc 45 63 96 c3 a7 76 49 54 4a 4b 87 86 36 5e ac 3c 51 cb 46 2b 8e 70 0f af 71 52 1d b2 7c 1d cb ab f2 52 34 69 26 d1 bd c3 43 5a 27 e5 68 a0 28 95 f3 81 e5 05 27 dc 25 69 dd 93 6a 74 3b 94 14 eb a9 a9 89 b7 68 77 12 1d b9 a8 d8 38 29 41 3e d2 a1 60 dd 25 ed b3 12 71 ce d2 c6 7a 58 df 0d 56 ae 3a 88 69 5a dc bb cd 66 08 d0 85 9a 4c c6 ee 6e 6e 3a ce 64 1c 34 b1 bb 8d f3 20 2e 34 f7 de f0 1a 09 c2 2e 32 be 87 15 6c 48 6c 11 4f 23 23 4f cb 8c da 1d 1f 56 59 57 27 3a 76 58 db 03 6e 63 19 96 50 90 10 d4 4c 29 db d5 5e a2 cb 72 6e ef 67 d4 1e 87 43 71 7f ef 6c df cd 39 8b a7 9e ff 83 76 77 1a 7f 0c 93 0f 69 46 dd 23 97 90 6c d2 df 79 1d c7 fe d5 84 6f ad be 98 f0 d1 54 0b d4 ba 1f eb 52 19 d9 cd 2f 04 07 41 76 82 09 74 35 42 82 bc cd 7f 30 a1 ba 4d 13 cf ac 94 f9 38 6e f6 3f 64 3c a0 f9 8d bd 6c d9 31 31 7d d4 e7 3c 7d e2 29 fe 2f 22 85 bd 3b 79 05 00 00 Data Ascii: S]0\|N akR{=_B){8G$9!dc;K? mifgf0B`k'vU&rX<aj4^Y[EOyCm!s5hwvNLi]-m,/m836T^h\|#MFZRCX:@8P] d!'<Owlhr9N7/JSpM5l6#=~q?Z,EcvITJK6^<QF+pqR\|R4i&CZ'h('%ijt;hw8)A>`%qzXV:iZfLnn:d4 .4.2lHlO##OVYW':vXncPL)^rngCql9vwiF#lyoTR/Avt5B0M8n?d<l11}<})/";y
Apr 26, 2024 15:14:07.173397064 CEST	415	OUT	GET /lingos/nd/fresco/javascript/messagebar/jquery.messagebar.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.416651964 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"5350-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 1695 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 58 59 6f 1b 37 10 7e 96 81 fc 87 c9 d6 e8 ae aa d3 29 fa 10 5b 32 e0 23 40 02 d8 29 5a c7 2d 52 d7 28 a8 5d 4a a2 b3 5a aa 24 d7 b6 92 e8 bf 77 78 ed a1 95 dd c6 08 5a f4 c1 5a 8b 9c e3 9b e1 7c c3 59 0d be 7b b6 03 e6 0f 4e f8 72 25 d8 6c ae 20 8a db b0 f7 f2 e5 cb de 8b e1 de 0b 78 4b d5 29 5b d0 4c 32 9e 49 38 53 49 bf 50 39 4a 53 30 2a 12 04 95 54 dc d2 ca e6 bb 39 93 20 f9 54 dd 11 41 01 ff 57 73 0a 31 cf a6 2c a1 99 62 24 05 92 25 b0 14 7c 29 18 55 44 ac 80 65 53 2e 16 44 a1 23 e0 53 63 a4 e9 1c a2 e0 a4 6a e4 4d a9 14 b4 fb 00 ef 79 0e 72 4e 10 59 c6 95 b1 91 30 19 a7 5c 52 90 79 3c 87 87 94 0d 1a ab 98 a3 2c 53 c0 b3 54 63 32 36 48 1c 73 91 90 2c a6 70 c7 d4 dc c4 a2 a8 58 48 04 6a be a4 2c 46 94 14 c8 4c 50 8a 80 15 ac 10 08 3e a9 a0 09 5a 51 dc d8 31 ca b5 a0 4c c2 40 7f 0c 9e ed 44 d3 3c 8b 35 9a 68 b7 0d 9f 9e ed 3c db 69 dd 12 01 0b 2a 25 99 d1 77 a8 24 0e 36 57 2f cf 60 0c bb 51 38 ca d3 c3 d1 00 3f c2 b6 95 f1 b6 30 2a 7e 77 6e 85 23 a7 f4 e3 e4 a6 8b 67 72 ee 4d fc c2 24 9b a4 b4 0b 92 2a c5 b2 99 34 ee 5b ad c1 00 8e 92 04 08 d8 0c 32 3c bf 2e 66 8a 61 ce a8 cb 18 bf 33 09 70 86 61 82 c8 88 b2 09 e2 4b 97 1e 67 4a c6 98 9c 4c 7f d1 f8 27 2a 3b a5 32 46 f4 c7 97 6f 4f cf 5e 5d 85 93 5c 29 9e f5 4f b4 af f0 fa 40 0b ee 56 10 b7 fb 64 b9 a4 59 12 05 23 02 8a a9 94 8e c3 a0 e3 cc 74 82 f0 70 24 97 24 43 a8 44 ca 71 98 51 95 f4 34 60 83 ba 27 e8 82 df 52 94 19 68 a1 c3 8a de 68 40 0e 83 f6 16 6f 3a b6 c8 6e b0 29 44 cf 9b f9 72 59 da 44 69 f3 13 d9 bd 96 4e c3 3e 84 bd f1 de 30 34 2b eb 2e 7c 3f 1c 76 21 cb d3 d4 9a 5f 37 9d c7 52 46 c1 92 4b 66 2a bb 0b c1 94 dd d3 24 70 67 ab b3 79 cc 30 ff 31 16 de 07 a0 b7 ba e2 14 77 c7 b4 71 1e 4d e3 53 a6 b3 48 90 30 46 bf 2c 3b 1f d0 1c 29 e2 4b a6 a6 5a 56 48 3f 46 ae 4c 48 fc c1 85 50 41 f6 1a 2b 23 a5 12 16 5c 53 c9 90 40 6a 74 52 a7 82 e4 8a 6b ca c5 78 84 58 cf f0 ad ee 1d c8 7f e5 be df cd 6d 89 a0 1d ab 9f 52 72 4b 65 33 08 b3 6b 8c 37 f1 c7 a8 24 ce 2b b4 a9 47 e1 21 5b 1b c6 41 d3 06 06 fa b0 85 0a 53 1a e1 5f 50 65 bb 9d 0d 08 5b 4c f5 44 b4 d0 97 98 5e 6f 90 79 43 b5 4a e8 0d f2 36 93 60 b1 56 db 09 b2 0f b5 f4 bf 3c 57 5f a5 0e 2a 3b 49 2e 4c 6f dd 16 c7 16 70 d6 a7 a6 5a 15 61 ed 48 3d d0 9a 40 41 a1 0d 17 55 f0 d5 34 15 80 1f 4f d3 63 a4 76 9c ee 78 4e 7b 4a 37 12 f8 37 a4 26 13 c9 d3 5c d1 a0 52 45 9b 4a 74 b1 54 ab fa d1 5d 9e f5 6d 3f ab b4 27 b5 5a 52 ec b6 3e 38 18 8f b1 67 38 38 41 91 44 b7 1b 3d 98 34 93 0d bc 24 15 32 eb 28 4b b0 96 4f 74 Data Ascii: XYo7~)[2#@)Z-R(]JZ$wxZZ\|Y{Nr%l xK)[L2I8SIP9JS0T9 TAWs1,b$%\|)UDeS.D#ScjMyrNY0\Ry<,STc26Hs,pXHj,FLP>ZQ1L@D<5h<i%w$6W/`Q8?0~wn#grM$4[2<.fa3paKgJL';2FoO^]\)O@VdY#tp$$CDqQ4`'Rhh@o:n)DrYDiN>04+.\|?v!_7RFKf$pgy01wqMSH0F,;)KZVH?FLHPA+#\S@jtRkxXmRrKe3k7$+G![AS_Pe[LD^oyCJ6`V<W_*;I.LopZaH=@AU4OcvxN{J77&\REJtT]m?'ZR>8g88AD=4$2(KOt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49717	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:02.547426939 CEST	363	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/loader.gif HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:02.793432951 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:02 GMT Server: Apache Accept-Ranges: bytes ETag: W/"2545-1412255906000" Last-Modified: Thu, 02 Oct 2014 13:18:26 GMT Content-Length: 2545 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/gif Data Raw: 47 49 46 38 39 61 18 00 18 00 f4 00 00 ff ff ff 71 71 71 e3 e3 e3 fb fb fb ed ed ed d2 d2 d2 f1 f1 f1 bf bf bf e0 e0 e0 c7 c7 c7 e8 e8 e8 ce ce ce db db db f7 f7 f7 b2 b2 b2 bb bb bb d7 d7 d7 aa aa aa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ae 20 20 8e 24 00 41 65 5a 0e 0a f9 3c e4 a0 92 84 c3 8c 51 34 36 84 3c 8b 0f 07 41 94 13 0d 08 c3 9f 88 e1 48 00 61 00 03 a1 a1 3a 92 0e 0e ea 49 44 30 c4 46 84 c3 01 61 5c 78 47 83 33 80 d7 1b 21 c4 09 df 4f 3a 2d 19 16 87 82 52 6a 90 97 1a 54 4a 82 83 2a 02 05 09 09 05 02 83 0d 74 06 0d 86 88 8a 8c 8e 81 84 97 03 7e 97 22 06 0c 05 64 73 5d 9a 0a 05 05 0c 9a 29 74 96 06 a5 2d 22 02 96 00 69 3b 48 3e b3 6e a7 51 67 5d 5f 2a 04 0c 8b 00 0a ae 52 b1 33 0c 0c 81 02 c1 47 49 3f 0d 0c ce cb b4 a8 76 24 c3 bd 9b 06 6a 33 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b0 20 20 8e 24 c0 30 65 5a 0e 04 79 1c a4 30 a8 a3 71 20 a3 e3 8c 50 a4 d0 a3 57 0b a0 13 29 22 3b a0 08 71 58 88 5e cf 08 44 35 30 90 12 87 86 09 d5 88 3c 48 33 11 21 b1 10 88 06 05 6b 2d 11 6e 10 08 61 80 20 91 28 c4 69 86 b7 96 64 80 24 50 40 79 06 77 60 84 4a 87 88 23 0a 0c 05 05 0c 3f 87 0d 79 04 06 0d 8b 8d 8f 88 92 6f 95 89 9e 67 86 9e 0d 02 0c 66 81 94 84 04 27 38 87 93 7b 00 06 27 43 00 70 60 6a 00 6e b5 22 af 00 0a 32 b8 7b 94 60 78 02 90 06 6a 79 bc 34 02 02 c1 43 2c b3 34 a3 b7 6f 23 6e a1 24 bc c7 c3 9f c0 87 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b8 20 20 8e 24 80 20 65 5a 0e 04 99 24 a4 32 a8 a3 91 08 e3 71 8c 8c d3 d2 a2 45 c2 20 d2 89 08 8e 07 70 24 48 40 44 2f a8 83 a1 1a 10 47 85 44 c3 84 6a 38 76 23 99 c8 50 28 28 44 03 c6 b6 b6 98 01 20 8e 08 4e a4 28 33 dc b4 c1 23 12 79 92 0c 0c 05 28 40 09 11 07 67 55 78 2a 0d 6b 4b 8e 29 04 08 0c 0c 08 3f 4b 0d 06 04 04 06 0d 91 93 95 8f 98 9a 9c 8f a5 24 03 8a a6 22 0d 0a 02 96 2a 99 06 a9 06 02 02 88 4b 99 04 8d 0d b5 57 00 b2 a7 be 9d 04 78 8d bf 3f 8c 47 be 00 a9 23 9d 57 06 d0 ba 8f 9a 6e 9a 68 d7 4b 2c 8d d9 00 9d cd 2b 7f cb e0 97 c6 2a 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 ac 20 20 8e 24 20 08 65 5a 0e 06 59 14 24 31 a8 a3 51 28 63 92 8c c8 d1 d2 a2 d7 4f 27 22 1c 0e c0 91 a2 c0 08 c2 00 8b 03 82 d6 20 31 0a b3 13 a0 71 d8 8d 64 22 03 83 41 10 0d 10 d5 1a 56 c4 78 38 70 c5 f1 34 39 38 38 1c 4d 52 43 c0 40 01 17 0e 09 65 2a 03 33 40 0d 69 49 8a 29 06 0a 27 0a 3f 49 10 0f 11 11 0f 10 8d 8f 91 40 93 95 97 8b Data Ascii: GIF89aqqq!NETSCAPE2.0!Created with ajaxload.info!, $AeZ<Q46<AHa:ID0Fa\xG3!O:-RjTJt~"ds])t-"i;H>nQg]_R3GI?v$j3!!, $0eZy0q PW)";qX^D50<H3!k-na (id$P@yw`J#?yogf'8{'Cp`jn"2{`xjy4C,4o#n$!!, $ eZ$2qE p$H@D/GDj8v#P((D N(3#y(@gUxkK)?K$"KWx?G#WnhK,+!!, $ eZY$1Q(cO'" 1qd"AVx8p4988MRC@e3@iI)'?I@
Apr 26, 2024 15:14:02.793458939 CEST	1289	IN	Data Raw: a0 a1 8b 2c 04 9b 8c a5 86 23 0d 04 a5 8b 06 ac 89 03 b0 35 a9 00 2c aa ac a9 b5 af 22 88 45 9b b5 7a ad 00 06 3f af 89 40 b9 45 83 b2 83 40 b2 89 ac b8 c1 29 bb c0 a2 bd c8 2a 21 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 18 00 18 00 00 05 b5 20 Data Ascii: ,#5,"Ez?@E@)!!, $(e$CE1;('2$!DS%!)e[TE50p F{V8,%`3gIw3h")q4)#g#S$"$>%
Apr 26, 2024 15:14:02.793473959 CEST	369	IN	Data Raw: 10 b1 0c e0 31 9c 88 96 f3 89 76 2f 80 4b 64 a8 a9 06 8a 56 f1 74 4b 0e 47 82 88 03 32 32 f4 00 03 eb 8e 37 82 44 22 8f af aa e9 24 29 0e 91 84 b1 e9 95 51 8d f8 bc 8a 71 70 38 0e 0c 79 0d 6c 06 0d 7c 7e 80 82 84 36 7a 8d 77 32 03 6a 23 04 0b 07 Data Ascii: 1v/KdVtKG227D"$)Qqp8yl\|~6zw2j#F"%VC]6a$Q:2\EFI&x"F4$]#x!!, $4eZiJ16<B?$rTHzDP'"l(15y8
Apr 26, 2024 15:14:05.772031069 CEST	363	OUT	GET /lingos/nd/fresco/login/scripts/prettyphoto/images/prettyPhoto/light_rounded/sprite.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.015038013 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:05 GMT Server: Apache Accept-Ranges: bytes ETag: W/"4008-1412255906000" Last-Modified: Thu, 02 Oct 2014 13:18:26 GMT Content-Length: 4008 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 64 08 06 00 00 00 4a 1e e8 62 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0f 4a 49 44 41 54 78 da ec 5d 7d 8c 14 45 16 af 59 56 44 16 97 6f 70 5d 70 81 c3 c8 02 0a 82 68 00 91 25 28 c8 1d a0 46 41 2f d1 88 39 3f 12 22 89 77 5e e0 d4 c3 05 bd 9c 60 14 ff d0 7f 88 97 b0 5e 8e 84 c3 e3 8f 4b e0 3c 94 c0 62 f8 50 d0 8b 72 e0 02 2e 9f ba 59 3e 22 df ab 2b 02 7b ef 57 fb 6a af b6 ac 9e e9 ee e9 9e 99 9e e9 97 bc 4c 4f 77 d5 ab ea 7a bf 7a ef d5 eb 9a 9e 44 4b 4b 8b 88 29 a6 e2 c5 8b 17 8b 1b 6f bc d1 e9 fa 30 e2 c9 c4 63 89 6f 21 ae 08 a8 dd 12 fe 6c ca c4 4d 02 ec e0 2b 57 ae 88 8b 17 2f 16 fd f4 d3 4f 1d c0 97 2f 5f 4e 5c ba 74 a9 99 8b 1d a5 32 ff a5 32 db 89 37 bc f4 d2 4b bb 51 d5 94 b5 68 d1 a2 fc 04 82 3a f8 e1 87 1f da 4e 5e 73 cd 35 03 e8 63 0e 0d cc e3 34 28 03 30 80 8a 03 a6 92 4c 80 00 fd 26 85 03 04 82 00 20 08 00 6d e7 89 3b a3 5c 51 51 d1 10 70 22 91 98 d5 a1 43 87 23 4b 97 2e fd 2b 95 af 59 b8 70 e1 c1 82 b0 08 fa 97 6b af bd 16 03 56 45 87 cf d3 e7 74 0c 16 0d 8c 28 2e 2e c6 40 49 8e 12 a1 ff 00 40 73 73 b3 04 00 3e cd 7b c2 b1 6e 35 50 9e c0 51 41 e7 17 76 ec d8 71 34 01 e2 8d 05 0b 16 6c ca 77 20 b4 d3 2c 40 40 83 b1 84 06 4d 82 e0 aa ab ae 12 34 18 82 66 48 64 41 00 4b 77 fe fc 79 f1 fd f7 df 0b f3 9e 14 08 f0 09 c6 3d e2 1a ca 80 c8 72 fc 92 ea 10 16 96 4e 2a 18 8b c0 ee 00 96 e0 0e 35 63 40 21 b8 83 8c 80 00 fd fe f1 c7 1f 45 53 53 93 b4 04 fa 3d 29 ab a0 97 d7 49 95 65 eb 30 86 8e 9f 7f ed b5 d7 0e bf f0 c2 0b 87 0a c1 22 cc 81 3b 90 e8 28 2e 8e f4 4d 41 b1 88 03 60 0d 00 02 fd 9e 08 f0 d2 05 3a ad 96 ba 74 e9 22 cb e8 75 48 d6 af c8 82 cc 29 04 8b 30 8c 03 43 79 f3 6e 97 94 6a d6 61 c0 31 7b 60 6e 3b 75 ea 24 4d 2b be 83 ae be fa 6a 79 5e 37 d7 30 d3 a8 87 99 87 41 07 a3 0c 94 07 c5 81 21 1b 72 20 0f e5 54 90 a7 cf 58 5d b6 09 02 c8 07 43 0e ca e0 7c e7 ce 9d c5 c4 89 13 65 fd ad 5b b7 4a 97 a1 5b 06 80 60 fc f8 f1 b2 ec e6 cd 9b e5 7d c1 5d 40 1e 95 7b 7c c9 92 25 ef 53 df 76 e7 33 10 26 63 75 e0 a5 22 06 e7 dc b9 73 52 51 77 dd 75 97 fc 84 02 bf fe fa 6b 51 5f 5f 2f c6 8c 19 23 af 9f 38 71 42 0e 30 06 17 d7 cf 9c 39 23 6e bb ed 36 51 56 56 26 95 f0 d5 57 5f c9 3a dd ba 75 93 66 fc fa eb af 17 37 dd 74 93 04 47 63 63 a3 d8 bf 7f bf 04 c1 e0 c1 83 25 88 94 2f c7 0a e0 d8 b1 63 52 b9 36 80 a2 8e 02 a3 22 d4 01 08 7b f6 ec 29 15 be 65 cb 16 71 e1 c2 85 b6 40 19 e7 70 1f df 7d f7 9d 2c cb ab 09 29 8f fa 5f 41 80 c2 52 7a 77 3e bb 86 b1 b8 59 7d 76 a4 22 0c 68 af 5e bd c4 93 4f 3e 29 95 08 65 42 c6 43 0f 3d 24 4e 9d 3a 25 26 4f 9e 2c 2a 2b 2b db 4c 33 94 02 10 cc Data Ascii: PNGIHDRdJbtEXtSoftwareAdobe ImageReadyqe<JIDATx]}EYVDop]ph%(FA/9?"w^`^K<bPr.Y>"+{WjLOwzzDKK)o0co!lM+W/O/_N\t227KQh:N^s5c4(0L& m;\QQp"C#K.+YpkVEt(..@I@ss>{n5PQAvq4lw ,@@M4fHdAKwy=rN5c@!ESS=)Ie0";(.MA`:t"uH)0Cynja1{`n;u$M+jy^70A!r TX]C\|e[J[`}]@{\|%Sv3&cu"sRQwukQ__/#8qB09#n6QVV&W_:uf7tGcc%/cR6"{)eq@p},)_ARzw>Y}v"h^O>)eBC=$N:%&O,++L3
Apr 26, 2024 15:14:06.015054941 CEST	1289	IN	Data Raw: 9d 3b 57 82 e4 e8 d1 a3 12 24 f7 df 7f bf 98 39 73 a6 68 68 68 90 00 98 3d 7b b6 2c 0b 00 0c 1f 3e 5c 0c 18 d0 8a cf 29 53 a6 48 00 0d 1c 38 50 0c 1a 34 48 b6 6d 8b 5f f4 e8 5f 8f 05 d4 39 58 02 28 1a 0a bf f3 ce 3b 25 48 95 25 50 20 40 19 b5 c4 Data Ascii: ;W$9shhh={,>\)SH8P4Hm__9X(;%H%P @T?kV\>}Z<cR555krv4B0G%ggSJVTV\);D\0{>lzvOP<O0)(K0qnw TA3#jaz-JJJRz!B
Apr 26, 2024 15:14:06.015069008 CEST	1289	IN	Data Raw: 95 46 4c 1e 2c 82 1a 4c 53 01 4e 64 2b e7 47 19 36 25 2a 8b 64 b6 a1 ce e9 60 88 01 10 f0 f2 31 88 01 f5 63 9e 9d da 35 15 6e 03 46 1c 23 04 47 f2 59 03 12 3b c9 12 35 5e 67 b7 97 84 52 36 da 8d 29 45 42 29 5d ab e0 b7 7e b6 da 8d c9 b2 7c 0c ca Data Ascii: FL,LSNd+G6%d`1c5nF#GY;5^gR6)EB)]~\|5x1vMw8eh!Nv 6Njgzi[`&k+&G7dtH8BA)^OgCneq:b7u7}? [h~<B)1v*c[vcr
Apr 26, 2024 15:14:06.015121937 CEST	542	IN	Data Raw: aa 18 08 e1 13 72 24 07 72 b8 7f e8 db e7 c5 6a 37 30 ad ef f1 dc bc 92 a3 7a 95 56 6e 14 ad 4f 0b eb 28 a8 93 41 8f db 7d 03 61 c9 8d 28 ad 15 ad ef 2c c8 b5 a7 90 2d dc 37 a1 f6 23 e0 91 f1 34 d1 ba 4f 00 0a 2b 61 1e cc e7 a6 71 19 4f 14 96 dc Data Ascii: r$rj70zVnO(A}a(,-7#4O+aqOsqMO<D+pk[=0%\}"TTeReMCnT(2^S$gAQ9T!kY]me+lN@?Np_XYa]2eA.h`8MrpP
Apr 26, 2024 15:14:09.596918106 CEST	346	OUT	GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:09.863672018 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:09 GMT Server: Apache Last-Modified: Mon, 27 Mar 2017 13:24:24 GMT Accept-Ranges: bytes Content-Length: 5906 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e0 00 00 04 61 08 02 00 00 00 2d 0e 78 d9 00 00 00 07 74 49 4d 45 07 e1 03 07 01 2b 00 bc 09 b7 b0 00 00 00 09 70 48 59 73 00 00 4e 20 00 00 4e 20 01 16 7d 99 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 16 a1 49 44 41 54 78 da ed dd b1 09 c0 30 0c 00 c1 24 78 ff 89 8d 9d 26 90 11 fc c5 dd 04 2a 1f 21 d0 3d e7 bc 00 00 80 86 e7 f4 00 00 00 c0 4f a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 32 f6 de a7 67 00 00 00 3e 36 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 1b 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 c4 0d 3a 00 00 84 d8 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 63 ad 75 7a 06 00 00 e0 23 d0 01 00 20 44 a0 03 00 40 88 1b 74 00 00 08 b1 41 07 00 80 90 db 06 1d 00 00 3a 7c 12 05 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 Data Ascii: PNGIHDRa-xtIME+pHYsN N }gAMAaIDATx0$x&*!=O@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t2g>6" D@t" :@@!cuz# D@tA:\|!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t
Apr 26, 2024 15:14:09.863693953 CEST	1289	IN	Data Raw: 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 Data Ascii: " D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t
Apr 26, 2024 15:14:09.864037037 CEST	1289	IN	Data Raw: 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e Data Ascii: !B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@
Apr 26, 2024 15:14:09.864120007 CEST	1289	IN	Data Raw: 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 Data Ascii: " D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t
Apr 26, 2024 15:14:09.864180088 CEST	1121	IN	Data Raw: 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 Data Ascii: !B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.024688005 CEST	295	OUT	GET /lingos/favicon.ico HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.286418915 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"15406-1647027594000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:54 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 2018 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5b 6b 6c 14 55 14 9e f2 12 7c f1 b2 a9 d6 95 6e 67 ee ce ce bd 5b b5 a1 a1 b5 ed ce 4c d5 68 e4 fd 5c 76 96 48 e2 2b 8a 51 13 f1 15 7f f8 40 8d fc 30 9a f8 48 7c a0 a2 31 31 3e 62 7c 60 34 44 05 02 18 05 04 05 ac 01 81 76 67 a6 95 2a 28 8a 0a 12 29 5d bf 4b 97 42 b7 9d 76 76 77 76 d7 84 fd 92 93 59 a6 73 ef f9 ce b9 e7 9e 7b e7 dc 41 10 4a 84 a1 c2 98 31 02 ae 7e 61 d1 30 41 a8 15 04 c1 ef ef fe b7 32 56 10 96 e3 5e 75 75 f2 ef b2 20 7c 55 2a 08 0a 9e 19 c3 9f 13 ba ef e7 0a 4c 8d 2f 0a a9 71 83 d4 ed f6 65 d2 3e a4 59 ab aa 74 2b 81 6b 17 e4 4b 1a 6e 5f 48 c8 ee 33 5c eb d7 ac a7 79 fb 5e a2 99 fb 98 66 3f a9 e8 66 bd 50 b3 79 f8 c9 a7 97 0c 61 aa c5 a8 6a de ab d4 b6 8f e7 77 a8 66 4e 81 de 6f ab 74 fb 68 9f 7e 38 2f dd 3a 12 d2 4c 8b 4b 95 66 1d 3e 71 3f a8 9b 97 9f ca 43 a9 dd 31 9e 85 ad 9b f1 b7 6f b8 2d fd f5 75 aa 30 d5 bc dd d1 27 ba 3d 09 76 bd 10 d2 cd 8e be b6 59 07 d0 ff eb ac d1 0a b9 f1 4f 20 6c 89 54 6b d5 b8 28 e1 76 44 47 62 88 5b df 9e 0a a3 32 38 cf 08 b0 ad b1 00 fb db 20 74 8b 41 82 33 dc b6 8d 92 60 04 6d ba d0 36 d1 23 84 1e 8b 8a ca 34 37 ed f1 ec f6 5e 6d 93 82 3e 37 b8 6c ff 4f 7f ed 63 01 ba df 4d 7b 43 a2 db 1c f4 7f ed a6 3d ec 9c c3 ed 4d b1 bf 33 2a c9 93 dd b4 e7 98 2f c9 b3 d0 66 33 c6 e0 37 f0 de 38 5f 94 a7 b8 6d 9b 4b f0 3c e3 87 34 09 b9 cd 33 45 64 07 e4 8c 95 c8 8b bf 20 8f 6d c0 ef 97 90 07 af 25 ea ee d2 7c e9 67 ba f5 6c df 3c 68 1f 45 9e fb 8c 69 e6 82 74 72 7e 46 fa b5 d6 9b 07 cc c9 9a bd 8f e9 f6 52 d6 d8 32 21 17 fa 95 06 b3 7e b0 35 a1 c7 27 aa f9 01 d3 db 90 1b 12 43 33 d1 15 6c b4 cb cb 2e f9 f9 ac de f7 f6 9f 83 71 3f e6 8e 43 cf da d7 c1 d7 21 a6 da 33 89 da e1 18 2b 7e 7f 7c 64 f7 9a 65 df 8d 36 ab d1 b6 33 a4 b7 5f 9e fa 1c 62 2f 9e 8e fe 5e 5c f8 fe 00 7c 92 eb eb 17 e8 6b 15 ae 1b b1 46 9a fd ad dd 88 b7 3b 52 f5 63 dd 9f 0a df 3e ce e7 02 da ff 99 29 17 37 02 bf bd 38 d0 18 31 d6 3c 02 31 77 35 e4 55 f0 39 e8 b5 7e f8 6a bd db 78 e1 b1 12 52 cd 9b b0 b7 d8 e2 66 ef e2 72 bc 0e b8 d5 df cb 2f e1 b6 3a 70 7f 0d f2 77 c6 fa 35 f3 5f f8 ff 1d a1 26 31 7c 70 8d fd 23 d8 b8 f3 1c 1a b6 16 32 dd 7c 1f b1 32 f8 f8 40 67 48 b3 d7 61 2f bc 98 4d 8a 9f 9f a9 de fe 91 18 1a 54 db 2e 61 5a db 02 f8 e5 be 90 6a 3f 8a f1 7a 94 69 f1 fb 59 38 7e bd a2 99 0d a9 f3 fd 74 40 ac 5c 3e cf 08 d0 07 b1 2f da c0 f7 72 d8 8f ed 33 08 fb 32 2a d1 7b 23 a2 38 3a 97 ba 0d 49 9e 1d 23 ec 40 ff fb ca e3 7b c3 0e 43 94 af cc 8d 6e 3a 9b ef 1f 9d 74 f7 70 08 d0 23 f3 a5 60 9f 3c 9c 0d 22 84 94 0e 64 77 3f 1c da Data Ascii: [klU\|ng[Lh\vH+Q@0H\|11>b\|`4Dvg()]KBvvwvYs{AJ1~a0A2V^uu \|UL/qe>Yt+kKn_H3\y^f?fPyajwfNoth~8/:LKf>q?C1o-u0'=vYO lTk(vDGb[28 tA3`m6#47^m>7lOcM{C=M3/f378_mK<43Ed m%\|gl<hEitr~FR2!~5'C3l.q?C!3+~\|de63_b/^\\|kF;Rc>)781<1w5U9~jxRfr/:pw5_&1\|p#2\|2@gHa/MT.aZj?ziY8~t@\>/r32{#8:I#@{Cn:tp#`<"dw?
Apr 26, 2024 15:14:06.286493063 CEST	1180	IN	Data Raw: 23 a5 a5 67 7b a5 df 20 ca c3 6e 75 9f 90 a8 a4 38 be 6b a5 0b be 07 4f 57 3f fc b5 d2 2b fd 88 ab 3f d2 d6 1f a0 3b bd d2 0f 5b 7e 2f a4 7e 43 62 9b d2 d5 0f 9f 7d ea 9d fe e0 03 69 eb 17 83 8b bc d2 1f f1 b1 71 88 c1 fd 69 d8 6e 4d 2f 2f 3f d3 Data Ascii: #g{ nu8kOW?+?;[~/~Cb}iqinM//?+H{z8"a/uwF,l7scH=p{\|suYi^'\'$E5]^C,%lL[h^nT!^>7W\m^s`a_q 4RTZK
Apr 26, 2024 15:14:09.596853018 CEST	333	OUT	GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:10.173732042 CEST	333	OUT	GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:10.392946005 CEST	576	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:09 GMT Server: Apache Last-Modified: Mon, 27 Mar 2017 13:24:24 GMT Accept-Ranges: bytes Content-Length: 206 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 50 08 06 00 00 00 04 12 a9 a9 00 00 00 07 74 49 4d 45 07 e1 03 0d 17 22 27 bf d7 86 34 00 00 00 09 70 48 59 73 00 00 4e 20 00 00 4e 20 01 16 7d 99 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 5d 49 44 41 54 78 da ed c1 31 01 00 00 00 c2 a0 f5 4f 6d 0d 0f a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 be 0d 1a df 00 01 59 64 ec 6f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPtIME"'4pHYsN N }gAMAa]IDATx1OmYdoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49720	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.178628922 CEST	408	OUT	GET /lingos/nd/fresco/javascript/views/netd-namespaces.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.423217058 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"14208-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 3173 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 1b 5d 8f db 36 f2 3d 40 fe 83 90 87 43 1b a0 ca f5 5e 0e c1 61 1f 1c ef 06 97 c3 b6 17 64 37 0d fa 54 d0 14 6d b3 2b 89 3a 92 b2 d7 3d dc 7f bf 19 8a 14 3f b5 49 ed 0d 90 58 9c 19 92 43 72 be c9 bc 79 fd f2 45 65 fe 56 6b 31 9c 24 df ed 75 f5 1d fd be fa f1 ed db b7 3f fc ed af 3f fe bd fa 99 e9 6b de b1 5e 71 d1 ab ea 56 37 f5 dc 65 d5 b6 95 e9 a2 2a c9 14 93 07 16 20 ef f7 5c 55 4a 6c f5 91 48 56 c1 b7 de b3 8a 8a 7e cb 1b d6 6b 4e da 8a f4 4d 35 48 31 48 ce 34 91 a7 8a f7 5b 21 3b a2 61 a2 4a 6c cd 20 f9 e4 d5 77 af d6 e1 20 1f 7c a7 57 df d7 55 f5 ab 18 2b b5 27 c0 59 2f b4 19 a3 e1 8a b6 42 b1 4a 8d 74 5f 2d 75 36 dc 4c 1d 47 a0 e5 ba 12 7d 8b 3c 99 31 08 a5 42 36 a4 a7 ac 3a 72 bd 37 6b d1 4c 76 0a 18 35 8d 96 53 e0 92 55 64 27 19 03 86 75 75 02 46 e0 97 49 d6 c0 28 5a 98 71 4c e7 68 51 66 c3 de bc 7c f1 f2 c5 9b d7 d5 bf ee aa 9e 74 4c 0d 04 26 02 d6 2a f8 78 20 3b 56 bd a2 a2 ab 7b a6 1b ec 57 1f 38 3b d6 64 18 24 e1 8a b4 af 6c ff 03 91 d5 0c ac ae aa ff fe ef 1f 08 9e 41 75 47 7a 18 4b 3a 54 86 a8 95 26 7a 54 6b a2 d9 4e c0 79 2c d2 69 d6 0d 2d 50 a9 d2 2c 0e 99 77 77 98 7a c7 7a 26 3d 8f 05 0a d6 70 2d 0a 9c ce 04 12 0e ad df 3d 41 70 14 f2 61 db 8a e3 13 24 4a cb 91 ea 51 3e c5 2a 08 e6 8e e9 d5 d8 70 86 87 ff 35 86 ee 28 69 9f a2 9a a7 ac 15 a3 46 ec fe 04 ad 9d 43 8d 5d 47 4a c7 f3 44 cf 81 c0 d9 d2 3d 67 87 49 38 0b e7 06 ea aa 17 4e 9d 17 8e 4a 31 22 41 9d 0a 03 cd 5f 2b 33 f7 7b d0 b0 bc 3b e8 98 9c 5b 64 d4 42 91 43 61 e3 12 be 95 5d 0f f6 f6 53 bf 79 fd c3 9f fa 83 ea 82 ca 02 3a 35 f8 51 b0 55 77 a2 61 ed 2c d6 01 a8 de 48 71 0c 66 0d 51 f8 1d 0b 6c 19 6b 16 fd 89 a1 f6 5e 7d 1b 59 4d c0 78 36 6b 44 69 90 bf d3 9d 66 83 4a 58 fe 5d 6c c0 88 6e b9 97 bb 04 9c b2 6e 09 a8 31 4e 51 9f 09 b4 34 a2 c5 52 26 75 32 54 c3 cd a9 04 42 99 80 17 58 48 0c 52 08 ab 0d 07 14 b5 ee 74 0b a7 df a6 cb 8e e5 cf 82 5a 10 0f 11 cc 72 81 6c 10 4d 5a 31 1b 18 db ac 79 37 08 19 6e 5b 02 af e9 b0 88 22 9c d2 45 a4 a2 e2 c8 ff 80 c3 5e a4 98 3e a8 18 a5 62 cb c3 98 2d 68 49 bf 1b d1 6d 2c 91 49 90 2e 15 58 9f 8c 60 43 74 b0 b9 16 4b 40 fd 94 0a ed 87 c3 80 0c 8f 2d 5b 69 2d ad f3 e0 de 37 38 1a 31 e8 81 9c 52 e8 91 6d d6 d3 67 d6 41 13 f5 90 c1 98 d2 2b a5 f8 2e 63 3d 51 40 0b 9d 2d e1 4f 04 7c 30 eb 49 60 c4 33 9a 66 e1 d0 4d d0 b2 00 ad b5 24 bd a2 92 0f fa ce 78 cf 6f 24 5b e0 17 2d e1 4d 2f 45 db a6 98 9d ce 76 1d 40 d8 21 3b 27 84 7f 6d f8 af 13 b4 e0 0f 02 17 3b 8b 48 0f 6a 0d 87 dc 7c 30 b1 8d ca b8 1a 88 Data Ascii: ]6=@C^ad7Tm+:=?IXCryEeVk1$u??k^qV7e* \UJlHV~kNM5H1H4[!;aJl w \|WU+'Y/BJt_-u6LG}<1B6:r7kLv5SUd'uuFI(ZqLhQf\|tL&x ;V{W8;d$lAuGzK:T&zTkNy,i-P,wwzz&=p-=Apa$JQ>p5(iFC]GJD=gI8NJ1"A_+3{;[dBCa]Sy:5QUwa,HqfQlk^}YMx6kDifJX]lnn1NQ4R&u2TBXHRtZrlMZ1y7n["E^>b-hIm,I.X`CtK@-[i-781RmgA+.c=Q@-O\|0I`3fM$xo$[-M/Ev@!;'m;Hj\|0
Apr 26, 2024 15:14:06.423269033 CEST	1289	IN	Data Raw: d4 a0 b8 03 01 73 9d 71 c6 c4 0e cc fe 9e d3 4f 6c 67 42 ba 84 40 b2 2d 0c 5a 38 24 27 b1 f9 90 52 8c 43 79 cb 50 5a a1 cb 84 44 b1 fd 3c 34 41 60 e2 c8 1e 32 ad a4 7b 46 1f 70 fd 8b 88 2c ca 59 a6 58 d8 69 4f c8 81 f2 2a 55 34 41 39 6e 32 58 41 Data Ascii: sqOlgB@-Z8$'RCyPZD<4A`2{Fp,YXiOU4A9n2XA1L)3D$`D3ip!cl`K&ilM%63wS`({xa-A3P<?g+Y`-'vz1s}aiyh.<HXzv72;q`E^
Apr 26, 2024 15:14:06.423314095 CEST	1056	IN	Data Raw: ec b2 66 0d 86 bd eb a5 89 f9 4c 86 da 84 85 79 f1 14 f1 57 49 b6 84 f2 16 14 64 91 80 6c 30 a0 a7 3a 27 98 0a 4e e9 00 59 29 cc 8e b3 b8 f0 b4 96 b6 c8 09 78 1c d0 18 93 48 44 f7 7c 33 c1 a4 7c 59 55 30 39 17 18 ff 97 40 e6 4a f8 c9 e9 5f 6a a1 Data Ascii: fLyWIdl0:'NY)xHD\|3\|YU09@J_j/Ltyh/9$yfm\|`F);=k6_iBaj/pc33+y29=G9l~M=*kOny)\|(g.agpuE?tX )
Apr 26, 2024 15:14:06.450964928 CEST	410	OUT	GET /lingos/nd/fresco/javascript/jQuery/jquery-3.5.1.min.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.704087973 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"89476-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 30910 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd bd 7b 7b db 46 92 2f fc ff f9 14 22 c6 ab 01 cc 16 45 39 99 39 3b a0 10 3e 8e 6c 27 9e c9 5d ce 24 59 8a c9 03 91 a0 84 98 02 18 00 d4 25 22 f7 b3 bf f5 ab ea 6e 34 40 50 ce cc ee 79 33 63 11 97 46 5f ab ab eb 5e c7 cf 7b 07 bf 7e bb 4e 8a 87 83 db 8f 06 7f 19 9c 1c 6c 0e fc 59 70 f0 f7 f3 83 37 f9 3a 9b c7 55 9a 67 07 71 36 3f c8 ab eb a4 38 98 e5 59 55 a4 97 eb 2a 2f 4a 2a fa eb 6f f8 74 90 17 57 c7 cb 74 96 64 65 72 f0 fc f8 ff f4 16 eb 6c 86 0f fd 44 55 c1 a3 b7 a6 c7 25 7d 36 ab bc 91 97 5f fe 9a d0 45 14 55 0f ab 24 5f 1c dc e4 f3 f5 32 39 3c dc f3 62 90 dc af f2 a2 2a c7 cd db 28 19 cc f3 d9 fa 26 c9 aa 71 45 cd f4 86 41 58 b7 1a 3c a6 0b bf 57 17 09 aa eb 22 bf 3b c8 92 bb 83 d7 45 91 17 be a7 c7 5c 24 bf ad d3 22 29 0f e2 83 bb 34 9b 53 99 bb b4 ba a6 3b f3 a5 17 8c 8a a4 5a 17 d9 01 b5 12 6c 43 fe eb 7b 34 33 c9 22 cd 92 b9 d7 33 dd 95 ef c7 f2 13 56 d7 69 a9 6c 87 ce 54 d2 9a 86 db b8 38 a8 a2 c9 54 15 d1 d7 3c ee c1 55 52 7d 53 e4 55 8e ea be 5e a8 32 aa 06 25 e6 54 5d d1 d5 62 19 57 63 77 7c a6 53 fc 66 30 8b 97 4b ee 5e 67 11 5a b3 19 15 8a 57 ab e5 83 4f 4d 52 41 b5 a6 4a 57 eb f2 5a a5 74 41 5d 4e ee a9 cd 2c 7a dc aa 3c ca 06 55 7e 4e fd cc ae d4 2d dd 5c c7 e5 d7 77 19 f5 6d 95 14 d5 83 8a a3 db fa fd 32 8a a5 71 19 44 a0 1e 50 c5 4d b4 db 0f cf 3c aa 17 18 8b 9e ad 6f 2e 93 a2 9e c5 64 90 e5 f3 e4 1d dd 6c d5 7d 47 35 07 d9 7a b9 ec 45 f4 69 12 45 04 04 32 dd 5b f5 3a 3a b3 ab ad 66 d1 23 aa 0b 7b 43 55 16 33 fc 64 34 05 89 5c 7c c9 70 44 d7 db 91 a9 fe e0 12 80 aa b2 e0 11 cb 52 a8 94 26 c1 cf a2 6c b3 79 1d 0c 66 45 12 57 c9 eb 65 82 aa 7d af 9c 15 e9 0a 60 41 10 96 0f aa e4 be 8a 00 e4 0b 02 aa e2 20 cd 0e 66 81 4f 53 3a 29 a6 9b 0d af e9 cb 4a f6 0b f5 b8 79 ef 17 41 70 78 98 0f ca c6 33 95 06 23 9a f2 24 9e 63 bd 92 6c 7e 76 9d 2e e7 7e 1e 0c 56 71 41 1d f8 8a 66 67 50 24 37 f9 6d 62 de 6c ed 30 ee 5a f3 44 13 34 4e fa 9e 17 ee ec ad 64 b3 e9 5a 90 71 36 c9 0d 30 d1 00 cc 67 a1 79 bf c5 fc 2c 22 8f 31 85 a7 ce a3 e6 46 37 4d d3 36 3b 1f 2c 32 82 ab b4 e2 37 ce 54 af d0 47 81 fe 5e 0f 10 b0 4c b2 ab ea da a3 a9 c3 a2 0e e4 96 40 11 83 d1 7b af 77 43 d7 87 87 bd 7b fe f1 bd b8 28 e2 07 ea 36 56 68 48 3f 15 75 55 03 92 1d 4b 75 78 38 3c a5 3f d5 d1 09 96 85 60 1e 5d 8a ce 07 2b b3 c9 a2 47 c1 5e e1 42 d1 0e a1 8d b9 9e 11 56 0b cf 95 74 21 1c aa 2a 7f 89 96 ea 5d 65 87 58 ca 2c 61 97 d3 66 a2 65 ed da 79 66 09 dc c2 61 72 3a 1c e3 6a 92 f4 f1 a3 c7 3b 0d e5 d9 74 ab b0 2b cf ab 78 f6 be Data Ascii: {{F/"E99;>l']$Y%"n4@Py3cF_^{~NlYp7:Ugq6?8YU/JotWtderlDU%}6_EU$_29<b(&qEAX<W";E\$")4S;ZlC{43"3VilT8T<UR}SU^2%T]bWcw\|Sf0K^gZWOMRAJWZtA]N,z<U~N-\wm2qDPM<o.dl}G5zEiE2[::f#{CU3d4\\|pDR&lyfEWe}`A fOS:)JyApx3#$cl~v.~VqAfgP$7mbl0ZD4NdZq60gy,"1F7M6;,27TG^L@{wC{(6VhH?uUKux8<?`]+G^BVt!]eX,afeyfar:j;t+x
Apr 26, 2024 15:14:06.704144001 CEST	1289	IN	Data Raw: 51 a5 cc d8 f9 e0 26 29 ae 12 ae 6a e0 74 da 0f 54 52 23 2a 1a 62 72 2b 1b 32 62 3c 54 6d 55 12 cf ae bb fa 78 3e c0 1b ae 90 f1 c2 4d bc aa 8b 65 35 12 41 83 b6 67 3e f5 23 5e f9 4d 1c d7 80 00 0d 44 b4 a9 a8 d2 80 ea 65 54 d6 31 91 ad 8a 4b 8d Data Ascii: Q&)jtTR#*br+2b<TmUx>Me5Ag>#^MDeT1K\EZ!YO9:2m}"yb~?-Tuw vF?F^fs(;<N+Ng;kP`kUD?\_l}EmDV1.dH2:
Apr 26, 2024 15:14:06.704170942 CEST	1289	IN	Data Raw: fe f3 b3 4d ef bf a7 e3 28 d0 4f c6 e1 9f 7d dd ee 00 55 d1 7f 7f 9e 06 cf 83 3f 6f 2e bc f6 8b 0b 0f 6f 2e bc 8d ae 37 d8 e8 5a 2e 2e 68 00 6f 22 2f ac 1b bc b8 f0 7d ff 5f af 3a d8 b4 df f8 01 8d 73 3a dd 78 fd 1f a8 e6 e7 c1 66 40 e5 2e d0 b4 Data Ascii: M(O}U?o.o.7Z..ho"/}_:s:xf@.44z33+Q?s%?t>\|{F>g}R[y<w[o_ohu&=d5
Apr 26, 2024 15:14:06.704214096 CEST	1289	IN	Data Raw: ab f1 7a 0f fb a2 9e 2f 23 98 b1 13 56 39 d0 02 d9 cb 1e 9d 4b 45 78 39 02 23 ec f4 76 91 34 71 a8 66 29 37 34 95 05 31 73 0d a8 28 08 2a 2e 07 31 2d c7 e7 71 36 5f 12 76 9d 14 53 42 af 75 6d ab 46 6d c4 c1 25 a8 85 90 9d 3d 7f 80 2e e5 be 72 ee Data Ascii: z/#V9KEx9#v4qf)741s(*.1-q6_vSBumFm%=.r\|]UpAa6tx6:O/oY0mG'V1>^1-XpT~L^=udN4\|_m~.CBiW7'4/top6-_9w9Oa _icv9
Apr 26, 2024 15:14:06.704236031 CEST	1289	IN	Data Raw: 65 2a 33 1f f1 60 96 df 80 e5 36 5c d5 37 79 99 a2 db 30 55 26 16 cb 29 96 55 71 9a 95 c1 b8 e3 24 8d fe d6 90 bb 8c 93 36 77 15 42 3e 53 35 45 46 56 6a 02 a6 8d 48 5e bf 57 88 ec ba e6 e0 f0 34 b3 4d 8f eb 4b bf 80 b4 71 4f d7 0f 0f 4f fe 7a b8 Data Ascii: e3`6\7y0U&)Uq$6wB>S5EFVjH^W4MKqOOz-:g+-"c{UjSOaW#>},q'`K(**O9)JB"G43Z_$-Qe=e_'zG3\|{4{sGdb[
Apr 26, 2024 15:14:06.704268932 CEST	1289	IN	Data Raw: a0 5e dd 44 1e ec 1a dd e7 47 1f c3 ce db d3 56 9b 0c ce 66 76 71 e0 5d c9 fc dc 76 b8 04 f7 7a 2e b7 b0 dd ef 20 60 2c b3 a2 07 6a f7 66 ec 39 27 9e d7 71 08 cc 9a 5c c8 22 ba df bf 59 d4 2a ea 65 f0 d7 54 73 78 6d c1 7e 87 4f e8 07 43 4e 10 5d Data Ascii: ^DGVfvq]vz. `,jf9'q\"Y*eTsxm~OCN]["Ex[yuzMXgk?xl9<\/#p)8&S8qXao_yK)(zO%LbJ\[yx8s,&NGO/c?MU=hHs\|3qx
Apr 26, 2024 15:14:06.704555035 CEST	1289	IN	Data Raw: 7c 97 18 ea 16 d2 17 03 b3 bc 84 20 93 87 6a 5d 83 ee 32 12 9f fc ca c6 2c e1 79 2f 99 c6 05 1b 9e f9 39 d7 03 56 49 f6 70 ce f3 2c fe dd 7e 19 b8 21 40 6c 17 ce 12 7f ae ae 21 bc 50 0f aa 3e 7a 6e a9 c2 5b 5a 4d aa fb 36 a2 32 b7 41 a0 1e e8 d9 Data Ascii: \| j]2,y/9VIp,~!@l!P>zn[ZM62A<{ed-'9\r0!+tn<\|ja}1gzD xd.si^yH:<j%%oZR"o%Nv+}YbC$~yEy
Apr 26, 2024 15:14:06.704566002 CEST	1289	IN	Data Raw: f2 89 ce a5 7d a0 66 41 40 c0 0c fb 2a 02 25 44 5a 30 bd d9 d7 0b c4 60 73 cd 88 a2 73 e3 f7 ec 05 c6 88 48 9b e5 b2 ab d5 b9 da 35 45 8a 7a bd a5 7a e7 07 aa 69 ab b9 c7 c9 ec e4 09 c3 d7 27 9c c0 3b 2c e6 2d 0b de 65 38 ff 27 b1 92 f7 94 f7 27 Data Ascii: }fA@*%DZ0`ssH5Ezzi';,-e8''UbqbjIzu]myu6)Z_Z<mmZ;b1{8#i~ovAJTvTLmnCLA[SoYAl`t[>s<Uk;/hB\
Apr 26, 2024 15:14:06.704720974 CEST	1289	IN	Data Raw: 6d b9 a1 0b 63 f7 37 ac 65 83 ad e0 88 7d 65 db a6 c1 ba 6e 5a d4 bd 43 e8 a8 fe a9 e2 7b 5a f8 f0 98 dd 76 78 d0 a8 e9 0f 4c 55 db d8 19 9f 96 72 d3 b9 2e ef fc 46 60 41 a4 9a 08 1c 6e 99 75 48 16 0f 77 7e ef 32 d7 28 6c 10 f5 1e 76 b7 17 89 03 Data Ascii: mc7e}enZC{ZvxLUr.F`AnuHw~2(lvye="'(xUrZUn"?{s4/'(;d#NVG{"$@.DOZ8L:H\|ZB5)XZh$MtL;Q/k/>&`"
Apr 26, 2024 15:14:06.948920965 CEST	411	OUT	GET /lingos/nd/fresco/javascript/component/netd-component.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.199971914 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"107697-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 25183 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 6f 77 1b b7 b1 38 fc 5a 3d 27 df 61 bd d1 af 4b c6 24 65 27 6d 6f 43 99 ce 91 25 3a 56 63 4b ae 25 27 37 8f aa ab b3 e2 2e a5 b5 a9 5d 96 bb 94 ac ba fa ee 0f 66 06 7f 06 58 ec 92 92 d3 f6 be b8 3a 27 b1 84 05 06 83 c1 60 30 33 18 0c b6 be f9 ea 77 01 fe 17 ec 16 f3 db 45 76 71 59 05 9d 49 37 78 fa fd f7 df f7 bf 7d f2 f4 4f c1 41 5a ed 65 57 69 5e 66 45 5e 06 af ab 64 a0 9b ec cc 66 01 36 29 83 45 5a a6 8b eb 94 7d 3c be cc ca a0 2c a6 d5 4d bc 48 03 f1 7b 75 99 06 93 22 9f 66 49 9a 57 59 3c 0b e2 3c 09 e6 8b 62 be c8 d2 2a 5e dc 06 59 3e 2d 16 57 71 25 3a 0a 8a a9 a7 e3 a0 13 ee 72 00 fb a6 41 d8 1d 04 bf 16 4b ec b9 bc 8c 05 62 79 51 05 49 56 4e 66 45 99 06 e5 72 72 19 34 b5 45 44 a8 d1 52 d4 cd aa a0 c8 67 80 4e 10 4f 26 c5 22 89 f3 49 1a dc 64 d5 25 0e a1 4a 17 57 25 e0 07 7f cc b2 89 40 30 c5 6e e3 8b 45 9a 0a 7c ab e0 b6 58 06 e2 df 74 91 26 02 4a 55 50 63 6b 3c 48 a7 ad af 7e f7 d5 ef b2 69 27 4f ab 24 f8 fd ef 83 20 9c 14 57 f3 22 17 6d 43 e8 1e ca bb 9f bf fa dd 86 a8 23 28 57 16 b3 14 aa c9 5f 07 b3 e2 02 bf 6e b0 82 4e f8 a1 0c 66 45 9c 88 ae af 0a 41 f8 ea 32 16 d4 14 23 08 bb db a2 ee 9d f8 6f b3 33 5d e6 13 18 79 87 da 43 3f 03 dd f5 20 cb b3 4a 4c 6d 27 29 26 4b 18 0f 35 84 ff df a5 b3 32 fd 0c 58 5f c7 0b 44 2f 18 05 9f ef c4 17 1b 84 2a 75 cb 11 f4 ae fa eb c5 b2 aa 60 6a 47 81 c2 27 e8 08 46 b8 48 ab 6e 00 78 d1 ef e2 b3 fc e5 9f ff 0c 14 4a 08 3b 10 3f 80 c7 b9 86 b3 d9 09 07 d0 63 9f 8a c2 9e 6c da c5 fa a6 05 a0 41 bd 5b 9d 53 2b ec 9c ea aa fa 9b f4 65 b4 a9 aa 6c 9b ef d9 34 e8 c8 ef 83 24 ae e2 4e 08 d0 d3 24 ec 22 a0 80 fd 2c d2 6a b9 c8 83 6a b1 4c 19 80 3b f3 ab 17 4e 0f 1b 74 b7 39 52 d0 e9 23 55 fb 32 2e 77 67 71 59 76 22 2a e8 2f b3 3e b5 8d ea 38 18 82 1d ce ab 8c c8 86 4c b0 b1 51 5e 16 37 af e3 f3 74 36 34 23 8a ab 6a d1 09 e1 4b 95 7e aa c2 6e 30 1a 8d 82 10 10 0a bb 3d 6a 26 16 59 7c 3e 4b 13 d6 ca 60 24 50 91 48 a9 6a 51 17 26 52 d5 cc ca 4e 38 54 9f 04 c9 10 24 b0 8e f8 07 67 6a 82 73 64 a3 03 85 c4 ce 1b 1b 40 09 f8 bb ab 46 61 0d 6e 20 db c3 3f 54 ff ce 26 87 02 4c ff 74 ac c6 7c 96 79 dd 38 49 1a e9 6d cf ab 9f 4b 0c 75 00 ad be 10 9d d9 3f d2 fe 74 39 9b 09 da 88 f5 ed a5 e2 4d 96 08 46 f6 4c a8 aa bd 48 af 8a eb b4 de a0 09 23 cf ca 1c 5f 8b df 5e 09 69 38 4b 17 a5 42 d7 30 de 9d fe 4d ae b8 41 1a 4f 2e 99 30 e1 a8 99 25 d6 a9 c4 4e a0 d0 b8 eb d2 bf 4e ef 89 d8 06 f6 8a 9b fc 85 e4 0a dd b8 ec a8 be a6 d9 4c 48 d4 4e 78 92 95 7d a8 de 4f 44 7d c9 5c a7 82 73 Data Ascii: ow8Z='aK$e'moC%:VcK%'7.]fX:'`03wEvqYI7x}OAZeWi^fE^df6)EZ}<,MH{u"fIWY<<b^Y>-Wq%:rAKbyQIVNfErr4EDRgNO&"Id%JW%@0nE\|Xt&JUPck<H~i'O$ W"mC#(W_nNfEA2#o3]yC? JLm')&K52X_D/u`jG'FHnxJ;?clA[S+el4$N$",jjL;Nt9R#U2.wgqYv"*/>8LQ^7t64#jK~n0=j&Y\|>K`$PHjQ&RN8T$gjsd@Fan ?T&Lt\|y8ImKu?t9MFLH#_^i8KB0MAO.0%NNLHNx}OD}\s
Apr 26, 2024 15:14:07.202050924 CEST	411	OUT	GET /lingos/nd/fresco/javascript/views/base-plugin-custom.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.446571112 CEST	1237	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"2230-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 779 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 95 df 6f da 30 10 c7 9f 41 e2 7f 38 21 a4 24 53 49 7f bc 75 55 27 75 6c 6a 2b 75 e5 a1 68 d2 1e 5d fb 42 bc 19 1b d9 0e 14 55 fc ef bb 38 81 00 85 6e 3c 4c 1a 12 02 e2 bb af 3f f7 3d fb 38 fd d0 69 43 78 c3 c0 4c 17 56 8e 73 0f 31 4f e0 fc f2 f2 b2 7f 71 76 7e 01 8f e8 bf c8 09 6a 27 8d 76 f0 e0 45 ba 4e b9 51 0a 42 8a 03 8b 0e ed 0c 37 16 47 b9 74 e0 4c e6 e7 cc 22 d0 77 9f 23 70 a3 33 29 50 7b c9 14 30 2d 60 6a cd d4 4a f4 cc 2e 40 ea cc d8 09 f3 b4 11 98 2c 88 bc dd 1c e2 ee 60 53 e4 be 49 ea 26 29 c0 0f 53 80 cb 19 91 69 e3 83 86 90 8e 2b e3 10 5c c1 73 38 94 1c 68 aa c4 82 62 a5 07 a3 55 c9 14 34 18 e7 c6 0a a6 39 c2 5c fa 3c d4 e2 d1 4e 1c 81 86 1f 4a 72 a2 44 60 63 8b 48 c0 1e 16 04 42 9f 68 51 90 8a 37 41 27 24 6f 15 15 0c 3b ed b4 7b b1 30 bc 28 33 93 d4 22 13 8b 38 2b 34 2f c9 e2 04 5e 3b ed 65 72 d5 69 77 da ab 87 60 66 68 2d 15 f2 73 68 c7 83 9c 59 ff e4 17 0a 5d 15 0c f4 9a 31 0b bd f5 2a 5c 43 2f ee a6 eb df dd 52 ae 0c 6b 42 d2 4c 6a 41 31 da 08 24 2b 91 f1 7c 87 a1 8c 6f f5 62 4f 9d 4d 52 ee 5c 1c f1 c2 3a 63 a3 93 48 60 c6 0a e5 a3 95 6c ab 98 0a e6 f1 eb cb 94 7c 1d 18 a5 d8 d4 e1 c8 8c c7 0a e3 5a 61 27 f4 09 15 72 8f e2 d6 30 f5 f9 96 52 8c dd 8d 5c fe 11 9a 53 1f 7e ed a3 b6 38 21 c7 06 ce 05 9b ee 35 1d dd 3b 29 e8 1c 8c a8 5f 8f 94 4c ce 5d fd b3 0a 79 ce f4 18 bf 4b 27 9f a5 92 7e 31 cc aa cd c3 c6 37 5a 7c 23 b6 91 19 84 e3 12 bf a9 f6 e8 ec e5 d6 49 79 87 b3 a4 2c 55 82 4f 2d 99 41 4d 1e 9e a5 53 ba b8 da bb da dd 3e 47 a5 1c 79 9c 33 37 50 8c bc e9 d2 6d f6 96 95 4d eb 26 8d d5 bb 32 75 87 30 00 f4 79 4d d0 f7 01 81 f4 14 ea 31 dd 8a 4f 70 d6 68 b4 8e 11 60 42 ec 01 4a eb 96 57 2b 55 72 f9 7c d5 13 32 a9 b5 04 54 74 69 ff 03 f2 86 6f 9b 7b b3 a2 2d f2 fd 5d de 77 89 de 6f 32 cf a5 12 d4 e7 b8 eb d9 73 80 6a fa eb 6a b5 ba bb db b5 35 ec 4d d8 d5 3e 32 65 38 91 ad 0e e8 30 0b f7 76 67 4e 39 6e 4b 73 08 a0 24 bf 93 68 99 e5 f9 a2 9e 5a 07 56 d7 8e 94 12 73 29 a8 15 d7 07 a5 d2 10 10 ae 47 eb 60 0c d3 92 fe 0d 30 7e ad 02 1e 30 f3 f0 b1 92 3e bd 58 9e 40 e4 94 99 47 d5 24 de 2e f2 b8 3b 1a dc ec c5 51 33 8f c1 db 68 77 e6 d2 e1 c1 97 da f9 b2 44 9a 47 cd 06 c1 9a 8d 39 35 5b af 04 be 56 68 f4 4e c6 35 44 79 a0 8a 6a d5 f5 a8 a3 c7 58 79 53 9d ae f0 f5 40 e3 f6 54 ff 37 d3 f5 f8 9a 57 70 2e 37 f3 0a 6e 99 84 9d 7f 03 2b 12 af 89 b6 08 00 00 Data Ascii: o0A8!$SIuU'ulj+uh]BU8n<L?=8iCxLVs1Oqv~j'vENQB7GtL"w#p3)P{0-`jJ.@,`SI&)Si+\s8hbU49\<NJrD`cHBhQ7A'$o;{0(3"8+4/^;eriw`fh-shY]1*\C/RkBLjA1$+\|obOMR\:cH`l\|Za'r0R\S~8!5;)_L]yK'~17Z\|#Iy,UO-AMS>Gy37PmM&2u0yM1Oph`BJW+Ur\|2Ttio{-]wo2sjj5M>2e80vgN9nKs$hZVs)G`0~0>X@G$.;Q3hwDG95[VhN5DyjXyS@T7Wp.7n+
Apr 26, 2024 15:14:08.774753094 CEST	414	OUT	GET /lingos/nd/fresco/javascript/views/InlineUniversalSearch.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:09.025955915 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:08 GMT Server: Apache Accept-Ranges: bytes ETag: W/"13808-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 3682 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 1b 69 73 db b6 f2 b3 3a 93 ff 80 b0 99 90 6a 24 d9 39 9a 34 76 d5 8e e3 c8 ad 5e 1d 3b 63 cb 4d 3b 8e 3f 50 24 64 21 a1 49 0d 0f 2b 9a 56 ff fd ed 2e 00 12 3c 24 cb a9 3a 6f 9e a7 55 64 1c 8b dd c5 62 6f ef 7c f7 e0 1b f6 1d a3 8f c3 68 b6 88 c5 f5 34 65 8e d7 66 4f 5f bf 7e dd 7d b6 fb f4 25 3b e1 e9 5b 71 c3 c3 44 44 61 c2 8e 53 bf 57 ec 39 08 02 46 7b 12 16 f3 84 c7 b7 dc 9c 1d 4d 45 c2 92 68 92 ce dd 98 33 f8 9e 4e 39 f3 a2 70 22 7c 1e a6 c2 0d 98 1b fa 6c 16 47 b3 58 f0 d4 8d 17 4c 84 93 28 be 71 53 38 8a 45 93 86 a3 99 63 1d 9a 00 86 c5 06 ab dd 63 7f 46 19 9d 9c 4c 5d c0 2c 8c 52 e6 8b c4 0b a2 84 b3 24 f3 a6 6c d5 5e 42 44 6e ca 60 ad 48 59 14 06 88 0e 73 3d 2f 8a 7d 37 f4 38 9b 8b 74 4a 24 a4 3c be 49 10 3f fc 25 10 1e 20 c8 e9 58 f7 3a e6 1c f0 4d d9 22 ca 18 fc cb 63 ee 03 94 34 92 9b 4b f4 10 a3 76 1e 7c e3 4c b2 d0 43 24 9c d0 bd e1 c9 cc f5 78 9b fd f5 e0 9b 16 fc 77 eb c6 b8 1d 18 0b f8 f6 59 98 05 c1 be 9c d1 9b d8 67 be b8 98 0d f8 2d 9c e6 f0 0e 90 39 99 88 2f 12 40 4b 4c 98 c3 7b b0 e2 30 f2 39 eb f7 d9 f3 57 ec ef bf 59 79 e8 75 7d e8 87 da d0 8b dd da d0 d3 e7 b5 a1 67 af 98 3a b9 15 f3 34 8b 43 44 b6 b5 c4 0f 8d 8e a6 46 af f3 02 ee c6 43 35 58 cc 56 36 16 2c 48 78 3a 02 16 46 59 5a f0 4d c3 42 6e 25 00 ce 9b 7e 80 3b 83 c5 8f 1c eb db 2c 14 b7 3c 4e dc a0 2b a7 2c f6 44 31 09 be 58 ac 36 df 45 a1 60 df fe 36 f8 f3 43 b1 b4 dd 43 ec 24 56 44 46 71 4c 2f 8d c5 0d a0 f0 b0 cf 6c 5b 63 d2 7a d4 73 3f b9 5f 1c f5 5b 2b 8b 03 b6 c7 ae 01 f7 d8 0d 13 97 d0 be 88 03 c7 ba 38 19 fe 3e 38 3b 3f 38 3e 1f 1c 9c 1d fe 6a b5 3b 6a 47 ba 98 71 d8 62 bf 3f 3d 1f d9 7a d0 77 53 17 06 ff 3a 38 1c 0d 4f 4f 70 7a 78 72 3c 3c 19 c8 cd 76 87 21 d6 30 5c 60 b7 d4 5b c7 1c e8 e2 e7 3c f4 f7 58 8d 71 88 f0 06 ac 12 61 20 42 ae f9 04 0f 3e 0b d2 c4 64 d2 34 bd 09 1c fb 47 5f dc 32 2f 70 93 a4 6f a5 fc 4b da f5 e8 25 58 3f 99 13 02 f4 40 37 99 89 30 e4 20 e2 fa 17 58 b3 03 8b d4 a7 ad 18 be 2d f4 62 7e 13 dd f2 43 44 c0 b1 41 31 cc 02 77 d1 0d a3 90 17 07 e5 fc 02 75 e1 f1 24 31 98 85 cc 27 86 b1 15 3f 28 17 b8 a8 97 a4 6e 9a 25 f8 20 ec 89 2b 02 ee db 6b f7 e1 0f 3d 83 73 c2 fc 8c 10 77 14 d2 fb eb f7 21 5f 6e 5c 11 76 fd c8 cb 50 f3 74 81 71 a0 09 41 91 24 ee 35 1f bb b1 63 27 d3 68 fe c1 8d 43 11 5e 83 88 fc 65 ab b9 c4 de 63 84 ae e2 d4 f2 ae b3 f2 27 bd 6a c1 72 fb c2 44 08 e2 07 68 ee 14 c8 fb 1f 48 04 93 5f 96 6a 64 c9 78 00 26 42 3d 9c 75 f7 d6 52 1a 6c d9 61 df ef ee d2 c8 b2 ae bc df 46 f3 70 d0 a8 bd b5 Data Ascii: is:j$94v^;cM;?P$d!I+V.<$:oUdbo\|h4efO_~}%;[qDDaSW9F{MEh3N9p"\|lGXL(qS8EccFL],R$l^BDn`HYs=/}78tJ$<I?% X:M"c4Kv\|LC$xwYg-9/@KL{09WYyu}g:4CDFC5XV6,Hx:FYZMBn%~;,<N+,D1X6E`6CC$VDFqL/l[czs?_[+8>8;?8>j;jGqb?=zwS:8OOpzxr<<v!0\`[<Xqa B>d4G_2/poK%X?@70 X-b~CDA1wu$1'?(n% +k=sw!_n\vPtqA$5c'hC^ec'jrDhH_jdx&B=uRlaFp
Apr 26, 2024 15:14:09.290286064 CEST	489	OUT	GET /lingos/nd/fresco/styles/LINGOs/images/customize/bg-body-frameless.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:09.541610003 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:09 GMT Server: Apache Last-Modified: Mon, 27 Mar 2017 13:24:24 GMT Accept-Ranges: bytes Content-Length: 5906 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e0 00 00 04 61 08 02 00 00 00 2d 0e 78 d9 00 00 00 07 74 49 4d 45 07 e1 03 07 01 2b 00 bc 09 b7 b0 00 00 00 09 70 48 59 73 00 00 4e 20 00 00 4e 20 01 16 7d 99 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 16 a1 49 44 41 54 78 da ed dd b1 09 c0 30 0c 00 c1 24 78 ff 89 8d 9d 26 90 11 fc c5 dd 04 2a 1f 21 d0 3d e7 bc 00 00 80 86 e7 f4 00 00 00 c0 4f a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 32 f6 de a7 67 00 00 00 3e 36 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 1b 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 c4 0d 3a 00 00 84 d8 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 63 ad 75 7a 06 00 00 e0 23 d0 01 00 20 44 a0 03 00 40 88 1b 74 00 00 08 b1 41 07 00 80 90 db 06 1d 00 00 3a 7c 12 05 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 22 d0 01 00 20 44 a0 03 00 40 88 40 07 00 80 10 81 0e 00 00 21 02 1d 00 00 42 04 3a 00 00 84 08 74 00 00 08 11 e8 00 00 10 Data Ascii: PNGIHDRa-xtIME+pHYsN N }gAMAaIDATx0$x&*!=O@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t2g>6" D@t" :@@!cuz# D@tA:\|!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t" D@@!B:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49732	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.412523031 CEST	427	OUT	GET /lingos/nd/fresco/javascript/messagebar/css/jquery.messagebar.css HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.655195951 CEST	838	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"910-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 394 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 7d 92 eb 8a 83 30 10 85 ff 17 fa 0e 81 b2 ff 6a 49 5b ca b2 f6 69 46 33 d5 61 d3 8c 24 b1 b7 65 df 7d 47 6b a4 17 d9 80 92 9c dc be 73 26 ad 5d 1d 31 04 a8 b0 00 af 7e e6 33 25 cd 50 68 2c 5c 73 55 58 2e bf f7 77 31 72 93 2b 3d 0c 2c 1e 62 ae b2 75 73 19 84 5b 46 ce e0 25 57 db af ae a5 3d 78 89 19 58 aa 5c ae 4a 74 11 fd 30 51 f0 25 0b 35 18 3e cb 99 4a 8e 51 3b f9 16 00 20 0b 7e e7 b3 f9 ac b5 ab 33 78 47 ae 7a 00 5c 2a 91 d1 7b f6 af 62 68 cb 52 94 09 33 67 32 b1 ce d5 5a eb 8f e1 f2 1a a9 aa 05 1f da c8 83 74 04 5f 91 bb 3b 12 20 3d 1a 6d c0 18 61 10 5f 1d 60 ff db e8 ae a7 47 eb 96 42 cc 42 bc 5a cc 95 63 87 af 89 6c b4 d6 c9 d5 23 9f a5 84 58 5a 04 2f 69 73 ac f7 4f d0 5f 23 73 02 ec d8 b6 5d 5c 1f af 80 63 69 c8 61 96 2c ae 57 bb 41 3e b0 13 4a ba 61 27 ea cf 4f 3c 3e 4e 9c 87 f5 05 5b 93 10 6a 8a 98 85 06 ca de 97 3f 82 9d 72 01 ff 3e 9a 86 03 45 62 01 87 22 b0 6d 23 4e bd 26 7f bf 5c 3f 9b 7f b7 d8 85 2e fe fb 02 a4 c5 25 5b 96 ec 16 db be bd a5 b5 1b cb 74 a2 40 05 59 8a 82 58 93 31 e8 26 ed 2c d5 d3 30 af f9 84 fe 55 3c 70 d9 86 64 fc 29 d9 cd 76 dd 27 3b 91 93 44 e9 d2 9e 47 98 be 6f bb 60 7e ff 00 54 42 e9 15 8e 03 00 00 Data Ascii: }0jI[iF3a$e}Gks&]1~3%Ph,\sUX.w1r+=,bus[F%W=xX\Jt0Q%5>JQ; ~3xGz\*{bhR3g2Zt_; =ma_`GBBZcl#XZ/isO_#s]\cia,WA>Ja'O<>N[j?r>Eb"m#N&\?.%[t@YX1&,0U<pd)v';DGo`~TB
Apr 26, 2024 15:14:06.700478077 CEST	412	OUT	GET /lingos/nd/fresco/javascript/conditionizr/conditionizr.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.949321985 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"5032-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 1465 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 5b 6f db 36 14 7e 6e 81 fe 07 ba 28 2a 29 f1 24 7b 17 a4 b1 e7 35 5d 13 60 01 9a 3d 74 19 30 20 4e 03 46 a2 65 26 b2 e8 92 b4 53 b7 f1 7f df 39 a4 e4 50 96 6c a7 1d 3a e7 21 16 79 ee df b9 c9 d1 5e eb d9 53 b2 47 de 8a 3c e1 9a 8b 9c 7f 96 64 fe 73 d8 09 3b e6 fc 98 69 16 6b 9e a7 64 24 45 ae 7f 60 79 42 58 3e e7 f0 30 61 b9 56 84 c2 41 5c 32 d3 2c 5b 90 4c d0 04 19 a8 52 4c 2b 23 65 ac f5 54 f5 a2 28 e5 7a 3c bb 0e 63 31 89 62 47 61 e5 c1 30 bc 99 e9 b1 90 aa 47 8e b4 48 92 89 d0 5a 18 4d 47 13 2a 6f d3 64 21 0b a3 a7 0b c9 d3 b1 26 3f 76 ba 3f 99 a3 b3 d3 73 92 f1 98 e5 8a 25 78 10 3d 7b fa ec e9 1d cf 13 71 17 ba 5a c8 80 f8 a3 59 1e e3 23 f1 2d 41 9b 24 22 9e a1 5b 6d 32 cb 13 36 e2 39 4b 02 f2 05 45 10 f8 78 33 c5 88 d2 92 c7 da eb 97 87 73 2a c9 9a e0 2f cb fe c3 dd 98 d1 04 ce 4a c9 a1 79 be bf 7f 38 48 99 3e c9 98 09 e6 ef 8b 73 9a fe 49 27 cc f7 90 cc 0b 2e 3a 97 8e 28 1b d0 8a e6 2b 0c f6 31 9b 02 2c 2c 8f 39 53 a0 ea c1 ad a9 14 d3 36 d1 8b 29 6b 13 f6 49 3b ae 94 fc 53 aa c7 18 0a b8 25 af 89 e7 91 1e f1 ad 1a b4 d1 f3 82 80 ec 13 14 03 ff 7c 14 44 06 83 01 f1 54 2c f9 54 7b c8 12 de 28 e4 f2 c2 58 29 2f e8 bb 0a f8 88 f8 2d 94 fc f2 25 69 b9 31 ba 40 89 97 c6 1c e2 7c 24 d3 33 99 f7 1f 0e 97 ae 34 75 c7 75 3c b6 56 d4 58 63 0a d0 94 66 f5 aa 77 a5 af f6 d6 c5 22 96 8c 6a 56 44 df 2f d9 83 7e 9d df 5e 85 4a c6 c0 8f 41 6b a0 41 c8 42 3a 45 2c de 8e 79 96 f8 96 a9 49 dc 35 28 be ed 37 ba a0 17 19 db e8 01 5e 6e 71 20 e3 f9 6d b3 f9 c8 18 8e 25 1b 6d 36 df d2 48 96 91 41 61 86 1a 33 66 32 7d b7 a7 48 fe 75 8e c6 19 e4 59 93 a3 2b e7 ca 2f 85 7b a1 e1 c0 ea 20 fb 60 21 fc d9 cc 7c 84 d6 55 1e 2d 57 f9 e9 a6 63 48 93 a4 52 37 9a 29 ad a0 1b 38 75 d5 06 b3 b3 ec 9a c6 b7 0d 55 84 f4 20 c0 b0 85 5a bc 13 77 4c be 05 2f fd 7a 3d 54 ca 00 19 2e 49 0b 2a aa da 6e 5c 5f f4 58 8a 3b 92 b3 3b 72 22 a5 90 be 77 8e ca d0 79 a3 75 1f be d2 0c fc 4d 16 50 e2 1c 0c a8 24 c0 b2 56 8f 15 37 aa b0 d8 0b cc 2f c7 f1 4d c2 1a 1c 19 ac 64 34 38 ee ca 24 3c 57 9a e6 31 13 23 f2 46 4a ba a8 19 33 12 92 f8 18 5a 0e 52 3b 7d f8 f7 6b c5 aa 30 63 79 0a 69 4c f8 fe 7e 8d b9 84 45 b1 6c b4 e6 cd 05 bf 6c c8 97 5a 17 35 19 d0 36 02 d6 b3 7a e9 c4 83 b0 0c 52 79 17 60 95 f6 3c 99 01 68 d7 0c 86 19 a1 e8 79 33 5a 1b f2 14 1e 46 3c ad a4 aa b8 be 69 48 48 31 c5 5b 1c 06 70 8f 9d 7c 35 92 f0 53 34 f8 41 49 16 ba 1d bf 5f 4f 6d 97 d4 3c 57 c0 5d 41 65 c6 04 cf 2d 4b 0d 14 a4 98 d3 6c 66 46 94 21 b1 53 a0 bf 1b 78 cb f6 35 90 5b 8e c7 Data Ascii: X[o6~n()${5]`=t0 NFe&S9Pl:!y^SG<ds;ikd$E`yBX>0aVA\2,[LRL+#eT(z<c1bGa0GHZMGod!&?v?s%x={qZY#-A$"[m269KEx3s/Jy8H>sI'.:(+1,,9S6)kI;S%\|DT,T{(X)/-%i1@\|$34uu<VXcfw"jVD/~^JAkAB:E,yI5(7^nq m%m6HAa3f2}HuY+/{ `!\|U-WcHR7)8uU ZwL/z=T.In\_X;;r"wyuMP$V7/Md48$<W1#FJ3ZR;}k0cyiL~EllZ56zRy`<hy3ZF<iHH1[p\|5S4AI_Om<W]Ae-KlfF!Sx5[
Apr 26, 2024 15:14:06.949353933 CEST	635	IN	Data Raw: 82 6d c7 e4 2e b0 77 60 03 60 34 b4 90 6f 6d 1a 2e 21 fb 84 43 27 fa d0 8a 6a 45 05 57 06 11 a3 2e 68 8c b9 41 c5 aa 81 e6 3e cd 68 cc 90 ad 8d c3 7d cd 5b db 1f 76 cf 69 e3 bb 5b e9 bb 42 d6 2c dc 36 0d 48 ba cd 3d 69 fb 46 d0 d0 6d 36 80 83 90 Data Ascii: m.w``4om.!C'jEW.hA>h}[vi[B,6H=iFm6c{r"[xU`jl@$"7,BV+Hao=lODz0m-1,P`Km,7G-g0,lpeP8v6l;#uo%0:~7Trv!(sR-d
Apr 26, 2024 15:14:06.951219082 CEST	408	OUT	GET /lingos/nd/fresco/javascript/hyphenator/Hyphenator.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.202466011 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"144901-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 31399 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd eb 77 1c c5 b5 28 fe 9d bf a2 ad 73 c2 8c 60 34 e3 07 24 41 c6 10 63 cc c1 e7 f2 ba 96 39 e4 5e db 2b ab 35 d3 92 da ea e9 9e 74 f7 48 16 e0 2c 30 ef 47 4e 72 4e 1e e4 0d 04 59 16 42 36 b2 2c f3 30 04 d6 ba 90 af c4 5e eb e7 2c f2 ad d6 f9 4b 7e 7b ef aa ea ae ea ae 7e 8c 6c 93 dc bb 4e af 04 6b ba ab 76 55 ed da b5 6b d7 ae fd b8 a5 73 db 6d d6 f7 3c b7 eb f8 91 63 3d b8 34 98 73 7c 3b 0e 42 eb ce f6 ae f6 4e 6b c2 ea 7a ae e3 c7 56 e4 f6 1c 6b 4e 7c 76 03 df 9a 81 32 8b ce f4 74 18 2c 46 4e 18 dd 62 dd 66 59 07 82 c1 52 e8 ce ce c5 56 f3 c0 b8 b5 7b e7 ae 3b 2d eb 61 3b 9e 73 ed c8 7a c4 8e 9d b0 65 fd ef 2f 3e 0d dd ee 9c d5 ec f3 f7 3e be b6 ec d8 9a ed db ae 67 f5 82 d8 ea 06 fd 71 02 37 17 c7 83 68 b2 d3 99 75 e3 b9 e1 74 1b de 77 fa 54 be 93 f6 13 0b 52 e1 c3 8e e7 d8 91 d3 b3 86 7e 0f 20 c6 73 8e f5 f0 a1 23 96 18 59 02 0f c0 71 18 6d 01 d5 0d 14 68 9d 87 0e 1d 38 f8 c8 d4 c1 76 7c 32 86 2a 9d 5b 6e e9 dc 86 55 0f 04 fd 3e 60 21 b2 ec d0 b1 4e 44 bd a0 bb 07 11 00 63 88 9d 5e db 9a 72 1c 09 7c 18 39 f4 bd 1d 84 b3 58 f3 71 c0 6a df 09 67 9d fd 7e ef 31 bb 3b df 9e 8b fb 9e 15 07 d6 ac 13 5b a1 db b3 82 19 ea 6b 37 69 c1 ef e1 e7 d0 e9 0d bb 0e 7d 9a 71 3d 07 f0 ff a4 c3 cb ba 91 15 75 43 77 10 ef 90 3d b4 8e 60 a9 c0 f3 82 45 d7 9f 95 a0 2c 28 88 93 f4 af 53 0f b9 7e 3c 89 65 3b b7 9d 88 3c f8 61 89 59 9b b4 e2 70 e8 08 28 34 d0 ef f5 9c a8 6b 3d 16 06 0b 30 df d0 19 cf b3 66 86 7e 17 67 dc f6 dc 78 09 bb d6 0b 54 42 68 59 ce c9 ae 33 88 a9 ab 03 44 48 e8 47 f0 03 a6 14 91 e5 05 76 0f 26 c5 39 89 ef 01 dc 12 b5 32 eb 05 d3 b6 47 7f fa 76 df 89 06 76 57 25 3e fa 60 0f e3 39 e8 7e 86 7e ee 16 74 f3 bd be ef b7 bb 73 f7 50 d1 05 20 40 a4 49 a2 59 7a e3 9c b4 fb 03 8f a6 fd 56 2f de cb 11 66 45 61 d7 da 67 8d a5 0d b5 4f 44 63 56 bc 34 70 f0 75 0c 9d ec 9c b0 17 6c 5e 7a ec d6 d9 78 2f 56 ee f0 df f8 33 03 af ac 26 51 9c 32 a6 76 38 f4 9b e3 09 04 1d 68 e7 96 05 3b 54 57 df 3e ab 29 f1 6e 35 61 56 7b c1 e2 b8 f5 d4 2d 00 d1 6a 00 89 59 51 0c ab 28 6e ec bd 85 5e e1 43 13 28 1f c0 40 df e9 4f 3b 2a cc 1f 75 03 1f 3b fa 04 41 d3 ca da dd ae 13 45 d6 20 74 17 00 cb da 27 a4 07 f5 85 06 04 ba 11 84 4e 44 53 cf 3b 49 14 87 3f ed 6e 3c b4 71 3d 77 87 44 8c 40 37 d3 29 03 81 45 a3 02 3d 44 6b 00 a8 05 29 66 26 44 8a e0 84 be e8 02 01 76 e7 6c 7f d6 d1 2a 4c 05 16 62 41 ef 8c eb 47 b1 63 d3 8a e2 9d d9 a1 54 e9 d0 df 88 65 bd d2 3e 51 b6 75 4b 25 2a 9f 7a 74 fa 84 d3 8d db 77 23 f2 fd d9 96 8a db 68 38 18 Data Ascii: w(s`4$Ac9^+5tH,0GNrNYB6,0^,K~{~lNkvUksm<c=4s\|;BNkzVkN\|v2t,FNbfYRV{;-a;sze/>>gq7hutwTR~ s#Yqmh8v\|2[nU>`!NDc^r\|9Xqjg~1;[k7i}q=uCw=`E,(S~<e;<aYp(4k=0f~gxTBhY3DHGv&92GvvW%>`9~~tsP @IYzV/fEagODcV4pul^zx/V3&Q2v8h;TW>)n5aV{-jYQ(n^C(@O;u;AE t'NDS;I?n<q=wD@7)E=Dk)f&DvlLbAGcTe>QuK%ztw#h8
Apr 26, 2024 15:14:07.202554941 CEST	1289	IN	Data Raw: 04 21 8c eb 21 e8 6b a4 ff 1c da b3 ce 3d a7 8a 4b 97 e2 7b 3f 30 0a df 09 11 65 d6 bc b3 34 b1 60 7b b0 62 03 ea 09 5f 65 62 0e 12 98 96 27 da e4 bc a4 ef c4 b6 d5 b3 63 5b 43 20 72 0c 00 87 3c 02 67 eb 29 d8 01 fc 79 c9 c3 e2 20 f0 a2 b6 eb c4 Data Ascii: !!k=K{?0e4`{b_eb'c[C r<g)y 3:L3rF:9F9QI#{pG)]&QbJt9yI`fT{]}0^jbW\FzAI%Ga@tz)L ,NKC\0>%
Apr 26, 2024 15:14:07.202569008 CEST	1289	IN	Data Raw: 4c f9 28 52 b9 30 73 f3 76 34 8c ed 78 d8 a3 6a a6 a6 66 5c 6c 6a c6 4d 9b 9a 72 17 00 c0 bc eb 78 f1 b7 0e de 61 39 80 70 60 5f 2e b0 ad 38 1e 8a 39 06 c9 c5 8d 90 55 b4 ad 87 a1 10 fc 2f 74 a9 74 44 95 07 fc 1d c2 70 8d 8d 86 d4 68 a8 4f 32 52 Data Ascii: L(R0sv4xjf\ljMrxa9p`_.89U/ttDphO2REowu v0upg18~m!H=55^h=JJyff,(D)&2Y#N^tm_m&\|n
Apr 26, 2024 15:14:07.202584028 CEST	1289	IN	Data Raw: 32 51 4d f2 09 80 fc d4 c2 72 57 9f 45 28 80 7c 9a 0d 81 cb 5f c9 56 0b fa eb d9 b1 2f fa 8b 7f 7e f3 28 a3 2d 33 52 b6 4c 38 ca 7f eb e0 9d f3 b8 f1 c1 bf 16 b2 8a 39 94 df e9 fe 7d 00 9d 8c e0 cd 3c de 7b 93 02 c5 b2 17 66 bf f5 c0 b7 43 5b 65 Data Ascii: 2QMrWE(\|_V/~(-3RL89}<{fC[eg(dCdhPcbdTO11X917\N=s@V=nl<8?!_\|@{_\|0}/ODu&0!%)#,QS\|
Apr 26, 2024 15:14:07.202595949 CEST	1289	IN	Data Raw: 42 60 8c 78 95 b9 88 36 a8 b8 6c ee 9c 40 d6 3f 25 18 fc c3 dc ec 4c 9e 4f 50 0d ec 93 da 00 25 14 af 81 48 6b 44 80 0a 24 14 33 c7 11 25 6f 1e fa 94 61 e3 99 82 37 57 9b 27 3d 8d fa 16 c4 40 cf 84 cb 72 3c fa c0 6b d0 a6 5d df 14 05 46 69 17 55 Data Ascii: B`x6l@?%LOP%HkD$3%oa7W'=@r<k]FiUVCVjStA4G?e?j#2_>L.}5JVx$c,9\"A05:5M"CTHw(sSF^:"qiS{M!OEeM`O
Apr 26, 2024 15:14:07.202651978 CEST	1289	IN	Data Raw: ec ec bf b3 b3 6f b0 b3 bf 63 67 7f cf ce be c9 ce be c5 ce be cd ce fe 91 9d 7d a7 14 25 aa 87 64 09 52 96 9f 65 cb a7 d9 f2 73 6c f9 05 b6 fc 22 5b 7e 89 2d bf cc 96 5f 61 cb af b2 e5 d7 d8 f2 eb 6c f9 27 6c f9 a7 6c f9 67 6c f9 e7 6c f9 17 6c Data Ascii: ocg}%dResl"[~-_al'llgllll+k[;{&[~-al[^ag*[^cu\|-g/Kl![-?c3333;;6;Gv._]j
Apr 26, 2024 15:14:07.202709913 CEST	1289	IN	Data Raw: d8 ea db 6c f5 8f 6c f5 1d b6 ba cc 56 cf b0 d5 15 b6 7a 96 ad ae b2 d5 35 b6 fa 1e 5b 5d 67 ab e7 d8 ea 79 b6 fa 3e 5b dd 60 ab 9b 6c f5 22 5b bd c4 56 3f 60 ab 1f b1 d5 8f d9 ea 67 6c f5 73 f6 ee 33 ec dd 67 d9 bb a7 d9 bb 2f b1 77 5f 66 ef be Data Ascii: llVz5[]gy>[`l"[V?`gls3g/w_f}c{Bx %=;;";;2;;*;O9;vo`daUv]v~?oMv";_b?d?b?f?c?g?"{%W_g
Apr 26, 2024 15:14:07.202754021 CEST	1289	IN	Data Raw: 2b a7 13 32 82 99 a3 f8 8e 42 ae 1f 79 c4 49 f3 c8 5f 95 d1 df 4e 67 bf 5a 74 70 d8 99 3d 78 72 60 1e 14 ff 56 3a 34 5e 84 67 07 a0 93 4a da 25 ee 8b 6a 79 6e 44 b1 b5 a9 7f 75 1d cf 0c 43 14 2d ed b3 7c 67 51 34 db 1c 3b 76 2c ba f7 d8 b1 69 3c Data Ascii: +2ByI_NgZtp=xr`V:4^gJ%jynDuC-\|gQ4;v,i<hiY^`n1@a0(M -b%o8`,e.V2uxyq.@f#om:i7TH7y!dhpoG&n`jLLS2`u
Apr 26, 2024 15:14:07.202765942 CEST	1289	IN	Data Raw: 0e 35 db 03 66 ea b7 07 c3 68 0e 3a 1b 14 f4 56 d9 53 cc e1 8d f1 49 82 76 04 46 23 c1 9b 4d fb fc ee ee ef 4f fe bc 1f d9 15 90 44 3f be 29 6b 20 4f bd bc 17 3a 01 97 91 2e 92 41 cb 72 5b 96 03 64 6e 9e 5f bc 21 6a f2 c4 cc 7e 4a 40 65 54 9a 38 Data Ascii: 5fh:VSIvF#MOD?)k O:.Ar[dn_!j~J@eT8Bl6IYUvCAjrg:AV[695dsNdW5(dDf.6Fe``%g\|7hx'.GOsKZ<a#Rnqy1Qi
Apr 26, 2024 15:14:07.202826977 CEST	1289	IN	Data Raw: 11 cd 8f 2a 53 e4 e6 45 23 86 82 48 f2 82 1e c4 d7 7a 24 41 4e 1b 0a 41 44 0e ea 06 82 f0 01 53 54 de 92 38 fb 99 d3 6e ba 8a c9 1d 4a 6c 21 18 a6 e4 11 90 4b 1e 22 2f a8 30 bd 4c 2e 34 f8 d0 66 fb be 25 2b c9 28 a2 84 85 4e 52 a2 c1 b9 7b 91 6c Data Ascii: *SE#Hz$ANADST8nJl!K"/0L.4f%+(NR{l)$%}@=6KSR74UbrSrk\|9+K;n-a]G'qs?7a%XQ:iC/4MBd"qFC5(gt E/z(@o
Apr 26, 2024 15:14:08.742506981 CEST	406	OUT	GET /lingos/nd/fresco/javascript/views/DropDownMenus.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:08.985611916 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:08 GMT Server: Apache Accept-Ranges: bytes ETag: W/"7326-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 1753 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 59 5f 6f db 36 10 7f b6 3f 05 e3 05 95 3c 24 4a d2 6e eb d2 22 1b ba 76 05 02 34 45 b1 66 0f 7b 64 24 ca 26 4a 8b 06 49 d9 0d d6 7c f7 1d 49 89 a2 24 4a 72 b2 06 45 1c 53 77 c7 bb df fd d5 f5 ec c7 39 d2 ff d0 5b be bd 17 74 b5 56 28 4e 97 e8 e2 f2 f2 f2 f4 f9 f9 c5 05 fa 48 d4 3b ba 21 85 a4 bc 90 e8 83 ca 92 8a e1 0d 63 c8 30 48 24 88 24 62 47 dc a3 db 35 95 48 f2 5c ed b1 20 08 fe 56 6b 82 52 5e e4 34 23 85 a2 98 21 5c 64 68 2b f8 56 50 a2 b0 b8 47 b4 c8 b9 d8 60 05 97 20 9e 6b 19 fd 7b 51 bc 78 eb cb b8 6e 78 16 cb 04 a1 7f 78 89 e4 1a 83 5a 05 57 5a 44 46 65 ca b8 24 48 96 e9 1a 0d f1 1a 5d 2c 5f 09 b4 54 21 5e 30 ad 91 16 81 d3 94 8b 0c 17 29 41 7b aa d6 c6 10 45 c4 46 82 96 e6 0b a3 29 e8 48 10 5e 09 42 40 5d 85 ee 41 0d f8 24 82 64 20 44 71 2d c6 f0 b6 2c d2 50 9d cd e7 f3 e3 38 2f 8b d4 e8 11 2f d1 bf f3 f9 6c 87 05 52 40 c7 4b 75 9d a1 2b b4 58 bc b6 87 34 17 78 43 e0 e4 38 8e 32 ba 4b d2 35 56 a7 f6 30 5a 56 34 18 44 ed c8 0d 29 ca ea 60 2b c8 ee 8d 3b 04 e6 a2 64 cc 7b f6 b9 bc db f4 1e 30 b2 c2 e9 fd 0d cf bc db 36 98 16 a7 9a f4 14 1c a9 e0 0b 11 d1 32 c9 b0 c2 71 64 e9 4f 37 c0 a0 35 99 cf 9c 4d 39 2d b2 ea 8a 98 ec 00 16 6d e3 cc da 88 c5 8a a8 63 73 83 79 94 a4 a5 10 f0 79 6b 1e 68 8b 0c 9d 74 1a 56 1c 89 71 aa 54 f1 82 51 70 bc be 22 5e 24 15 d9 c2 f0 09 a2 4a 51 d4 ac 70 f2 e0 2b 25 d7 7c 7f e3 34 3a 41 b8 54 fc 3d 4f 4b d9 28 d7 5c da b7 40 1b 38 f3 3d 24 89 ba b5 5f 7b ce 9c cd 68 8e e2 86 f8 48 fb d3 5e 33 9b 1d c7 0b 49 18 49 15 58 71 c7 4a 11 1b dd 2d 4b a5 40 b2 c6 f2 2d c3 52 02 69 6d 60 cd 3e ab 69 24 83 b8 7e c7 f7 45 1c 6d 48 46 cb 4d 54 09 9a d9 e8 f0 09 72 2c 95 7b dc 0b b3 96 54 7a c7 68 b1 92 71 84 c1 d1 58 29 01 7f 09 8a 4f c9 d7 2d a4 0c c9 a2 13 a4 44 49 9a bb 50 dc 41 d2 17 67 dc 14 e1 57 39 15 5a 83 24 d7 64 b5 c5 e0 1f f7 5b ff 7a 38 41 17 e7 e7 cb ae e3 d6 60 c6 4d 27 94 52 46 b0 a8 e1 77 06 05 a2 27 e4 c8 36 d6 54 c6 4d fe d4 30 db 50 d2 a4 5a 95 03 7d d3 f2 cc df db 8e 5f 7c af e8 87 9e 4f 1e 03 7e 8e 99 b4 e8 3f 74 70 32 d8 7e 24 5f 55 4c 15 d9 9c 20 c1 77 20 ec 16 df 01 04 e4 6b 13 e5 05 90 00 32 9a 28 d1 7f c7 0e 12 fd 2d 61 a4 58 41 dd ba ba 42 e7 95 5d 3e 83 53 51 a7 20 f8 34 ae 55 31 54 50 9d 28 cb 20 9d ad 05 9e b7 b5 f8 90 42 21 36 6b b8 aa e8 c0 e6 e8 3c 1a b6 f8 13 d4 b3 09 8b 75 c9 ab 0d d0 7f 37 2a e9 6f 01 8b 7d 06 cf 62 70 bb 67 b0 e1 7d bc c1 01 b6 83 0d a6 05 55 3a 4c ff c0 a2 2e 35 c3 85 1a ba 54 a2 f8 56 1f 6a 43 18 d5 f1 a6 35 48 36 1c 7a 9e e9 56 71 5d Data Ascii: Y_o6?<$Jn"v4Ef{d$&JI\|I$JrESw9[tV(NH;!c0H$$bG5H\ VkR^4#!\dh+VPG` k{QxnxxZWZDFe$H],_T!^0)A{EF)H^B@]A$d Dq-,P8//lR@Ku+X4xC82K5V0ZV4D)`+;d{062qdO75M9-mcsyykhtVqTQp"^$JQp+%\|4:AT=OK(\@8=$_{hH^3IIXqJ-K@-Rim`>i$~EmHFMTr,{TzhqX)O-DIPAgW9Z$d[z8A`M'RFw'6TM0PZ}_\|O~?tp2~$_UL w k2(-aXAB]>SQ 4U1TP( B!6k<u7*o}bpg}U:L.5TVjC5H6zVq]
Apr 26, 2024 15:14:09.290570021 CEST	476	OUT	GET /lingos/nd/fresco/styles/LINGOs/images/customize/logo.png HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://lingos.netdimensions.com/lingos/nd/fresco/styles/LINGOs/main.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:09.536241055 CEST	576	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:09 GMT Server: Apache Last-Modified: Mon, 27 Mar 2017 13:24:24 GMT Accept-Ranges: bytes Content-Length: 206 Vary: User-Agent Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 50 08 06 00 00 00 04 12 a9 a9 00 00 00 07 74 49 4d 45 07 e1 03 0d 17 22 27 bf d7 86 34 00 00 00 09 70 48 59 73 00 00 4e 20 00 00 4e 20 01 16 7d 99 de 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 5d 49 44 41 54 78 da ed c1 31 01 00 00 00 c2 a0 f5 4f 6d 0d 0f a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 be 0d 1a df 00 01 59 64 ec 6f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPtIME"'4pHYsN N }gAMAa]IDATx1OmYdoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49733	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.418792009 CEST	414	OUT	GET /lingos/nd/fresco/styles_core/base-plugin-custom.css HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.660981894 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"11054-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 2904 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 1a db 6e db 3a f2 7d bf 42 9b a0 68 53 58 8a ec c4 4e 62 a3 0f bd 9c 9c 53 60 8b ee ee e9 c3 02 8b ae 41 5b b4 cd 46 96 54 89 4e ec 0a fe f7 9d e1 45 22 25 ca 76 2f 38 12 6c 4b e4 70 38 1c ce 9d 3e 7f ff e1 9f 1f ff fd e9 dd fb b7 f0 79 fd 8f 8f bf 7b c1 d7 af fe 26 8b 53 12 f9 31 2b 78 19 b1 22 8b c9 6e 9c a4 09 dd 9f 1f 02 5f 10 16 7f 27 b8 57 64 24 f9 8e 31 b3 0d e7 69 52 ce d3 38 cd c7 e7 f7 f7 f7 93 19 99 3f 2c f3 74 93 44 be 6a 1d 89 6b bf 89 83 68 97 10 9e 53 0a 3d 09 27 2c a1 79 39 8f 29 c9 c7 b3 94 af 26 4f 2c e2 ab 71 3f 0c 9f 4d 32 12 45 2c 59 8e af b2 ad 17 b6 51 f2 9c 24 40 68 4e 13 3e 49 1f 69 be 88 d3 27 7f 3b 26 1b 9e 4e 66 69 1e d1 5c 90 3e 59 c0 34 7e c1 be d1 71 9f ae dd 04 78 a4 34 46 ec 71 f9 35 14 99 73 f6 48 3d 52 b7 70 c6 63 da 73 42 d9 8d 02 d0 44 ed 60 cc 3b 71 ed 5d 03 e7 9b bc 00 90 2c 65 09 a7 f9 64 4d f2 25 4b fc 98 2e f8 78 98 6d 35 7f 64 c3 c0 68 c8 d9 72 25 5a f6 4d a2 7f 01 ca 20 a1 3c f2 11 a5 e7 de 4c 63 07 f5 b6 8c 57 2c 8a 68 b2 0f 22 c2 c9 27 32 8b 69 31 7d ca 49 96 01 f8 1a e6 5f 51 81 3e 74 01 78 e7 31 7d a4 b1 68 f4 78 14 70 ba e5 fe 9c 22 f9 f5 54 48 97 63 28 97 83 56 3d 67 67 54 6a 09 bb 05 09 eb e3 17 7e 86 47 90 05 c0 40 0e a3 a6 a0 20 d8 14 75 60 6f c1 95 2f 8d dd 67 6b b2 a4 52 dc 34 60 af 1a 41 8a 79 fd 12 d1 62 de d8 b7 bd 09 59 b6 b0 6e f2 f8 c5 59 10 5c 8a b7 e2 32 a2 f3 34 27 9c 5e e2 a0 e9 26 0b 96 6c 71 76 61 8a 62 96 16 8c b3 34 19 df dd 3e f3 86 b0 71 46 5f 4e 33 4a 38 50 aa 9e f6 36 61 df 37 79 94 3e 25 bf 68 fa ef 9c 19 39 fd b3 33 2f 16 33 7f 4d f8 1c e4 e9 fe fe 8d ff e1 f5 a7 b7 7f 94 c2 bc 3c 49 01 9e a5 71 24 c1 0a 1a 97 6d 5d 0f c3 e1 90 cc 2a 08 af c6 a8 8d e7 42 5c 35 c4 7f e7 31 29 8a ff bd 3a 63 a0 60 fe 9a 9f 7d ee 35 fa 5e be 3a f3 aa 4e 03 8d c0 61 d9 1e a9 2d d7 a8 2d 13 9e 66 e3 c1 0d 3c 08 4d 0f 05 b0 17 a0 12 83 66 a9 51 3e 02 f5 41 23 8a 34 66 91 77 fe ee 0a 6f 65 5b a5 89 e8 ec 95 f6 a2 d5 ad e6 c9 c8 52 ec a0 69 18 7f 02 ab ee 06 07 c2 d3 b5 a3 df f4 24 57 52 c5 f1 d7 a2 46 fc 52 cd c0 3b 71 19 e2 20 fc 9a 70 6d 86 a3 b0 c7 17 9b 35 d8 d3 5d 29 8d aa 72 5b 35 3e 07 32 9b ed 5e 90 a7 4f a5 b2 85 c2 8d d9 1e 50 e1 0d 27 0e be 75 2d dd 31 83 f8 f2 f5 56 9b 53 0c 2a 96 d8 f0 28 5e 25 d8 71 d0 06 dc 9f 86 53 d0 8c f4 49 8e f4 37 3c 4c a5 61 39 8d 09 ba 48 ed e1 47 20 7c 6a ad e2 59 ec bc 3f 18 2a e1 44 d9 34 19 06 12 ed 69 05 ff 42 1e c1 ee e5 2c e3 97 5f fe b5 a1 f9 ee 92 af e8 1a 54 7e 46 0a aa d5 7f c3 7c a4 bb 98 de 8a 6b 3a 18 8e b6 83 eb 30 c8 92 e5 d9 85 d7 d0 6a 41 7a Data Ascii: n:}BhSXNbS`A[FTNE"%v/8lKp8>y{&S1+x"n_'Wd$1iR8?,tDjkhS=',y9)&O,q?M2E,YQ$@hN>Ii';&Nfi\>Y4~qx4Fq5sH=RpcsBD`;q],edM%K.xm5dhr%ZM <LcW,h"'2i1}I_Q>tx1}hxp"THc(V=ggTj~G@ u`o/gkR4`AybYnY\24'^&lqvab4>qF_N3J8P6a7y>%h93/3M<Iq$m]B\51):c`}5^:Na--f<MfQ>A#4fwoe[Ri$WRFR;q pm5])r[5>2^OP'u-1VS(^%qSI7<La9HG \|jY?*D4iB,_T~F\|k:0jAz
Apr 26, 2024 15:14:06.660995960 CEST	1289	IN	Data Raw: 90 6e 78 cf 7c 05 ef 65 be 4b 17 5f ba cc 87 df 1f 81 56 79 7e bf af 79 e8 b3 24 db 70 2d 0b a1 17 0a df 12 56 5b 8a 4b 56 fb 88 9b 76 fe 56 5c 72 f3 b4 d0 5c 89 ab 12 7e 12 b1 4d 21 d9 0d 8b 93 41 97 58 a3 9f 26 f1 ae 27 1b 5c 5d da 4f 06 b7 74 Data Ascii: nx\|eK_Vy~y$p-V[KVvV\r\~M!AX&'\]Ot]p-7\z#TT/X/\|SgS4{.:NJD}sf9!p\|?mw9R,_UI0xzl,NrQF%@-O %+3.VP!\
Apr 26, 2024 15:14:06.661007881 CEST	773	IN	Data Raw: a4 55 ab 3a 3e c4 48 18 1c 03 f1 bc e3 f5 9b 8e b1 01 2b fc 55 0a 6e 01 4f 0e e3 8a d1 12 4c e4 cf 80 4d b6 f6 ba 31 54 81 f5 a1 f1 da ed 18 35 e7 81 1d 29 ed 03 3c c9 c6 43 09 e3 f8 52 3b 16 7c ae 8d ad 74 5e c6 b1 65 5f da d9 c3 41 a8 21 1e fa Data Ascii: U:>H+UnOLM1T5)<CR;\|t^e_A!x`WUSoljDfNs2:hEsqLHu\CyoYS]Gs9^JGao(]xw-]^H#^mWC'"T;%9Ztw5B5cdZ}d<6:OuKP:BB%U
Apr 26, 2024 15:14:06.700133085 CEST	403	OUT	GET /lingos/nd/fresco/javascript/views/jqueryInit.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.944797993 CEST	867	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"608-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 410 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 51 dd 6f d3 30 10 7f 6e a5 fe 0f 87 29 ab c3 ba 04 24 1e d0 4a 19 15 aa b4 37 24 3e 9e 96 21 dc e4 da 06 a5 76 38 9f b7 a0 2e fc ed 9c 93 f2 69 c9 b2 cf 77 bf 8f 3b 4f 53 f3 d5 b4 1f 90 43 a3 8f 93 31 c0 08 89 1c c1 25 ec 8d 2d 6b 5c c7 68 32 ee 92 05 4c c6 93 f1 36 d8 82 2b 67 ff ce ea 76 4f 73 c0 04 04 3f aa b6 10 e3 d4 b3 e1 e0 61 b9 84 17 cf 5e 4a 0a b2 0c 08 bf 05 f4 0c 5c 1d d0 05 96 ea d1 7d 65 4b 77 9f d6 ae 30 91 36 25 ac 9d 29 35 53 c0 64 11 0b 48 9c 91 8d d7 4e b6 90 38 de 23 01 0e b6 7e cb ed 90 df a3 6f 9c f5 78 8d a6 44 d2 6a 25 7d 5d ac db 02 9b c8 ac 92 e8 45 45 62 35 38 1d 99 1a 89 7b 34 9d a0 1f b1 e5 5e b6 93 66 bb 7f fa f5 58 63 c1 8e d6 be 30 0d 6a 6c 1b 01 79 c9 f4 64 20 6b 70 0a 7f 32 42 db d4 a6 40 9d dd 3c 52 8f a7 4f ce 66 3a 79 7a 3e 4f f3 ec 72 f1 6a f9 fa ea 4d 7e 93 e7 f9 ed e7 2f c7 87 ee c7 6d b6 9b c3 2c cf a7 67 b3 e8 e0 7f 71 fe 64 fb c1 84 fe 48 8e 30 68 de 19 02 de 57 7e c5 4c b0 04 6d cd 5d b5 33 62 33 0d 1e 69 b5 43 cb a9 4c 18 db 77 5b ad de ee c9 1d 70 18 c4 c5 f3 e4 0a 94 b3 03 9f 92 ef 96 60 83 5b 47 78 7a 5a 0c 0a a5 2b c2 21 d2 6c 5c f9 3d 15 23 51 aa da 04 46 fd 4b 78 0e 2a 57 0a ce 61 40 ca 25 c6 a7 2e 7e 02 5c 17 8e 9a 60 02 00 00 Data Ascii: ]Qo0n)$J7$>!v8.iw;OSC1%-k\h2L6+gvOs?a^J\}eKw06%)5SdHN8#~oxDj%}]EEb58{4^fXc0jlyd kp2B@<ROf:yz>OrjM~/m,gqdH0hW~Lm]3b3iCLw[p`[GxzZ+!l\=#QFKx*Wa@%.~\`
Apr 26, 2024 15:14:06.946841002 CEST	406	OUT	GET /lingos/nd/fresco/javascript/views/accessibility.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.189224958 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"2409-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 968 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 55 6d 6f db 36 10 fe ec 00 f9 0f b7 2e 80 a4 cd 52 d2 01 1b 90 75 1d 90 c6 f9 90 a2 4b d0 26 db 30 0c c3 40 89 67 8b 2b 4d 0a e4 49 a9 50 f8 bf ef 48 4b 7e 69 9c 6e fb ba 20 71 44 df 3d 0f ef e5 b9 d3 e9 57 c7 47 10 ff e0 d2 36 bd 53 8b 9a 20 ad 32 78 7e 7e 7e 9e 7f 73 f6 fc 3b b8 41 9a a9 25 1a af ac f1 f0 86 64 b1 81 5c 68 0d 11 e2 c1 a1 47 d7 e1 8e f1 be 56 1e bc 9d d3 83 70 08 fc 4c 35 42 65 cd 5c 49 34 a4 84 06 61 24 34 ce 36 4e 21 09 d7 83 32 73 eb 96 82 f8 22 b0 f3 48 f2 f8 72 48 9f 5d ee 92 5c 6f 41 cf b2 02 e0 37 db 82 af 05 47 66 2c 45 0e a9 7c a5 ad 47 f0 6d 55 c3 53 e0 18 cd 1a d8 b2 af 22 b0 46 87 98 22 87 a8 2a eb a4 30 15 c2 83 a2 3a e6 42 e8 96 9e 03 8d 07 ad 2a 8e 12 41 2c 1c 22 07 4c d0 73 20 fc 1f 1d 4a 66 21 1b 79 22 78 2f a9 58 b0 d3 e3 a3 e3 a3 74 de 9a 2a 84 92 1a b1 44 df 88 0a b3 8f c1 30 d9 9c 8b b6 91 82 f0 ae e2 4b cc 3b 14 12 dd 85 46 47 f0 12 36 60 76 f5 62 81 19 30 76 32 e9 84 03 11 5c 66 aa 63 af 93 34 f9 d2 7f 8a 66 53 92 bd 08 de 6a 0e e9 e8 3d 10 44 06 39 82 7f e0 a7 1f 93 ac 10 4d 83 46 6e ee 8a e0 c9 88 1c ad ec 3b 58 3c d2 3d 67 6c 5b da 26 39 f2 4f d8 ad 70 b8 b4 1d a6 83 fb 6a 0a df 9e 9d 9d ad 4f 2b fe 58 bd 88 75 38 49 a5 ad da 50 dd 8c 11 42 f6 8f d8 4e 4f e1 de 72 b9 2b dd 4a 8c 8d 51 a6 53 5e 95 9a db 1f f3 06 17 13 5f 17 25 26 a6 4c e8 95 83 86 33 99 02 72 87 82 59 ca 81 8f 82 8e ff 12 9d 60 bc 6a 08 e6 8a b9 f0 43 c3 1d 57 c4 0a b1 2e 0a 26 dc f5 fa 6d 8b ae 2f 58 2c 5c 17 55 2a ad a8 e7 c8 96 48 b5 0d 93 11 f9 5e 21 6b 0e 41 5a 65 16 8c 12 34 85 46 a3 08 9a 33 be c1 8a 22 d5 ec f6 a7 20 ad 4d 60 40 16 3c b2 fa 6a 8c f1 b1 61 e0 13 15 b5 ac da 1e 0c b2 d2 d8 2d f5 d8 a1 63 75 0f d2 2c 03 77 a7 f0 01 2a 2d bc 47 cf b9 c7 ea 85 24 59 e8 59 31 b6 fe 8b a7 e5 51 68 34 0b aa 87 32 03 ff b0 6f 69 65 bf 15 c3 46 1e 53 f8 08 89 92 c9 f7 c9 41 ae 29 24 31 90 8d 3d 5f b7 24 0f 03 17 ac c2 29 91 6b d5 21 7b 84 80 1d 85 e7 d1 e0 50 63 27 0c 05 a3 94 2a 74 df 27 ab 6c 2b 96 c9 5e 3a 15 f7 e9 7d 4e 36 f7 d6 51 5e f6 79 65 75 bb 34 9f 66 34 f9 37 e9 3c c5 b5 93 11 2f 9b 46 8b 3e 37 d6 c4 90 09 3f 70 a4 af 7e be 99 bd b9 fa 3d d1 a2 44 5d 04 74 51 f6 45 50 56 31 50 fc f1 28 83 07 eb de 0b 67 5b 23 43 fd 2e 38 f5 19 06 09 96 28 cb fe d6 5c 5f fd ca 4a bd f9 65 76 b1 9e 9a 55 fc e4 df 71 24 e0 3f 10 ac 6b 10 6a 26 91 58 82 d7 57 69 b6 3b ff 5a 79 ba 9d df 71 dc 82 27 e9 32 86 7c cf a5 e7 49 78 09 49 4c 28 a8 59 4c 61 7c fe 53 f2 5d 7b 5f 88 e1 4c f5 dd 8e bb 41 92 f9 b2 d5 a4 72 cf 8d ad Data Ascii: Umo6.RuK&0@g+MIPHK~in qD=WG6S 2x~~~s;A%d\hGVpL5Be\I4a$46N!2s"HrH]\oA7Gf,E\|GmUS"F"0:BA,"Ls Jf!y"x/XtD0K;FG6`vb0v2\fc4fSj=D9MFn;X<=gl[&9OpjO+Xu8IPBNOr+JQS^_%&L3rY`jCW.&m/X,\UH^!kAZe4F3" M`@<ja-cu,w-G$YY1Qh42oieFSA)$1=_$)k!{Pc't'l+^:}N6Q^yeu4f47</F>7?p~=D]tQEPV1P(g[#C.8(\_JevUq$?kj&XWi;Zyq'2\|IxIL(YLa\|S]{_LAr
Apr 26, 2024 15:14:07.189244032 CEST	137	IN	Data Raw: 28 67 2d 1f fc 3e 56 74 bd 1f 86 86 6d 97 01 2f 80 64 ce 27 cf 25 7f 3a d6 e9 76 49 f2 84 30 6e dc 40 71 49 ee d7 87 85 7a 2d e3 ce 8b ae 05 bf a0 16 c8 37 09 22 97 ae 85 28 b7 de c3 fa 5c 33 9d 3c a6 1a 36 6f f2 f5 a1 5b 46 ec 01 dc b0 17 2f 83 Data Ascii: (g->Vtm/d'%:vI0n@qIz-7"(\3<6o[F/}m}s1@c_CA`Uoi
Apr 26, 2024 15:14:07.191055059 CEST	399	OUT	GET /lingos/nd/fresco/javascript/views/common.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:07.434777021 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:07 GMT Server: Apache Accept-Ranges: bytes ETag: W/"10572-1647027592000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:52 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 3485 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 1a 6b 6f db 38 f2 b3 0b f4 3f 70 7d c1 4a d9 3a 4a 7b 7b fb 61 9b 26 40 9b 76 d1 1c b2 dd a2 49 af 58 14 c1 41 91 68 9b a9 2c fa 48 3a ae af 9b ff 7e 33 c3 87 48 59 4e 7a 06 12 db e2 cc 70 de 0f d2 87 3f 3d 7e c4 e8 8f 9d ca e5 46 89 d9 dc b0 bc da 67 cf 7e fd f5 d7 83 bf 3f 7d f6 0b 7b c7 cd 6b b1 e0 ad 16 b2 d5 ec dc d4 45 40 79 d9 34 8c 50 34 53 5c 73 75 cb a3 c5 cb b9 d0 4c cb a9 59 97 8a 33 f8 6c e6 9c 55 b2 9d 8a 9a b7 46 94 0d 2b db 9a 2d 95 5c 2a c1 4d a9 36 4c b4 53 a9 16 a5 81 8d 98 9c 12 91 ed cd 59 3e 3e 8d 89 9c 75 48 e3 fd 82 b1 3f e5 8a e9 79 09 9c b5 d2 10 8d 5a e8 aa 91 9a 33 bd aa e6 6c 17 32 71 63 11 57 00 2b 0c 93 6d 83 3c 11 8d b2 aa a4 aa cb b6 e2 6c 2d cc 9c 64 31 5c 2d 34 30 4a 5f 1a 51 01 97 9c 95 33 c5 39 30 6c d8 06 18 81 77 ae 78 0d 54 8c 24 3a 84 9c 08 45 0a 3b 7c fc e8 f1 a3 7c ba 6a 2b 64 25 6f cb 05 d7 cb b2 e2 fb df 1e 3f 1a 85 6f c5 75 59 7d 61 c7 2c c0 d1 f2 48 f3 66 5a 80 b2 8d 54 1b 02 c9 f7 8f e0 f9 1d fe 4b d0 45 2b cc 05 37 46 b4 33 9d 90 61 44 67 2f cf 0a 3d 97 eb 83 5b 51 1e dc e8 6c bf 50 7c 21 6f f9 69 53 6a 9d 67 c9 d2 91 47 98 83 2e 3b 84 b2 ae 1d b4 68 6f 85 16 d7 0d cf 02 33 20 28 bc fc ae ac 91 65 fd 49 d4 33 6e c0 24 06 34 e5 f9 60 b7 a5 62 b8 db c5 52 b4 2d 57 31 ab 6b 42 f8 0d 8c e6 80 47 62 ca 72 b3 59 72 b0 c3 5e 31 6d 0b ed 91 8e 59 e6 d1 32 0f 3c 52 dc ac 54 cb f6 f2 f1 8b 5a dc 1e 9e 80 cb 08 30 9b 32 af 38 78 02 8f e9 7b 4a 56 72 27 f2 e8 8e f1 06 cc 9c 92 6b 57 4d e3 96 f1 ff 9d 95 74 64 df f0 85 9a b2 a4 0f 50 6c ae 40 57 bc ac e6 c1 e4 cc 0a cf a2 17 6a 61 cf 60 10 1d 03 3e 7e 40 16 fa 10 8e c9 8b 65 d9 02 5c a4 b5 7c 6f 17 4a 2d 17 48 12 97 8b 25 c4 26 6a 3e 98 c7 bf 00 a8 30 10 db 33 ae de 42 64 34 40 70 dc 72 e3 2c 76 06 9e 34 ee d3 de 2b ca 9b f2 eb 7f f2 2c 95 74 d2 17 cc bd 56 aa 79 ee b9 80 24 90 67 a5 b3 d5 64 10 bc 2e 4d e9 e1 c1 60 10 bd e2 bf 3c df 01 0c 91 5e 71 ad 9f 77 de 96 23 fe 96 8e a3 17 fa 11 c2 14 da 94 66 a5 c9 7f 1c 99 ec 3e 3c af ac b9 59 34 96 00 fe 73 2e dd 57 51 ef 85 d6 58 87 10 28 85 75 76 a4 46 09 4b 1b 8c 48 0c 30 0b 94 3d 40 ae 47 ea 5e 58 7c 15 53 d1 d6 f9 d8 7b e6 9c a3 bd 18 a4 13 5e 99 cf 98 36 8e b3 3f df bc fc 90 5d 8d f7 1f a6 a5 f8 b2 81 24 f3 09 12 5c 8e 12 58 da 83 c4 d2 bc 02 e9 19 30 37 07 ad 6c 21 59 6c 7b e2 fd 42 da 7d b2 58 06 48 6f 07 86 7f 05 75 15 f8 66 8d 62 d7 df 92 88 0f a8 f1 7e d7 3f 47 af ae c7 13 72 48 97 14 e0 c5 ac 07 b9 4c 84 99 f6 cd 85 98 b5 e0 4a 8a 63 3a 19 c8 47 d1 96 96 c6 36 16 6a b2 Data Ascii: ko8?p}J:J{{a&@vIXAh,H:~3HYNzp?=~Fg~?}{kE@y4P4S\suLY3lUF+-\*M6LSY>>uH?yZ3l2qcW+m<l-d1\-40J_Q390lwxT$:E;\|\|j+d%o?ouY}a,HfZTKE+7F3aDg/=[QlP\|!oiSjgG.;ho3 (eI3n$4`bR-W1kBGbrYr^1mY2<RTZ028x{JVr'kWMtdPl@Wja`>~@e\\|oJ-H%&j>03Bd4@pr,v4+,tVy$gd.M`<^qw#f><Y4s.WQX(uvFKH0=@G^X\|S{^6?]$\X07l!Yl{B}XHoufb~?GrHLJc:G6j
Apr 26, 2024 15:14:07.434814930 CEST	1289	IN	Data Raw: c7 2d 41 de ed 14 60 78 e5 6e 38 4c 2a b9 58 36 dc f0 38 4e 1e 8a 91 28 e1 3c 14 16 11 68 97 4c b1 60 40 4e 48 6a d8 2e 02 a3 1e 11 eb 37 f9 03 f6 bb bb 67 7d b7 e2 ee b7 fa 05 24 d6 ad 84 b7 93 66 c2 41 f8 72 e7 3d 7b 0f cc 5a ad b0 49 c0 50 28 Data Ascii: -A`xn8L*X68N(<hL`@NHj.7g}$fAr={ZIP(M/jyZ6KeKZrlJ>@(QW"1vZFwq>-z;hE5TOUc~Srq6_O]tO4!R)e5Z[54
Apr 26, 2024 15:14:07.434844017 CEST	1289	IN	Data Raw: 52 c6 84 bd fa f8 ee f5 f9 9b cf 99 9d 7a 0a f9 25 bb da 71 3c 0e 6e 2f 9b e6 52 5e f6 2a 59 98 d9 f0 88 6f c2 ae 81 2c 1e 75 b7 62 01 cd 9e 6b 29 3d ee 12 da bc a7 c4 fa 84 65 ba f1 e7 c6 f6 f8 3b dd ce 86 3e a8 1b 0f 7a fe 55 36 a2 b6 f7 10 c7 Data Ascii: Rz%q<n/R^Yo,ubk)=e;>zU6Q?)}GG44-I"R#b3t]^$#F]{<VZ0h)}k)^Lzi.EBdi+P-wCN'^[IGRlmko#+b
Apr 26, 2024 15:14:07.434864998 CEST	78	IN	Data Raw: 8d 37 0b 67 26 ae 6b fd 6d 85 3f 8d 23 58 dd bb 21 67 21 b9 26 40 be 2f 76 3f c3 c3 1d ec bd af 6b 5d a6 04 4c 5b 6a 77 06 18 e3 e7 31 33 36 77 c5 18 c0 43 0b c5 29 be 7b b6 2d 16 e4 b2 4a 2e 16 b2 c5 47 ff 03 c1 79 7c 66 4c 29 00 00 Data Ascii: 7g&km?#X!g!&@/v?k]L[jw136wC){-J.Gy\|fL)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.419173002 CEST	402	OUT	GET /lingos/nd/fresco/styles/LINGOs/main.css HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.663417101 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Last-Modified: Mon, 27 Mar 2017 13:24:24 GMT Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 4830 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css;charset=ISO-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3c fd 6f db 38 b2 3f 37 7f 05 af c1 61 77 73 91 e3 ef c6 c9 ee e2 d2 c4 69 83 4b 9d 45 92 6e 0f 78 38 14 b2 44 db 42 65 c9 27 c9 49 ba 45 ff f7 9b e1 87 44 4a a4 6c c5 ed dd 3d bc 67 6f 37 36 45 0e 87 c3 e1 7c d3 07 e4 cb de 8b a5 9b cc 83 e8 84 b4 4f f7 5e ac 5c df 0f a2 39 fb f2 75 6f 1a fb 9f b1 87 17 87 71 72 42 f6 7b ec a5 75 23 9d f6 ea 09 5a 66 71 94 39 33 77 19 84 9f 4f c8 59 12 b8 e1 21 79 4b c3 07 9a 05 9e 7b 48 52 37 4a 9d 94 26 c1 2c 87 bb bf 74 83 c8 f1 63 6f bd a4 30 d6 0f 1e 70 aa c7 c0 cf 16 27 00 b5 fd 67 d9 b3 35 4b dc 25 0d 69 9a 62 87 a9 eb 7d 9a 27 f1 3a f2 01 21 ff d8 7f e5 0f c9 3a 09 7f fc 21 58 ba 73 9a 1e 79 eb 34 8b 97 c1 1f f4 68 3a 77 70 b8 93 0f 6f ad a2 f9 0f 3f 91 2c 5e 11 0f a6 a4 09 49 e8 8a ba 99 f3 64 98 aa 16 bd e3 01 60 07 84 7b 72 24 be 83 36 a7 c3 12 06 89 b6 51 ef 98 37 49 fa 12 77 9d c5 38 d5 ea 90 64 3e 82 0b 83 88 3a 0b 1a cc 17 19 c0 68 f5 19 1e 61 ec 7d fa e7 3a ce 28 f6 f0 83 74 15 ba 40 53 d6 ac 40 eb ad 9e 00 22 fe bf 33 58 b1 05 1c 1d 10 80 f7 29 25 6e e4 93 ec f3 8a ee 39 cf 7c 91 83 a3 3d d8 34 f7 c4 f5 b2 e0 81 e2 a7 87 20 0d 32 6a 42 ba 8b 73 bb 27 8b f8 81 26 87 a4 35 5d 67 59 1c 39 51 ec 4c e7 79 63 4a 3d 07 c8 b8 76 3c 60 13 a0 2b 90 3e 0c 88 18 a4 72 d8 68 dc ed 75 46 0c a2 80 24 fa a4 2b 37 52 3b ce d8 4b 99 9a 4c 83 39 f9 42 80 08 4b 37 02 4e 48 08 4e c8 28 82 cb 31 cc b0 e8 1c 92 45 17 81 66 f4 29 73 dc 30 98 03 5d 43 3a cb 4e 2b 8b 1c 18 38 04 c7 97 9b 18 38 76 16 52 60 41 1c 39 a4 4b 79 3c 1e 05 b8 28 4e 96 6e a8 72 46 eb 98 2e f9 91 03 fc 5f bf bf bf bf 99 dc ed b4 7b 41 b4 5a 67 ff 83 4c f0 cb 4b 5c dd cb 7f 1c 12 b5 6d e5 a6 e9 63 9c f8 2f ff 81 08 e7 c7 b9 0f ec 24 b8 49 ed 9d ae a7 cb a0 02 23 a1 29 ad 34 f2 4d c3 56 b1 7f f0 c1 cd 3f f1 0f b3 e0 89 fa f0 0d 0e a2 de 10 d1 c7 f4 53 10 e5 dd f3 0e f0 19 f7 25 ff 82 67 53 7e e1 7f 99 68 80 05 d1 04 e9 1b d1 53 f9 d5 49 5c 3f 58 a7 40 64 76 18 81 be a5 76 5c 2f 21 e4 e7 9f 7f 26 d4 67 3c 3e fd 4c 6e e3 e9 94 b1 4d 4e 9a 9e 24 0d f4 25 07 6a b3 76 c4 bb ec 58 b6 4f 75 2e a8 e1 01 4d 9e f5 86 43 6f 8a 02 56 72 2b a5 54 20 ad 76 eb f4 ba c7 7d ff d4 8a 34 f4 57 ce 09 ae 4e bc cc fd cd 9b 7d 02 a2 c7 9d 86 b8 31 86 5d b7 3c 95 db af 3c 96 e7 58 69 71 ab 4d 0a 23 a8 cd 3a 8b a8 4f 34 5e 31 0e 51 1b 0b ee 51 5b 0b 36 52 5a 2b 0d b5 c4 91 22 ae 8e 44 a6 3e 15 42 95 04 68 b5 bd 4c b4 d2 00 9d 40 f9 43 0b 01 f3 e7 66 32 56 87 57 1f 19 48 9a 3f 33 10 56 3e 33 36 57 14 bb eb ba ca 29 38 6e e3 1b a5 92 a6 14 2c 5b 53 b3 23 75 1b 51 a2 7f 99 ec 26 6a 5b 88 6c a6 6d 95 a4 06 4a 1a 08 a8 d3 cd 40 2e Data Ascii: <o8?7awsiKEnx8DBe'IEDJl=go76E\|O^\9uoqrB{u#Zfq93wOY!yK{HR7J&,tco0p'g5K%ib}':!:!Xsy4h:wpo?,^Id`{r$6Q7Iw8d>:ha}:(t@S@"3X)%n9\|=4 2jBs'&5]gY9QLycJ=v<`+>rhuF$+7R;KL9BK7NHN(1Ef)s0]C:N+88vR`A9Ky<(NnrF._{AZgLK\mc/$I#)4MV?S%gS~hSI\?X@dvv\/!&g<>LnMN$%jvXOu.MCoVr+T v}4WN}1]<<XiqM#:O4^1QQ[6RZ+"D>BhL@Cf2VWH?3V>36W)8n,[S#uQ&j[lmJ@.
Apr 26, 2024 15:14:06.663429976 CEST	1289	IN	Data Raw: 27 37 cf e8 e8 95 df 2b cb 8b fc 71 bb 3d 18 b8 d3 1a 59 a7 ca 0c a6 8a ee cf 5e 5f 8f e1 49 86 5b 45 b2 05 98 2d fc 93 af 69 8d 1e d7 18 ec 59 2b 8d 13 63 27 a1 56 5a 60 1c cd 69 c6 0c 01 b0 ab 48 01 da f2 44 87 92 0b 71 4d 2e b7 ed 8b fa ba 87 Data Ascii: '7+q=Y^_I[E-iY+c'VZ`iHDqM.*-]owSuASG=wW.yX4w6]So\Rylf8\4CbC[-/^n;A%K@e&C
Apr 26, 2024 15:14:06.663521051 CEST	1289	IN	Data Raw: 91 66 4d bc 6d d0 d0 66 93 1d e4 3b a9 37 d9 4d 31 a1 75 68 cd 45 97 e2 89 b9 6b 5e 31 91 75 73 3c 0f 95 c9 f0 b6 25 d3 5d 4a 0b 17 27 46 d2 44 80 29 98 d5 f3 bc 53 53 a1 85 52 8b 61 9f f0 24 74 c1 d3 f0 16 41 e8 f3 b9 e5 99 b2 86 cb b6 d0 7d 1d Data Ascii: fMmf;7M1uhEk^1us<%]J'FD)SSRa$tA})Tjhlhe*k-xv\|,7ba;]{[go[aPSThMo);.t\:2R>K%ce6/"[zxAV:.dLRB0:xE
Apr 26, 2024 15:14:06.663533926 CEST	1289	IN	Data Raw: 77 87 e9 bf fb b3 d7 77 8c 70 28 a7 f0 66 50 c5 56 1c e0 5b 57 e8 f0 2d e7 2e 51 0b b3 04 ff 27 a4 5c a9 71 48 4f ec 4a 57 fe ad 02 b8 3d 1c 6d 07 87 b8 87 0a 98 3c cd ec 62 35 f9 06 e8 12 67 b1 bd dc 32 12 63 98 6f 92 af 1a b9 f3 e2 86 4c 6e ee Data Ascii: wwp(fPV[W-.Q'\qHOJW=m<b5g2coLnc")\|7cXJQ8) ?*#q^GDqH8nz50QrHE/i/8_KR/\cGO:!($z\|eS9CgNB<O?
Apr 26, 2024 15:14:06.663543940 CEST	104	IN	Data Raw: 25 a5 fb 5a ff ab 42 45 aa 26 85 1e 34 25 86 c9 13 8a a6 b6 c3 eb ad 58 ea ae ba 06 7b cc b5 c2 c2 ec 87 c9 a0 57 18 36 87 d3 58 d0 da 00 3a 32 b7 f8 1c 39 6b 05 3a 7c 26 d0 72 e5 9d 06 74 54 05 fa 2c 39 bb 69 f9 5b 01 6d ba fc ad 80 36 5d 7e f7 Data Ascii: %ZBE&4%X{W6X:29k:\|&rtT,9i[m6]~{,+Mm/nG +Y
Apr 26, 2024 15:14:06.701095104 CEST	417	OUT	GET /lingos/nd/fresco/javascript/jQuery/ui/jquery-ui-1.12.1.min.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.981476068 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:06 GMT Server: Apache Accept-Ranges: bytes ETag: W/"253669-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: application/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc fd fb 63 db c6 95 30 0c ff be 7f 85 84 b6 0a 60 0e 29 d2 4e d2 06 2c c4 c7 b1 93 8d 77 eb 24 1b bb 9b 6d 15 55 1f 44 42 22 1a 0a e0 12 a0 6d 45 e4 f3 b7 7f e7 32 77 0c 28 39 6d df f7 ed c5 22 80 b9 cf 99 33 e7 7e 4e 9f 1c 1f fd fd bf b6 c5 e6 ee e8 cf af 8e 86 47 ef 26 a3 c9 d3 d1 04 7e 3d 1d 4f 3e 1f 8e bf 18 4e 3e fd b7 27 47 cb b6 5d a7 a7 a7 7f ff 5f 2c b9 2d 47 f3 fa 16 de be aa e6 ab ed a2 68 d2 a3 f7 e5 e2 a6 68 47 7f 6f c4 d1 ba 6e ca b6 ac 2b 7a 58 e4 6d ce 3f ca 26 bf 5a 15 c3 a6 58 15 73 fd b9 b8 be 86 27 eb 67 73 ca 7f 87 57 ab b2 5a 04 3f d4 db 6a 5e 84 be cc 57 e5 3a f4 7e b1 a9 83 ef 8b 0f eb 55 bd 08 36 75 9d f7 bc af 57 c1 41 2d cb 9b e5 0a fe 1f 9c ca 7a 7b 7d 1d 7e bf 6a f2 36 d8 4f 33 cf 57 e1 0f cb fc e7 f0 87 f2 97 f0 fb 55 19 9e 4a bb c9 ab e6 ba d8 d0 b7 eb 7a be a5 fd 91 4f 9b db e1 a6 68 8a 76 78 5b 7e 28 79 ab 78 eb 87 93 e1 ef e9 f1 e7 e2 6e ae 16 6f 95 5f 15 ab 86 7e 36 f3 4d bd 5a 0d d7 f9 a6 a8 78 31 da fc ea 4a b7 bc ad 4a 68 66 58 f2 22 32 d0 34 a7 f9 7c 5e 6f 16 0a 26 f4 db 6d 5b 03 98 ad 57 85 5c 23 f5 e1 6a db b6 5e d9 f9 b2 98 ff 7c 55 7f d8 e4 d0 8c fb a5 ae 5a 18 d2 cd a6 de ae 9d 0f 00 99 c5 ba 9c ff 2c 57 40 bf 2e f3 55 7d e3 be da e4 37 37 7a 0a e6 6d bd 5e 77 de de 16 d5 d6 7d 51 6f 1b b7 c8 7a 53 df c0 e2 36 57 b9 db 33 bc 2b 7f e9 34 c8 e7 a5 e7 75 a7 37 da 6d b7 d9 a6 de 04 aa af cb aa f2 0a 42 a9 c6 7d 51 d7 ab 96 8e 14 1c f5 17 f5 fa 6e 83 10 ae b0 c5 d7 70 0e 61 0d 61 d7 8e f2 6a 71 54 b7 cb 62 73 44 ab 5d c2 06 d5 9b 66 7a f4 a7 72 5e 54 4d b1 38 7a fd ea ed d1 93 d3 7f fb b7 f8 1a ce 2e 56 89 db e4 3e 52 0f 51 96 b5 77 eb a2 be 3e 5a 14 d7 65 55 9c 9c f0 df 51 7e bb 98 f1 cf f8 3c 62 f8 8b 2e 44 9b a4 6d cc 83 48 f6 89 d3 a4 fa 7d 54 d0 53 bd 89 df e5 9b a3 22 6b 47 f3 a6 89 a3 77 65 53 5e 95 ab b2 bd 8b 92 69 54 56 30 e2 b2 85 de b3 62 9a b4 50 88 a1 36 4e 44 b8 c6 a6 68 b7 9b 2a 5a 96 8b 45 51 45 c7 50 6d af 3b 2c 9d 0e 45 39 6d 47 ab a2 ba 69 97 27 27 ed f9 f8 02 0a 2f e0 88 c1 7e b5 d3 e4 be bc 8e 75 0f 0a 5b 46 89 88 23 d8 81 7a b5 6d 0b 1a d3 6e 17 6d 8a 15 ac f0 3b fd 7c 5d 7e 28 16 f4 90 9c 9c c4 65 06 03 6e 8a 57 30 64 d9 d8 2f af aa 45 f1 01 9a 9a 8c 13 71 5c 36 df e6 df c6 25 14 1d 43 ff 65 92 f0 04 8e 60 70 d6 64 f7 f2 ed d8 4c a6 89 93 fb 76 59 36 a3 cb f9 76 f3 aa 6a da ac da ae 56 82 5f c1 c1 ff ea 1d d4 cc 8e 27 f2 8d 44 ed 8b 57 d5 7a db 36 d9 f9 85 7a af 4f d8 9b 65 fd be ac 6e 4c 95 b2 7a 49 e7 cc bc b9 Data Ascii: 1faac0`)N,w$mUDB"mE2w(9m"3~NG&~=O>N>'G]_,-GhhGon+zXm?&ZXs'gsWZ?j^W:~U6uWA-z{}~j6O3WUJzOhvx[~(yxno_~6MZx1JJhfX"24\|^o&m[W\#j^\|UZ,W@.U}77zm^w}QozS6W3+4u7mB}QnpaajqTbsD]fzr^TM8z.V>RQw>ZeUQ~<b.DmH}TS"kGweS^iTV0bP6NDh*ZEQEPm;,E9mGi''/~u[F#zmnm;\|]~(enW0d/Eq\6%Ce`pdLvY6vjV_'DWz6zOenLzI
Apr 26, 2024 15:14:06.981503963 CEST	1289	IN	Data Raw: cd f1 dd bb 57 8b 2c da 96 43 53 75 b8 28 df 45 ba 16 5c 0a c5 8b 55 de 34 7e 29 fe a4 0a e6 eb 75 51 2d 82 05 f9 93 2a 08 c0 7a 73 53 6c 82 25 e5 b7 48 cf 12 07 1c 2c c9 9f 22 77 39 7a 4a f2 52 a9 b2 db ca 9c ef 60 05 bb 80 aa 04 9b 82 5b 17 2c Data Ascii: W,CSu(E\U4~)uQ-zsSl%H,"w9zJR`[,/;=w=sop^n\|wR8~mM5zSW$cWok- -6-:zS{?+\|z6CXN!n[\|kM
Apr 26, 2024 15:14:06.981522083 CEST	1289	IN	Data Raw: c5 26 83 05 59 66 30 c9 35 70 82 70 5e 22 3c 55 d3 c2 7d 33 b9 a0 e5 59 65 cb 41 34 8c 06 85 da eb 06 8e 5c 93 95 02 17 f7 47 ea 0a 3b 2d 1b 5a c1 b8 41 46 ae d1 b7 84 dc 5c ba 47 cf ef f7 17 23 40 e3 30 7e 28 96 24 74 7f ad 37 e7 51 1a 5d 9c af Data Ascii: &Yf05pp^"<U}3YeA4\G;-ZAF\G#@0~($t7Q]Fm=ySE`o %FoE?Q_V=,@"?5Srq4Nx_Yp/a,mKT\|_j>ym"L,fjG#-bk3[&ga,V
Apr 26, 2024 15:14:06.981539011 CEST	1289	IN	Data Raw: b2 a0 48 e0 6d 8e b8 a1 71 d8 3e 22 a2 9b 65 79 8d 38 45 f7 44 44 59 95 e5 48 73 3c d0 1d 14 21 0a 6d aa 2a 0f 27 92 3e ab ce 1b a0 c4 2e 32 f9 57 b2 6d f2 69 4a 3a 44 a0 1c eb 35 74 3c 39 30 5d be 1e 91 ac 80 ae 66 78 4c 52 fc 35 25 82 a8 dc 17 Data Ascii: Hmq>"ey8EDDYHs<!m'>.2WmiJ:D5t<90]fxLR5%@y/97r!t7q `^:NINkU4F`!}vp.:o/BDu56i&zO?H,g+IiAU-XZ.<ii#~. aP
Apr 26, 2024 15:14:06.981555939 CEST	1289	IN	Data Raw: 75 db 0a 71 79 49 62 4b 44 26 d7 ac 84 68 d0 6a 43 00 e6 dc b3 78 50 42 a5 6d 2d 63 5b 3d db 34 d4 39 99 07 7f bd aa 01 0e c8 f8 e3 49 bc 1d b5 45 23 9f 66 c5 e9 64 3c 4e 81 78 70 ca 4d 9c 72 f0 34 2b 65 b9 0b db dc d9 a6 d5 3c 33 64 fc 84 16 c8 Data Ascii: uqyIbKD&hjCxPBm-c[=49IE#fd<NxpMr4+e<3dmbM=U@9("-2%Nfm:Uq>e&,So-ISMOv0H1Vm&x~SVCo!m4E%-g~:vsvd
Apr 26, 2024 15:14:06.981571913 CEST	1289	IN	Data Raw: 9b ef 1d 93 c3 dc 0a 5d 67 54 51 de 4f 6b 75 25 5d ef b5 ac 55 57 5d 72 d5 97 a6 ea 4b ab ea 4a 55 9d ef c5 12 f8 ee 5f ea aa cd 57 e9 f8 ac 9c f1 4e a6 c5 d9 78 26 a1 d1 e0 2e a0 6d da 72 4e 05 37 33 da eb b4 c1 72 12 ee d2 e8 16 c8 ca 55 11 ed Data Ascii: ]gTQOku%]UW]rKJU_WNx&.mrN73rU,dT{pdONX3p1E1o[Y(Q({>ld` Hmstn[[AV>*n,w4.[I[;yhgX4GNy[ea1@?@po3xa5
Apr 26, 2024 15:14:06.981589079 CEST	847	IN	Data Raw: 4c f9 eb a9 fe e5 0f f8 37 f1 79 3e bc 1e 0f bf b8 b8 7f ba 4f fa 1f 0e f4 66 b4 75 d8 e3 e4 73 a9 ff e3 37 4f 3b 6f 9e d1 9b c0 00 92 d0 af c7 f6 3b 08 77 3e 08 8f 60 d0 19 c6 b2 59 f5 6c dc 3f 7d db d8 d3 30 c2 1e a3 47 40 19 2a 4b 09 d2 e4 0f Data Ascii: L7y>Ofus7O;o;w>`Yl?}0G@K"2xhwH"<!;Uh=kz&Z\\|@\@E7rg[^bE6DiX.6sI=w<:yg{!Kf_sxK@#*"[
Apr 26, 2024 15:14:08.730679989 CEST	401	OUT	GET /lingos/nd/fresco/javascript/views/BaseView.js?22.03.1 HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://lingos.netdimensions.com/lingos/servlet/resetpassword Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:08.974119902 CEST	1022	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:08 GMT Server: Apache Accept-Ranges: bytes ETag: W/"1348-1647027590000-gzip" Last-Modified: Fri, 11 Mar 2022 19:39:50 GMT Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Content-Length: 564 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 54 4d 8f da 30 10 3d c3 af 18 21 b4 49 2a 36 5b 7a 43 2d 07 b4 ed a1 52 d5 53 d5 55 4f c8 38 13 62 d5 78 22 7b 02 a5 d5 fe f7 8e 13 92 f2 a1 95 f6 da 08 c4 8c ed f7 e6 79 de 84 87 37 63 88 1f 78 a4 fa e8 cd b6 62 48 75 06 f3 c5 62 71 ff ee ed 7c 0e 5f 91 3f 9a 1d ba 60 c8 05 f8 c2 45 7e 02 ac ac 85 16 10 c0 63 40 bf c7 61 eb 5b 65 02 04 2a f9 a0 3c 82 c4 5c 21 68 72 a5 29 d0 b1 51 16 94 2b a0 f6 54 7b 83 ac fc 11 8c 2b c9 ef 14 4b 11 a0 32 72 dc d6 85 74 f2 78 ce f1 f9 1f 66 92 e5 00 3f a8 81 50 29 91 e5 88 23 45 61 82 b6 14 10 42 a3 2b 78 09 db 6a e9 70 8d 9c 35 0c e4 6c 54 14 29 94 d6 e4 0b e5 34 c2 c1 70 d5 5e 84 d1 ef 82 a8 6c 13 6b b4 68 44 50 5b 8f 28 72 19 8e 22 43 7e d1 63 21 24 4c 91 a6 c5 5e dc 28 b6 ea 61 3c 9e a6 65 e3 74 94 91 66 f0 67 0c f2 4c d3 44 25 59 8e 4a 57 67 9b dd 5e 7c f6 ca 83 f4 6c 8b fc 5d d9 06 61 29 08 96 86 67 b9 62 f6 69 d2 ed 25 d9 fb 01 61 4a 48 2f 10 4b 48 4a f1 4c d3 7a a7 8c 4b ce c8 3b 01 1d 9d c7 1d ed 71 f5 02 e9 73 1b 3d 9f 56 44 74 6c e8 7f a5 3b 7e c7 bd 52 a8 a9 6e ea b4 f1 b6 f7 81 6a 74 4f c6 15 74 88 ab 33 98 ac 37 56 b9 9f 13 89 98 c8 6e 94 5f 3a 9a 81 18 da f4 b1 68 33 bf d5 c6 e2 f2 88 61 06 41 7b b2 f1 60 88 f9 24 96 bc 2e b8 2e 1b 6b 5f 59 d5 92 6e 07 b6 23 ef 35 b4 49 2f a2 2b cb 8a 9b d0 c5 af 51 34 4d 0b d2 4d 9c dd d8 3b 55 1c 2f 67 72 74 35 a3 a3 93 df 56 6d d0 de 18 6e 86 23 a3 68 5f ef 89 0e 41 cc c0 5f 7c 2f d6 f8 d2 d2 21 c9 5a 3f d1 5a 53 07 13 12 b8 bb 93 7f 8a 4f a7 74 25 6c 7b ec c0 03 63 cb 7a 3d 35 86 2d 26 b3 61 35 d6 48 33 b9 d8 80 10 c7 47 bd e5 a3 5b df 6f 6a 62 6f 85 47 6e bc 83 14 73 2a cb 80 fc 64 0a 79 8b 3f 00 e6 5d 1b db 3c f2 fd 05 7d ea 36 70 44 05 00 00 Data Ascii: TM0=!I6[zC-RSUO8bx"{y7cxbHubq\|_?`E~c@a[e<\!hr)Q+T{+K2rtxf?P)#EaB+xjp5lT)4p^lkhDP[(r"C~c!$L^(a<etfgLD%YJWg^\|l]a)gbi%aJH/KHJLzK;qs=VDtl;~RnjtOt37Vn_:h3aA{`$..k_Yn#5I/+Q4MM;U/grt5Vmn#h_A_\|/!Z?ZSOt%l{cz=5-&a5H3G[ojboGns*dy?]<}6pD
Apr 26, 2024 15:14:09.341240883 CEST	463	OUT	GET /lingos/servlet/ekp/login HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:09.900252104 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:09 GMT Server: Apache Cache-Control: private, no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: fullscreen=* Content-Security-Policy: script-src 'self' .peoplefluent.com .netdimensions.com 'unsafe-inline' 'unsafe-eval'; Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Set-Cookie: JSESSIONID=B4DD07CFB5E304323CB3C6C406A6BC41; Path=/lingos; HttpOnly;SameSite=None;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8 Data Raw: 61 63 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 19 fb 53 db 38 fa 67 f2 57 a8 a6 37 09 5d 6c 27 81 f0 48 93 cc ec 42 7a 65 8e 16 06 e8 b6 9d 4e 6f 47 b1 e5 58 c5 af 95 64 02 ed f4 7f bf 4f 92 e5 d8 c6 b4 b4 9d bb b9 30 40 2c 7d ef b7 e4 c9 93 e3 b3 a3 ab f7 e7 73 14 8a 38 42 e7 6f fe 38 3d 39 42 96 ed ba 6f 77 8e 5c f7 f8 ea 18 bd 7b 79 f5 ea 14 0d 9c 3e ba 62 38 e1 54 d0 34 c1 91 eb ce 5f 5b c8 0a 85 c8 c6 ae bb 5a ad 9c d5 8e 93 b2 a5 7b 75 e1 de 4a 5a 03 89 5c 7c b5 45 05 d3 f1 85 6f cd 3a 13 c5 f0 36 8e 12 3e 6d 21 33 38 3c 3c d4 d8 0a 96 60 1f fe c5 44 60 24 61 6d f2 77 4e 6f a6 d6 51 9a 08 92 08 fb ea 2e 23 16 f2 f4 d3 d4 12 e4 56 b8 12 f7 39 f2 42 cc 38 11 d3 37 57 2f ec 03 0b b9 40 45 50 11 91 d9 29 c1 2c a1 c9 12 9d 47 58 04 29 8b 27 ae de e8 4c 22 9a 5c a3 90 91 60 6a b9 f0 7d 99 72 37 c0 37 14 c8 3b f0 c7 42 02 b8 4d 2d 1a e3 25 71 6f 12 df 89 a9 c7 52 9e 06 42 6e 27 16 62 24 9a 5a 3c 4c 99 f0 72 81 d4 1a 50 e5 1e a3 99 40 9c 79 6b b2 89 ef 06 8c 70 2f 75 a3 74 49 13 57 c3 70 f7 d3 df 39 61 77 f6 c0 d9 75 86 40 3e 71 3e 71 c3 56 e9 f6 09 df 60 0d 6b cd 26 05 d6 4f b1 70 68 92 10 16 60 9f fc 17 58 64 8c 08 a0 18 a6 22 75 3f 95 1c f5 ea b9 5c fd 06 cf d2 71 56 2e 02 f0 5c 55 06 e5 1f 6d 64 71 17 11 1e 12 02 08 75 87 3d 46 26 8f 9b 67 2d 0d 3c d7 c4 51 cf 31 f1 29 06 4e 1e 23 04 7c ab 62 64 6a 55 d0 50 8c 69 82 aa 92 34 44 57 41 a7 f6 9b c4 67 9d 45 ea df a1 2f 1d 04 9f 18 33 10 74 dc cf 6e 9f 77 36 32 ec fb a0 88 7e 92 bb 0b ec 5d 2f 59 9a 27 fe 78 33 08 82 e7 9d af 9d 70 08 Data Ascii: aceS8gW7]l'HBzeNoGXdO0@,}s8Bo8=9Bow\{y>b8T4_[Z{uJZ\\|Eo:6>m!38<<`D`$amwNoQ.#V9B87W/@EP),GX)'L"\`j}r77;BM-%qoRBn'b$Z<LrP@ykp/utIWp9awu@>q>qV`k&Oph`Xd"u?\qV.\Umdqu=F&g-<Q1)N#\|bdjUPi4DWAgE/3tnw62~]/Y'x3p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49737	18.173.166.51	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.428303957 CEST	359	OUT	GET /versions/0.10/fluenticons.css HTTP/1.1 Host: ui.peoplefluent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.553442001 CEST	460	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 11106 Connection: keep-alive Last-Modified: Wed, 31 Mar 2021 00:26:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 13:05:22 GMT ETag: "274c935af16af79d6f2b17a6a2311d88" X-Cache: Hit from cloudfront Via: 1.1 a8d95bca466180bd6e925f3154f617cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: xZG-iNt3Uc_dEOW9F2QBbPDBDoOdwQBKggpo7pzEIfsHhVLvGghnEA== Age: 525
Apr 26, 2024 15:14:06.553605080 CEST	1289	IN	Data Raw: 2f 2a 21 0a 20 2a 20 66 6c 75 65 6e 74 69 63 6f 6e 73 20 76 30 2e 31 30 2e 31 0a 20 2a 20 c2 a9 20 32 30 31 36 2d 32 30 32 31 20 50 65 6f 70 6c 65 46 6c 75 65 6e 74 20 49 6e 63 2e 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 Data Ascii: /! fluenticons v0.10.1 * 2016-2021 PeopleFluent Inc. */@font-face{font-family:fluenticons;src:url(fonts/fluenticons.e59448b9ddb42fdc93dd.eot?#iefix) format("embedded-opentype"),url(fonts/fluenticons.e59448b9ddb42fdc93dd.woff) format("
Apr 26, 2024 15:14:06.553617001 CEST	1289	IN	Data Raw: 65 6e 74 3a 22 5c 66 31 30 39 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 61 72 63 68 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 61 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 Data Ascii: ent:"\f109"}.pf-iconf-archive:before{content:"\f10a"}.pf-iconf-arrow-circle-left:before{content:"\f10b"}.pf-iconf-arrow-circle-right:before{content:"\f10c"}.pf-iconf-arrow-square-down-right-alt:before{content:"\f10d"}.pf-iconf-arrow-square-dow
Apr 26, 2024 15:14:06.553627968 CEST	1289	IN	Data Raw: 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 63 61 6c 65 6e 64 61 72 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 36 22 7d 2e 70 66 2d 69 63 6f Data Ascii: ss:before{content:"\f125"}.pf-iconf-calendar-pencil:before{content:"\f126"}.pf-iconf-calendar-plus:before{content:"\f127"}.pf-iconf-calendar-slash:before{content:"\f128"}.pf-iconf-calendar-user:before{content:"\f129"}.pf-iconf-calendar-x:befor
Apr 26, 2024 15:14:06.553781986 CEST	1289	IN	Data Raw: 6f 6e 66 2d 63 6c 69 70 62 6f 61 72 64 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 32 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 63 6c 69 70 62 6f 61 72 64 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: onf-clipboard-check:before{content:"\f142"}.pf-iconf-clipboard-pencil:before{content:"\f143"}.pf-iconf-clipboard:before{content:"\f144"}.pf-iconf-clock:before{content:"\f145"}.pf-iconf-coins:before{content:"\f146"}.pf-iconf-comment-plus:before
Apr 26, 2024 15:14:06.553797960 CEST	1289	IN	Data Raw: 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 65 79 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 30 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 66 69 6c 65 2d 61 74 74 61 63 68 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: "}.pf-iconf-eye:before{content:"\f160"}.pf-iconf-file-attachment:before{content:"\f161"}.pf-iconf-file-audio:before{content:"\f162"}.pf-iconf-file-csv:before{content:"\f163"}.pf-iconf-file-excel:before{content:"\f164"}.pf-iconf-file-image:befo
Apr 26, 2024 15:14:06.553809881 CEST	1289	IN	Data Raw: 69 63 6f 6e 66 2d 67 72 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 65 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 68 69 73 74 6f 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 66 22 7d 2e 70 66 2d 69 63 6f Data Ascii: iconf-grid:before{content:"\f17e"}.pf-iconf-history:before{content:"\f17f"}.pf-iconf-home:before{content:"\f180"}.pf-iconf-id-card:before{content:"\f181"}.pf-iconf-inbox:before{content:"\f182"}.pf-iconf-key:before{content:"\f183"}.pf-iconf-lap
Apr 26, 2024 15:14:06.553915977 CEST	1289	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 31 39 61 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 6d 6f 6e 69 74 6f 72 2d 74 65 61 63 68 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 62 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 6d 6f 6e 69 74 6f 72 3a 62 65 Data Ascii: tent:"\f19a"}.pf-iconf-monitor-teacher:before{content:"\f19b"}.pf-iconf-monitor:before{content:"\f19c"}.pf-iconf-multiply-bold:before{content:"\f19d"}.pf-iconf-multiply:before{content:"\f19e"}.pf-iconf-newspaper:before{content:"\f19f"}.pf-icon
Apr 26, 2024 15:14:06.553929090 CEST	1289	IN	Data Raw: 63 6f 6e 66 2d 73 6f 72 74 2d 73 74 61 63 6b 2d 64 65 73 63 65 6e 64 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 38 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 73 71 75 61 72 65 2d 64 69 61 6d 6f 6e 64 3a 62 65 66 6f 72 65 7b Data Ascii: conf-sort-stack-descending:before{content:"\f1b8"}.pf-iconf-square-diamond:before{content:"\f1b9"}.pf-iconf-square:before{content:"\f1ba"}.pf-iconf-stairs-up:before{content:"\f1bb"}.pf-iconf-stairs:before{content:"\f1bc"}.pf-iconf-star-circle:
Apr 26, 2024 15:14:06.553940058 CEST	794	IN	Data Raw: 74 72 6f 70 68 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 35 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d 75 6d 62 72 65 6c 6c 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 36 22 7d 2e 70 66 2d 69 63 6f 6e 66 2d Data Ascii: trophy:before{content:"\f1d5"}.pf-iconf-umbrella:before{content:"\f1d6"}.pf-iconf-university:before{content:"\f1d7"}.pf-iconf-unlock:before{content:"\f1d8"}.pf-iconf-upload:before{content:"\f1d9"}.pf-iconf-user-bidirectional:before{content:"\f
Apr 26, 2024 15:14:51.562455893 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49735	18.173.166.51	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.428447008 CEST	368	OUT	GET /versions/0.10/peoplefluent-vendors.css HTTP/1.1 Host: ui.peoplefluent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.554585934 CEST	462	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 144295 Connection: keep-alive Last-Modified: Wed, 31 Mar 2021 00:26:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 12:52:10 GMT ETag: "c42437b3253a8c5efc35401012706e5b" X-Cache: Hit from cloudfront Via: 1.1 0e29dbf2290a532921c8437d0713b55c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: CMNda2CmcMOKB5aueLEudzZ6fBzRhHnM5efwr2ePEO8nOKDTyMxQyg== Age: 1317
Apr 26, 2024 15:14:06.554609060 CEST	1289	IN	Data Raw: 2f 2a 21 0a 20 2a 20 70 65 6f 70 6c 65 66 6c 75 65 6e 74 2d 76 65 6e 64 6f 72 73 20 76 30 2e 31 30 2e 31 0a 20 2a 20 c2 a9 20 32 30 31 36 2d 32 30 32 31 20 50 65 6f 70 6c 65 46 6c 75 65 6e 74 20 49 6e 63 2e 0a 20 2a 2f 2e 70 61 63 65 7b 2d 6d 6f Data Ascii: /! peoplefluent-vendors v0.10.1 * 2016-2021 PeopleFluent Inc. */.pace{-moz-user-select:none;-ms-user-select:none;-webkit-user-select:none;pointer-events:none;user-select:none}.pace,.pace .pace-progress{z-index:10000}.pace .pace-progre
Apr 26, 2024 15:14:06.554670095 CEST	1289	IN	Data Raw: 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 70 66 20 70 72 65 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: size:100%;font-weight:700;padding:0}.pf pre{color:#212529;display:block;font-size:87.5%}.pf pre code{color:inherit;font-size:inherit;word-break:normal}.pf .pre-scrollable{max-height:340px;overflow-y:scroll}.pf .container,.pf .container-fluid,.
Apr 26, 2024 15:14:06.554682016 CEST	1289	IN	Data Raw: 2c 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 61 75 74 6f 2c 2e 70 66 20 2e Data Ascii: ,.pf .col-lg-9,.pf .col-lg-10,.pf .col-lg-11,.pf .col-lg-12,.pf .col-lg-auto,.pf .col-md,.pf .col-md-1,.pf .col-md-2,.pf .col-md-3,.pf .col-md-4,.pf .col-md-5,.pf .col-md-6,.pf .col-md-7,.pf .col-md-8,.pf .col-md-9,.pf .col-md-10,.pf .col-md-1
Apr 26, 2024 15:14:06.554698944 CEST	1289	IN	Data Raw: 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 70 66 20 2e 63 6f 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e Data Ascii: flex:0 0 33.33333%;max-width:33.33333%}.pf .col-5{flex:0 0 41.66667%;max-width:41.66667%}.pf .col-6{flex:0 0 50%;max-width:50%}.pf .col-7{flex:0 0 58.33333%;max-width:58.33333%}.pf .col-8{flex:0 0 66.66667%;max-width:66.66667%}.pf .col-9{flex:
Apr 26, 2024 15:14:06.554723024 CEST	1289	IN	Data Raw: 30 25 7d 2e 70 66 20 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 70 66 20 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e Data Ascii: 0%}.pf .row-cols-sm-3>{flex:0 0 33.33333%;max-width:33.33333%}.pf .row-cols-sm-4>{flex:0 0 25%;max-width:25%}.pf .row-cols-sm-5>{flex:0 0 20%;max-width:20%}.pf .row-cols-sm-6>{flex:0 0 16.66667%;max-width:16.66667%}.pf .col-sm-auto{flex:0
Apr 26, 2024 15:14:06.554804087 CEST	1289	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 70 66 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 70 66 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 33 7b 6d 61 72 67 Data Ascii: {margin-left:8.33333%}.pf .offset-sm-2{margin-left:16.66667%}.pf .offset-sm-3{margin-left:25%}.pf .offset-sm-4{margin-left:33.33333%}.pf .offset-sm-5{margin-left:41.66667%}.pf .offset-sm-6{margin-left:50%}.pf .offset-sm-7{margin-left:58.33333%
Apr 26, 2024 15:14:06.554815054 CEST	1289	IN	Data Raw: 63 6f 6c 2d 6d 64 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 70 66 20 2e 63 6f 6c 2d 6d 64 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 37 25 Data Ascii: col-md-10{flex:0 0 83.33333%;max-width:83.33333%}.pf .col-md-11{flex:0 0 91.66667%;max-width:91.66667%}.pf .col-md-12{flex:0 0 100%;max-width:100%}.pf .order-md-first{order:-1}.pf .order-md-last{order:13}.pf .order-md-0{order:0}.pf .order-md-1
Apr 26, 2024 15:14:06.554825068 CEST	1289	IN	Data Raw: 64 74 68 3a 32 30 25 7d 2e 70 66 20 2e 72 6f 77 2d 63 6f 6c 73 2d 6c 67 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 70 66 20 2e 63 6f 6c 2d 6c 67 2d 61 75 Data Ascii: dth:20%}.pf .row-cols-lg-6>*{flex:0 0 16.66667%;max-width:16.66667%}.pf .col-lg-auto{flex:0 0 auto;max-width:100%;width:auto}.pf .col-lg-1{flex:0 0 8.33333%;max-width:8.33333%}.pf .col-lg-2{flex:0 0 16.66667%;max-width:16.66667%}.pf .col-lg-3{
Apr 26, 2024 15:14:06.554838896 CEST	1289	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 70 66 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 70 66 20 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 Data Ascii: argin-left:41.66667%}.pf .offset-lg-6{margin-left:50%}.pf .offset-lg-7{margin-left:58.33333%}.pf .offset-lg-8{margin-left:66.66667%}.pf .offset-lg-9{margin-left:75%}.pf .offset-lg-10{margin-left:83.33333%}.pf .offset-lg-11{margin-left:91.66667
Apr 26, 2024 15:14:06.554852962 CEST	1289	IN	Data Raw: 20 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 6f 72 64 65 72 3a 2d 31 7d 2e 70 66 20 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 31 33 7d 2e 70 66 20 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 6f 72 64 65 72 3a 30 7d 2e 70 66 20 Data Ascii: .order-xl-first{order:-1}.pf .order-xl-last{order:13}.pf .order-xl-0{order:0}.pf .order-xl-1{order:1}.pf .order-xl-2{order:2}.pf .order-xl-3{order:3}.pf .order-xl-4{order:4}.pf .order-xl-5{order:5}.pf .order-xl-6{order:6}.pf .order-xl-7{order

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49736	18.173.166.51	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:06.428504944 CEST	371	OUT	GET /versions/0.10/peoplefluent-components.css HTTP/1.1 Host: ui.peoplefluent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://lingos.netdimensions.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:06.553951025 CEST	461	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 55431 Connection: keep-alive Last-Modified: Wed, 31 Mar 2021 00:26:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 12:52:10 GMT ETag: "fe0353ce42289417ac5a99bf338c9fbb" X-Cache: Hit from cloudfront Via: 1.1 d48213ccd3bd23b36dd8e0e8abbda6b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P7 X-Amz-Cf-Id: W1dBDCwiYoBB2l-vTwJhcGTXF-jlCjNuhgLyyZhwgREHDZAlo8Uj1Q== Age: 1317
Apr 26, 2024 15:14:06.553965092 CEST	1289	IN	Data Raw: 2f 2a 21 0a 20 2a 20 70 65 6f 70 6c 65 66 6c 75 65 6e 74 2d 63 6f 6d 70 6f 6e 65 6e 74 73 20 76 30 2e 31 30 2e 31 0a 20 2a 20 c2 a9 20 32 30 31 36 2d 32 30 32 31 20 50 65 6f 70 6c 65 46 6c 75 65 6e 74 20 49 6e 63 2e 0a 20 2a 2f 2e 74 69 70 70 79 Data Ascii: /! peoplefluent-components v0.10.1 * 2016-2021 PeopleFluent Inc. */.tippy-box[data-animation=fade][data-state=hidden]{opacity:0}[data-tippy-root]{max-width:calc(100vw - 10px)}.tippy-box{background-color:#333;border-radius:4px;color:#f
Apr 26, 2024 15:14:06.553977013 CEST	1289	IN	Data Raw: 33 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 74 69 70 70 79 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 Data Ascii: 3;height:16px;width:16px}.tippy-arrow:before{border-color:transparent;border-style:solid;content:"";position:absolute}.tippy-content{padding:5px 9px;position:relative;z-index:1}.tippy-box[data-placement^=top]>.tippy-svg-arrow{bottom:0}.tippy-b
Apr 26, 2024 15:14:06.553989887 CEST	1289	IN	Data Raw: 61 2d 73 74 61 74 65 3d 68 69 64 64 65 6e 5d 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 62 6f 74 74 6f 6d 5d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 70 78 29 7d 2e 74 69 70 70 79 2d 62 6f 78 5b 64 61 74 Data Ascii: a-state=hidden][data-placement^=bottom]{transform:translateY(-10px)}.tippy-box[data-animation=shift-away][data-state=hidden][data-placement^=left]{transform:translateX(10px)}.tippy-box[data-animation=shift-away][data-state=hidden][data-placeme
Apr 26, 2024 15:14:06.554001093 CEST	1289	IN	Data Raw: 7d 2e 70 66 2d 61 76 61 74 61 72 20 2e 70 66 2d 61 76 61 74 61 72 5f 5f 6d 61 69 6e 5f 73 69 7a 65 5f 6c 3a 61 66 74 65 72 2c 2e 70 66 2d 61 76 61 74 61 72 20 2e 70 66 2d 61 76 61 74 61 72 5f 5f 6d 61 69 6e 5f 73 69 7a 65 5f 6d 3a 61 66 74 65 72 Data Ascii: }.pf-avatar .pf-avatar__main_size_l:after,.pf-avatar .pf-avatar__main_size_m:after,.pf-avatar .pf-avatar__main_size_xl:after{border-width:.3rem}.pf-avatar{display:inline-block;position:relative;vertical-align:middle}.pf-avatar__main-img{backgr
Apr 26, 2024 15:14:06.554013014 CEST	1289	IN	Data Raw: 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d Data Ascii: em;text-align:center;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;vertical-align:baseline;white-space:nowrap}.pf-badge_shape_rounded{border-radius:.25rem}.pf-badg
Apr 26, 2024 15:14:06.554024935 CEST	1289	IN	Data Raw: 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f Data Ascii: bkit-user-select:none;background-color:transparent;border:1px solid transparent;border-radius:.25rem;color:#333;display:inline-block;font-size:1rem;font-weight:400;line-height:1.5;padding:.375rem .75rem;text-align:center;transition:color .15s
Apr 26, 2024 15:14:06.554038048 CEST	1289	IN	Data Raw: 6e 29 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 68 65 69 67 68 74 3a 32 2e 33 37 35 72 65 6d 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 Data Ascii: n){align-items:center;display:inline-flex;height:2.375rem;justify-content:center;padding-left:0;padding-right:0;width:2.375rem}.pf-button_dihedral-sm:not(.btn){height:2rem;width:2rem}.pf-button_dihedral-lg:not(.btn){height:3rem;width:3rem}.pf-
Apr 26, 2024 15:14:06.554049969 CEST	1289	IN	Data Raw: 70 66 2d 63 61 72 64 5f 5f 73 74 61 74 75 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 66 2d 63 61 72 64 5f 74 79 70 65 5f 63 6f 6d 70 61 63 74 20 2e 70 66 2d 63 61 72 64 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b Data Ascii: pf-card__status{display:none}.pf-card_type_compact .pf-card__title{font-size:1rem;margin:0;padding:1rem}.pf-card_type_compact .pf-card__image{padding:0}.pf-card_disabled{opacity:.6}.pf-content-group__header{align-items:center;display:flex;just
Apr 26, 2024 15:14:06.554061890 CEST	1289	IN	Data Raw: 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 70 66 2d 64 61 74 65 70 69 63 6b 65 Data Ascii: -datepicker__placeholder:disabled{background-color:#e9ecef;opacity:1}.pf-datepicker__wrapper{position:relative}.pf-datepicker__wrapper_disabled.form-control{background-color:#e9ecef;opacity:1}.pf .react-date-picker{border-right:0;display:block
Apr 26, 2024 15:14:06.554074049 CEST	1289	IN	Data Raw: 6e 64 61 72 5f 5f 6d 6f 6e 74 68 2d 76 69 65 77 2c 2e 70 66 20 2e 72 65 61 63 74 2d 64 61 74 65 2d 70 69 63 6b 65 72 5f 5f 63 61 6c 65 6e 64 61 72 5f 5f 76 69 65 77 43 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 70 66 20 Data Ascii: ndar__month-view,.pf .react-date-picker__calendar__viewContainer{height:100vh}.pf .react-date-picker__inputGroup{align-items:center;border:0;display:flex;height:auto;margin:0;overflow:hidden;padding:0}.pf .react-date-picker__inputGroup__divide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49741	18.196.219.159	80	3276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 15:14:18.683124065 CEST	467	OUT	GET /lingos/servlet/resetpassword HTTP/1.1 Host: lingos.netdimensions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 15:14:18.947902918 CEST	1289	IN	HTTP/1.1 200 200 Date: Fri, 26 Apr 2024 13:14:18 GMT Server: Apache Cache-Control: private, no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: fullscreen=* Content-Security-Policy: script-src 'self' .peoplefluent.com .netdimensions.com 'unsafe-inline' 'unsafe-eval'; Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Set-Cookie: _LMSSession=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/lingos/;HttpOnly;Secure;SameSite=None Set-Cookie: JSESSIONID=0DF547442A932C2609BE73FAD8353172; Path=/lingos; HttpOnly;SameSite=None;HttpOnly;Secure;SameSite=None Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8 Data Raw: 31 33 38 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 5b ed 8f 1b c7 79 ff 5c fd 15 63 16 28 29 54 dc bd 17 49 96 4f c7 4d 79 47 9e 8f 11 5f ae 47 9e a4 6b 64 2c 86 bb 43 72 7d bb 3b cc ec ee 51 94 61 c0 6e 52 a4 08 5c 04 fd 10 1b 45 82 22 8e e5 38 31 6c 58 46 12 54 b2 e3 f8 c3 39 5f 85 d3 37 f9 db 05 68 dc a4 69 ff 87 3e 33 b3 7c e7 f0 45 8a 0a 9f ad db e1 ec ef 79 e6 37 cf 3c f3 cc 33 c3 b9 cd e7 72 95 ed da e1 5e 1e ed d6 4a 45 b4 77 b0 55 2c 6c a3 44 5a d7 6f ac 6f eb 7a ae 96 93 2f 2e 6a 2b ab a8 c6 b0 1f 38 a1 43 7d ec ea 7a be 9c 38 87 e2 9f 44 2b 0c db 1b ba de e9 74 b4 ce ba 46 59 53 af ed eb ad d0 73 2f ea 2e a5 01 d1 ec d0 4e 18 9b bc 06 b9 d8 6f 66 12 c4 4f 20 db 61 99 84 1b 32 fe 86 60 db 40 9b 1e 09 31 b2 a8 1f 12 3f cc 24 0b f9 0c b1 9b 24 89 b8 fa 34 f9 76 e4 1c 67 92 37 d3 07 d9 f4 36 f5 da 38 74 ea 2e 49 1a 9b a1 13 ba c4 d8 27 01 09 51 14 10 86 da 38 08 3a 94 d9 1b 68 8f d0 b6 4b 76 dc 08 f4 a1 62 a9 ba a9 4b f0 a6 eb f8 47 a8 c5 48 23 93 d4 f5 c8 d1 da 02 d8 10 40 cd a2 9e 7e 4c 58 00 3d 0d f4 15 6d 75 45 97 2f 1c 60 16 68 56 10 24 51 d8 6d 93 4c 32 24 b7 43 5d 7c 66 c4 cd 24 83 b0 eb 92 a0 45 48 98 5c ba 85 e1 d7 e9 63 e2 db 94 fd bf 34 05 af db d4 87 d2 c2 ad 3d f7 2d a7 81 9e 2b e4 5f 1a 6d 18 ca 4d 1a e8 be ad 37 18 09 2c aa 4b 21 d3 a2 8c e8 75 0c 3e b0 b0 7e e8 bd d3 00 f5 cf a5 d3 bc ad 27 68 aa 90 5f b6 b5 74 da d8 0c 2c e6 b4 43 e1 a0 11 6e 82 e0 37 f1 31 ae 8a ca a4 71 8e d3 39 77 8c 19 ca 65 6b f9 9d ca 7e 29 5b ab 1e 96 b6 2a c5 52 a5 5c db ad a2 0c fa Data Ascii: 1381[y\c()TIOMyG_Gkd,Cr};QanR\E"81lXFT9_7hi>3\|Ey7<3r^JEwU,lDZooz/.j+8C}z8D+tFYSs/.NofO a2`@1?$$4vg768t.I'Q8:hKvbKGH#@~LX=muE/`hV$QmL2$C]\|f$EH\c4=-+_mM7,K!u>~'h_t,Cn71q9wek~)[*R\
Apr 26, 2024 15:14:18.947933912 CEST	1289	IN	Data Raw: 16 08 f8 11 66 dd e4 85 e4 0e a9 b3 b8 58 c2 cc 6a c1 33 db 66 8e 2b 3e f3 da 6f 46 3e 11 0f 97 7f ca 46 cd 28 08 a1 50 25 ed 90 78 75 c2 a0 5c b1 42 2a 4b 65 7a dc ab cc 11 ab 57 4c be 74 75 2a a1 ea 6e 65 bf 36 ca 4a 32 92 64 24 95 61 22 92 87 Data Ascii: fXj3f+>oF>F(P%xu\BKezWLtune6J2d$a"!9eUvrCP^q@nkBYlO6&MHRliT/J] Jl/(Q*}u'!aJ)_I`g+T%;"sT2B)?@kNzW
Apr 26, 2024 15:14:18.947998047 CEST	1289	IN	Data Raw: 95 98 e4 8e 23 db 21 be 15 53 cb c6 9f c6 e6 58 c1 6f 47 a1 29 48 98 92 84 09 2d 9a 32 9a 99 65 73 d0 da 20 f8 39 5c 66 94 f8 68 04 1c e2 a8 8d b5 c7 fb 1c 37 c7 07 c4 ac 13 13 1c 9b 30 0b 66 8a 09 5d 36 b1 db 06 07 94 93 45 9b 96 44 c0 92 cc 8f Data Ascii: #!SXoG)H-2es 9\fh70f]6EDX2 3hc.5Jo%.M>VBF-5/ll&POzE#C34,>kQ{(#W_c%Y-_zm
Apr 26, 2024 15:14:18.948040962 CEST	1289	IN	Data Raw: 6a 53 87 7a d9 5e db d8 6c 40 2b 3d d5 1d cc 7c fe 35 87 21 62 72 3e 0d 3c dd 91 b3 3f 28 78 90 39 f1 85 ac 7b 61 fc 1b 33 7e 68 1e f9 a0 c8 69 fa 10 cb 36 75 ae 1a 28 b6 79 3b 71 ea 21 cf 86 89 d0 2c 72 b0 14 6d cb bb 64 e7 25 c9 42 4e 13 12 3c Data Ascii: jSz^l@+=\|5!br><?(x9{a3~hi6u(y;q!,rmd%BN<B<}ni<B/2rF9<Ii&?9$L$!&_n;N#6T]#?0LI[&Y_'d5.W+rnP_y\nuqM\|5_V7*1j/y
Apr 26, 2024 15:14:18.948167086 CEST	632	IN	Data Raw: 77 1e bd 2e d5 9e 3e 00 c5 3f 39 fd ad f8 3c bb 27 0b 49 19 4b c1 95 33 51 91 e3 9d be 73 fa 09 74 fe de a3 b7 4e 3f 03 65 6f 80 f2 7b a0 7a a8 f6 f4 de 8c 1e 2c 25 6d 3c 91 98 32 25 98 3a 7f b7 ae 3e 7e ef cb ef 3e 7e f0 f8 e3 c7 3f ff f2 fb 8f Data Ascii: w.>?9<'IK3QstN?eo{z,%m<2%:>~>~?R_z2M]#^d/J4e/~~vPgw{vjZPXI}g:SwGg9k3z~M7R>SW
Apr 26, 2024 15:14:18.952871084 CEST	20	IN	Data Raw: 61 0d 0a 03 00 86 63 ba 33 99 4b 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ac3K0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49722	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:14:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 13:14:02 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=64183 Date: Fri, 26 Apr 2024 13:14:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49726	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:14:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 13:14:03 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=64176 Date: Fri, 26 Apr 2024 13:14:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 13:14:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49724	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:14:05 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 13:14:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 14913c8f-20e0-4250-bb6f-0a12690e30e0 MS-RequestId: 786c2471-6022-4cb7-abbe-ae6acfe49920 MS-CV: AqflMNQ85kC02sDa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:14:05 GMT Connection: close Content-Length: 24490
2024-04-26 13:14:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 13:14:05 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49743	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:14:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=8V3UfxChVSUFNRL&MD=Hgns8Zo6 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 13:14:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: c8ce9534-3672-4ad0-9baf-b10431494fa3 MS-RequestId: 821691c8-24cc-4d7d-9acc-0539b8792013 MS-CV: bfYVlt7iR0+gOTkO.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:14:45 GMT Connection: close Content-Length: 25457
2024-04-26 13:14:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 13:14:46 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3876, Parent PID: 5584

General

Target ID:	0
Start time:	15:13:41
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3276, Parent PID: 3876

General

Target ID:	2
Start time:	15:13:48
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2312,i,5904013108374987392,6537605645107527373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2724, Parent PID: 5584

General

Target ID:	3
Start time:	15:13:50
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lingos.netdimensions.com/lingos"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://lingos.netdimensions.com/lingos

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Windows Analysis Report
http://lingos.netdimensions.com/lingos