Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://www.logisticsacp.com/

Overview

General Information

Sample URL:	https://www.logisticsacp.com/
Analysis ID:	1631878
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Submit button contains javascript call

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 6060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2528,i,7232869568139471451,10120677515761503489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2556 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.logisticsacp.com/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://www.logisticsacp.com/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Aldi' is a well-known international supermarket chain., The URL 'www.logisticsacp.com' does not match the legitimate domain 'aldi.com'., The domain 'logisticsacp.com' does not have any obvious connection to Aldi, which is suspicious., The presence of input fields for 'User ID' and 'Password' on a non-legitimate domain is a common phishing tactic., The URL does not contain any direct reference to Aldi, increasing the likelihood of phishing. DOM: 1.0.pages.csv

Source: https://www.logisticsacp.com/

HTTP Parser: Number of links: 0

Source: https://www.logisticsacp.com/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.logisticsacp.com/

HTTP Parser: Title: Login does not match URL

Source: https://www.logisticsacp.com/	HTTP Parser: On click: do_connect_form('cmdCancel');return false;
Source: https://www.logisticsacp.com/	HTTP Parser: On click: do_connect_form('cmdCancel');return false;
Source: https://www.logisticsacp.com/	HTTP Parser: On click: do_connect_form('cmdCancel');return false;

Source: https://www.logisticsacp.com/

HTTP Parser: <input type="password" .../> found

Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.logisticsacp.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/base/base.css HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_util_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/base/includes/base_grid.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_new_menu_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_pmsn_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_menu_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/callHelp.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_constants.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_forms_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/rp_tab_tiny.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/javascript/staticlogo.js HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCL7VzgEIgNbOAQjB2M4BCMjczgEIiuDOAQjE4c4BCK7kzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rppowered.gif HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /close.gif HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/base/images/Login_SEC_Web_BG.jpg HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.logisticsacp.com/templates/base/base.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /rppowered.gif HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /close.gif HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/base/images/rp_icon.ico HTTP/1.1Host: www.logisticsacp.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/base/images/Login_SEC_Web_BG.jpg HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /templates/base/images/rp_icon.ico HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
Source: global traffic	HTTP traffic detected: GET /index.php? HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.logisticsacp.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /index.php? HTTP/1.1Host: www.logisticsacp.comConnection: keep-aliveContent-Length: 399sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: */*Origin: https://www.logisticsacp.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.logisticsacp.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=

Source: chromecache_63.2.dr	String found in binary or memory: http://www.dynamicdrive.com/
Source: chromecache_63.2.dr	String found in binary or memory: http://www.redprairie.com
Source: chromecache_62.2.dr	String found in binary or memory: https://warehouse-portal-us.aldi-sued.com:10001
Source: chromecache_62.2.dr	String found in binary or memory: https://www.logisticsacp.com/index.php?
Source: chromecache_62.2.dr	String found in binary or memory: https://www.logisticsacp.com/index.php?mode=rp
Source: chromecache_58.2.dr, chromecache_62.2.dr	String found in binary or memory: https://www.testlogisticsacp.com/reset/request.php

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6060_1769406701

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6060_1769406701

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@21/41@14/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2528,i,7232869568139471451,10120677515761503489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2556 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.logisticsacp.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2528,i,7232869568139471451,10120677515761503489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2556 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://www.logisticsacp.com/	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://www.logisticsacp.com/close.gif	0%	Avira URL Cloud	safe
https://warehouse-portal-us.aldi-sued.com:10001	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/index.php?	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/base/images/rp_icon.ico	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/staticlogo.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/index.php?mode=rp	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/base/base.css	0%	Avira URL Cloud	safe
https://www.testlogisticsacp.com/reset/request.php	0%	Avira URL Cloud	safe
http://www.dynamicdrive.com/	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_pmsn_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_util_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/callHelp.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/rppowered.gif	0%	Avira URL Cloud	safe
http://www.redprairie.com	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_menu_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_constants.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_tab_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_new_menu_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/base/images/Login_SEC_Web_BG.jpg	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/javascript/rp_forms_tiny.js	0%	Avira URL Cloud	safe
https://www.logisticsacp.com/templates/base/includes/base_grid.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.logisticsacp.com	67.133.132.20	true	true		unknown
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false		high
www.google.com	172.217.16.196	true	false		high
beacons.gcp.gvt2.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.logisticsacp.com/templates/javascript/staticlogo.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/close.gif	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_pmsn_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/index.php?	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/	true		unknown
https://www.logisticsacp.com/templates/base/images/rp_icon.ico	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/base/base.css	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_util_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_new_menu_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_forms_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_constants.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_tab_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/rppowered.gif	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/rp_menu_tiny.js	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/javascript/callHelp.js	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.logisticsacp.com/templates/base/images/Login_SEC_Web_BG.jpg	true	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/templates/base/includes/base_grid.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://warehouse-portal-us.aldi-sued.com:10001	chromecache_62.2.dr	false	Avira URL Cloud: safe	unknown
http://www.dynamicdrive.com/	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://www.logisticsacp.com/index.php?mode=rp	chromecache_62.2.dr	true	Avira URL Cloud: safe	unknown
https://www.testlogisticsacp.com/reset/request.php	chromecache_58.2.dr, chromecache_62.2.dr	false	Avira URL Cloud: safe	unknown
http://www.redprairie.com	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
67.133.132.20	www.logisticsacp.com	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	true
172.217.16.196	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1631878
Start date and time:	2025-03-07 15:59:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.logisticsacp.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@21/41@14/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 216.58.206.78, 108.177.15.84, 142.250.184.238, 142.250.185.110, 172.217.18.14, 199.232.214.172, 216.58.212.138, 142.250.185.234, 142.250.186.74, 142.250.185.202, 142.250.186.106, 172.217.16.202, 142.250.186.138, 142.250.186.170, 142.250.185.74, 142.250.185.170, 216.58.206.42, 142.250.185.106, 142.250.185.138, 142.250.186.42, 142.250.181.234, 216.58.212.170, 142.250.74.206, 142.250.186.142, 142.250.184.227, 142.250.186.110, 142.250.186.46, 172.217.18.3, 216.58.212.174, 23.199.214.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: https://www.logisticsacp.com/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4344), with CRLF, CR, LF line terminators
Category:	dropped
Size (bytes):	36262
Entropy (8bit):	4.970764777164084
Encrypted:	false
SSDEEP:	768:s+rN2wN2DkFaEypdkm1y6QW3XlypdWmra9j78rIl7rD447DR8v:nrN2wN2DkFaEypdkm1y/W3XlypdWmrai
MD5:	0DD4F2792E8819D2A7FA32027A2FF904
SHA1:	02D7059D2289D718ABBBAF5C395609137AFA5BA8
SHA-256:	4296391D667774CD8ECDB729FD2B7F997CDB2D77C7846FCA7909234F58654B77
SHA-512:	326D62A94AF5DC0B6252CE2B05690A4F8637DE5B4E6190190F51482EB4699EB4D568F6320963E1D8AE020C1F0DB961C732550CC3A9E8F523FE96FB72B0300718
Malicious:	false
Reputation:	low
Preview:	..<html>.... <head>.. ..<link rel="SHORTCUT ICON" href="templates/base/images/rp_icon.ico">......<title>Login</title>....<LINK REL="stylesheet" HREF="templates/base/base.css" TYPE="text/css">..<script type="text/javascript">..var bool_image_true = 'templates/base/images/BoolTrue.gif';..var bool_image_false = 'templates/base/images/BoolFalse.gif';....var expand_img = 'templates/base/images/expand.gif';..var collapse_img = 'templates/base/images/collapse.gif';....var blocking_opacity = '0.5';..var waiting_opacity = '0.7';....window.name = "login";..window.usr_id = "";..window.moca_host = "499DTMSASL31";..window.moca_port = "4600";..</script>....<script type="text/javascript" src="templates/javascript/rp_util_tiny.js"></script>....<script type='text/javascript'>.. function suppressed_loading_status().. {.. return true;.. }..</script>...<script type="text/javascript" src="templates/base/includes/base_grid.js"></script>..<script type="text/javascript" src="templat

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7588
Entropy (8bit):	4.60981950154408
Encrypted:	false
SSDEEP:	96:/LhSfpeU+NRpxoEYPK7Dlh/rweahlM0ZmsYUahWE4ygSUo:/LGkNN1MeahlrKUahWg/
MD5:	9F89E5AFCF777EBBBD00C74FB6619C91
SHA1:	483112D6DE53BB41A29498775C86501A2CB27B25
SHA-256:	A05666383743EBE24352D562105D0ED5258129E93FEB715C3759B1618D809AF6
SHA-512:	13712899A1340EFB8B6E956B56656FA888B11B2E23564330DA16C7CAEAFBC1F03FCC250C30372F9CA618353C8F4061635D4031249E91552FBDDE7D9B916DC998
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/callHelp.js
Preview:	// Modified slighly but taken directly from the following source.....//Copyright Patrick Roebuck roebuck@v-page.com www.v-page.com..var newWindow;..var newWindowSimple;..var newWindowSimpleProc;..var helpWindow;..var helpWindowSimple;..var helpWindowSimpleProc;..var strProjectFramesPagePlus = "Welcome_Page.htm#";//defines the name of the start or frameset page for the WebHelp project..var strProjectPath;..var strHelpPage;..var isNav4 = (navigator.appName == "Netscape" && parseInt(navigator.appVersion) == 4);....function callHelp(strProjectPath, strHelpPage)..{.. var strTriHelpWindowOptions = ",toolbar=yes"; //defines whether to display the toolbar (yes) or hides it (no).. strTriHelpWindowOptions += ",scrollbars=yes"; //defines the distance from the top of the screen that the browser window is opened.. strTriHelpWindowOptions += ",top=0"; //defines the distance from the top of the screen that the browser window is opened.. strTriHelpWindowOptions += ",left=3

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13396), with CRLF line terminators
Category:	downloaded
Size (bytes):	13808
Entropy (8bit):	5.348434584899979
Encrypted:	false
SSDEEP:	384:LPZTqbNhOnGGTPsCRFRf1ixNx9/YX5rcQqlIvv//cCEMfiVW:9TqbNMnGwRFRf1iDxZ+5qlIvv/R
MD5:	886D1853134C88FCAA3F3F024EED68E8
SHA1:	F823A35682A5C44FB107BE86F27259E4C3EFCAA9
SHA-256:	C68C6AD6CB7F06A83EC9A638F1504A93536BB35F5658B5C203161203DBBDEAF0
SHA-512:	E8A46AFE3C1A3938F10FE8F232103F59CA524CE25A2BDB52A598CB79B75EC726AE2B9130EDA9947CC634FE2C6CEB531456CDA14AB5E37EA2CC02D4EC868028E5
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_menu_tiny.js
Preview:	// Copyright 2003..// RedPrairie Corporation..// All Rights Reserved..//..// rp_menu.js..// Helper functions for menus generated using the rp_menu PHP class...//..// WAFFLE..//..// This code was taken directly from the layersmenu.js and layersmenu-library.js..// files of the PHP Layers Menu 3.0 library. Copyright to follow...//..// PHP Layers Menu 3.0.0 (C) 2001-2003 Marco Pratesi (marco at telug dot it)..DOM=(document.getElementById)?1:0;NS4=(document.layers)?1:0;Konqueror=(navigator.userAgent.indexOf("Konqueror")>-1)?1:0;Konqueror21=(navigator.userAgent.indexOf("Konqueror 2.1")>-1\|\|navigator.userAgent.indexOf("Konqueror/2.1")>-1)?1:0;Konqueror22=(navigator.userAgent.indexOf("Konqueror 2.2")>-1\|\|navigator.userAgent.indexOf("Konqueror/2.2")>-1)?1:0;Konqueror2=Konqueror21\|\|Konqueror22;Opera=(navigator.userAgent.indexOf("Opera")>-1)?1:0;Opera5=(navigator.userAgent.indexOf("Opera 5")>-1\|\|navigator.userAgent.indexOf("Opera/5")>-1)?1:0;Opera6=(navigator.userAgent.indexOf("Opera 6")>-1\|\|nav

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 625x415, components 3
Category:	downloaded
Size (bytes):	46504
Entropy (8bit):	7.678764258871683
Encrypted:	false
SSDEEP:	768:I5SFHey0PxoCTjvSm5Br7Mt5xmuX+dLgveADNTV1WEBZcexDt/O0qkmnkbT0XS0Z:I5SFHyJJvvSuBEtfmCqAfEWZxR/O0qdB
MD5:	50EFC4DA1F4349CC64A818CC6E4B908C
SHA1:	5204B70268CEA6A23276171F096D17B56859EED1
SHA-256:	925118A34FD9AB5BCC7F06229DADFE5264401019027FBF5E16ABE76996A49F74
SHA-512:	E98344F21DEEF643785989ED8C84DE497B5C47C3EAF983F708D9B3B5B5E373DC492000AC59596D4AA691E60ECF960597006F48DC0799CBF7782FFF4A7FB215BE
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/base/images/Login_SEC_Web_BG.jpg
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................q.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....jQ.E..M.y...O./.\|J...;..I.....[.J)%...$.O.rG..<...........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4344), with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	36262
Entropy (8bit):	4.968396339544107
Encrypted:	false
SSDEEP:	768:s+rN2wN2DkFaEypdkm1y6QW3XlypdWmra9j78rIl7rDC47Duv:nrN2wN2DkFaEypdkm1y/W3XlypdWmra8
MD5:	16138FC10ED635B9D743105BF8E7AF9B
SHA1:	6E668533DE5543C672D91C161DCA3A2F7DAA0357
SHA-256:	574E9D07636C32F829F1DE4394B9BE371D1CC353E24728D41E2B7939283BAB21
SHA-512:	0BC3F7BBF95AB81F695213B7A837ABC2DAA8990A7E68E7C6DD0553F9E3A0CD775A334CAE0B1811D136001A280DC175988EC3E3ABD930314E5FB36CBDDD7CE2AF
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/
Preview:	..<html>.... <head>.. ..<link rel="SHORTCUT ICON" href="templates/base/images/rp_icon.ico">......<title>Login</title>....<LINK REL="stylesheet" HREF="templates/base/base.css" TYPE="text/css">..<script type="text/javascript">..var bool_image_true = 'templates/base/images/BoolTrue.gif';..var bool_image_false = 'templates/base/images/BoolFalse.gif';....var expand_img = 'templates/base/images/expand.gif';..var collapse_img = 'templates/base/images/collapse.gif';....var blocking_opacity = '0.5';..var waiting_opacity = '0.7';....window.name = "login";..window.usr_id = "";..window.moca_host = "499DTMSASL31";..window.moca_port = "4600";..</script>....<script type="text/javascript" src="templates/javascript/rp_util_tiny.js"></script>....<script type='text/javascript'>.. function suppressed_loading_status().. {.. return true;.. }..</script>...<script type="text/javascript" src="templates/base/includes/base_grid.js"></script>..<script type="text/javascript" src="templat

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4283
Entropy (8bit):	5.049876558955977
Encrypted:	false
SSDEEP:	48:HSx97RNw6PHwSB2jKE3Bt8fSZlZQGKUUr9g7ZpC7B4GlshrcDXQxpxBRe7VHxIN:H1zSBqbBt8K+h5fJVHxIN
MD5:	0BBBAE5FE71D7DCC1490F1766D55E260
SHA1:	3CC06CD5CC020B6B485261F45B5FD660A2B7804F
SHA-256:	A2FFE5AEC67437B3F987DEE980CBDE118D0AD478E15F0872A08A6937230F77FA
SHA-512:	F285AFA7DE3801AAD7A296849E810C0C76E478D23658222163B25BF7BC03FDB57627FDA5F6F794E503549037762A68EFE3C5159784474307A9FB3657F8853EC9
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/staticlogo.js
Preview:	///////////////////////////////////////////////////////////////////../Site Logo Script (Geocities Watermark)..? Dynamic Drive (www.dynamicdrive.com)..For full source code, installation instructions,..100's more DHTML scripts, and TOS, visit http://www.dynamicdrive.com/ /..///////////////////////////////////////////////////////////////////....var logowidth = 104;..var logoheight = 16;..var closewidth = 9;..var closeheight = 9;..var logoimage = new Image(logowidth,logoheight);..var closeimage = new Image(closewidth,closeheight);....logoimage.src="rppowered.gif";..closeimage.src="close.gif";....var logolink="http://www.redprairie.com";..var alttext="RedPrairie";....// Determines the duration the logo should be visible after loading, in seconds...// Entering a value of 0 causes the logo to be perpectually visible. ..var visibleduration=0;....// Optional parameters..var Hoffset=10; //Enter logo's offset from right edge of window (edit only if you don't like the default offset)..var Voffse

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	477
Entropy (8bit):	5.155596774117746
Encrypted:	false
SSDEEP:	12:j9VVXBrp9DP8s3tA+/tSxxtSvtVxtSlDxtS6op6xtSZYVxtSyS46xtSkLY/H6VFt:LVXBr8sHtSxxtSlVxtSlDxtS6op6xtSX
MD5:	64149D0837A838D46E0FEA7F240B6F60
SHA1:	E31E698B85B942E2A36CCB222EAE8FEE32636A47
SHA-256:	05721D8837D49C25564225C7914DB36E3B5A2E4E52AF95C0ACC2B8905A630798
SHA-512:	00B0BCB23511D668BA91908EAE522A5010D2551BA76B5EFD05AA9572925DF87D60CBD72108143870683F95945B5A2DFFDD8E75D720D0EBF58A00B477AA3707FD
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_constants.js
Preview:	// Copyright 2003..// RedPrairie Corporation..// All Rights Reserved..//..// rp_constants.js..// List of constants used in JavaScript routines...//..// WAFFLE..//....var WAFFLE_FIELD_TYPE_TEXT = 'T';..var WAFFLE_FIELD_TYPE_COMBO = 'C';..var WAFFLE_FIELD_TYPE_DATETIME = 'DT';..var WAFFLE_FIELD_TYPE_DATE = 'D';..var WAFFLE_FIELD_TYPE_TIME = 'TM';..var WAFFLE_FIELD_TYPE_PASSWORD = 'P';..var WAFFLE_FIELD_TYPE_BOOLEAN = 'B';..var LINE_SEP = "END\n";..var MULTI_ROW_SEP = '^\|';..

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2256)
Category:	downloaded
Size (bytes):	2448
Entropy (8bit):	5.40246317697715
Encrypted:	false
SSDEEP:	48:fPfJ1+TdXXOGlalxMoFvi8PswTlysyswjlys0+nuysN+BF4ysZys7+O/ht4AV:nfJ1+ISO9qQjZyZjpyn+uyu+kyOy4jV
MD5:	FEE997E423D644CE7CC268DCBE009C58
SHA1:	ECAFE30F6FCD7CF1848880604BFFCA56FD0F052A
SHA-256:	22E06275D5C4EEC6F16915E915070F448FBC81FD94C84622900AAB9BB8A42ED9
SHA-512:	B10F013FF1CC421D7E0102D475D48A2C44C3EB0BBDDFB4929F8330A1F4E84EAFE73908F82E43AAA6E4C62717315707EE52027D7EE1E73BDADA2C38A6B7FB3F18
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_pmsn_tiny.js
Preview:	// Copyright 2008.// RedPrairie Corporation.// All Rights Reserved.//.// rp_pmsn.js.// Utility JavaScript library. This is the tiny version generated using.// jscrunch.php..//.// WAFFLE.//..var pmsn={};pmsn.CTL_TYP_ACTION="A";pmsn.CTL_TYP_TAB="T";pmsn.CTL_TYP_INPUT="I";pmsn.STND_ADDR_NEW="AddressNew";pmsn.STND_ADDR_EDIT="AddressEdit";pmsn.STND_CREATE="Create";pmsn.STND_UPDATE="Update";pmsn.STND_DELETE="Delete";pmsn.STANDARD="STANDARD";pmsn.CUSTOM="CUSTOM";pmsn.ADDR_NEW_BTN_NAME="adrctl_addr_new";pmsn.ADDR_EDIT_BTN_NAME="adrctl_addr_edit";pmsn.execute_pmsns=function(){pmsns=window.WAFFLE_PMSNS;if(!pmsns){rpDebug.logMsg("Error Loading Permissions!");return false;}pmsn.execute_stnd_pmsns(pmsns[pmsn.STANDARD]);var ctrl_id;var custom=pmsns[pmsn.CUSTOM];for(ctrl_id in custom){if(custom[ctrl_id]['web_ctl_typ']==pmsn.CTL_TYP_ACTION){pmsn.execute_action_pmsn(ctrl_id,custom[ctrl_id]['hid_flg'],custom[ctrl_id]['ena_flg']);}else if(custom[ctrl_id]['web_ctl_typ']==pmsn.CTL_TYP_TAB){pmsn.execute_gr

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.590328621280335
Encrypted:	false
SSDEEP:	3:2b5i3szNT89EkmRJneUQJhR:qi3SZ8HmfeUQjR
MD5:	2EFAD56ED7D8ED1F3A4A2F75D3BB71BE
SHA1:	8675A2C12A355EDC2A2A58B991A80FB7B0D68259
SHA-256:	D2F100659211652518509F20726A63B7BCCECD5156DA3CB1569AC2A54CDCF063
SHA-512:	2E19D0EC925A4A72C9469D2AFF09F22412956ACDD29061D70A1712305843BAD1DC285390AECE4D874B98BC94A715D1038CCF9C3AAE172B9382B67A4FD1C254DC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCSYNEADMmN8ZEgUNsHLVjhIFDadnRnkhJtqoMYDi2HwSIAmp88vv2wVk0RIFDQpEFyUSBQ3-Z2elIRaTAZeP4OKd?alt=proto
Preview:	ChYKCw2wctWOGgQIVhgCCgcNp2dGeRoAChIKBw0KRBclGgAKBw3+Z2elGgA=

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	860
Entropy (8bit):	7.9322209457694335
Encrypted:	false
SSDEEP:	24:LtIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL1HnptOOU:x3nfXP3nfXfX/HXPX/HXaHnDOb
MD5:	EAF349BF190E2AF5A522C30620E84F8F
SHA1:	CB3BFF3483C4B6171D9143CB3ACFC1A4FEA699B1
SHA-256:	661D5026813367F03336FF23E2ABDDEEB102FD58D3C50E24A9CC62FD3D43A52F
SHA-512:	D8A300EEF113DD186337F71E15BA333B1B523E8921E87C0FAD3EE0B0354B0D5B56A4B5571A254C3A3117C3102F015316A806A026F18CC3A225B3C57C11F48887
Malicious:	false
Reputation:	low
Preview:	GIF89a....................................................................................................... !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{\|\|\|}}}~~~...................................................................................................................................................................................................................................................................................................................................................................................................!.......,..........6....80......a..3...X............./....!D..7.S.....!..;

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x15, 8 bits/pixel
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	1.7759897540658185
Encrypted:	false
SSDEEP:	12:jkOhm4hb1VoJl6K8dWloE3tkG2Jtjs4q8TjbT7nR:i4hb1VSp3W1J9Y8HbfnR
MD5:	6E287AB8BB89EBB6D4F4D4A8150F0403
SHA1:	E166F04ABCDD3FFF442B0A132B68FDBC8A986542
SHA-256:	F9B60A959536DCF5D976203754A11E4FE610831B78DCBF4D98C09C209A5F472D
SHA-512:	D8AC3998474AF5D1C14F0F80E21FEF4FFB0A99F912BF0A6181C2E5F336AB72B06B7B0ECEB3B8A1D1C9818E3638EEB70555C9286623B4122B40E3449729899F26
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/base/images/rp_icon.ico
Preview:	..............T.......(...............................................................................................................!!..""..((..,,......33..??..BB..CC..HH..OO..RR..SS..YY..cc..vv..xx................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	860
Entropy (8bit):	7.9322209457694335
Encrypted:	false
SSDEEP:	24:LtIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL1HnptOOU:x3nfXP3nfXfX/HXPX/HXaHnDOb
MD5:	EAF349BF190E2AF5A522C30620E84F8F
SHA1:	CB3BFF3483C4B6171D9143CB3ACFC1A4FEA699B1
SHA-256:	661D5026813367F03336FF23E2ABDDEEB102FD58D3C50E24A9CC62FD3D43A52F
SHA-512:	D8A300EEF113DD186337F71E15BA333B1B523E8921E87C0FAD3EE0B0354B0D5B56A4B5571A254C3A3117C3102F015316A806A026F18CC3A225B3C57C11F48887
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/close.gif
Preview:	GIF89a....................................................................................................... !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{\|\|\|}}}~~~...................................................................................................................................................................................................................................................................................................................................................................................................!.......,..........6....80......a..3...X............./....!D..7.S.....!..;

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53824), with CRLF line terminators
Category:	downloaded
Size (bytes):	54004
Entropy (8bit):	5.239402760901474
Encrypted:	false
SSDEEP:	1536:+EuSB6AC8IJT4RUocgurMAqkrkBvyvpQ6tTPLuSGOj3A4b8iz6gA18Kwq/9H:egurJx8dH
MD5:	A665F7D939C88FEAEFD7C2CDE078E1D4
SHA1:	9A266CD2228729CD1A25876C2379F08AD28B9252
SHA-256:	C8EFB087960B241CC39C6723BC655F8E85C8F0E0227DBE634DEBCD1AC0674687
SHA-512:	889B9AC54CF7AD65D214C9C19E91A2D3A3A048708B17FC0C2805766A9DC640DA78E9ED17ADB7204CFB4380A3B379656F64B5C0D32210937DEAF4DB63D87C77D7
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_forms_tiny.js
Preview:	// Copyright 2003..// RedPrairie Corporation..// All Rights Reserved..//..// rp_forms.js..// Helper functions for forms generated using the rp_forms PHP class...//..// WAFFLE....var info_window;var window_path;var form_content;var title_prefix="title_";var lkp_prefix="lkp_img_";var VISIBLE_FIELDS='visible_fields';var HIDDEN_FIELDS='hidden_fields';var ACTIONS='actions';var TIME_CONTROLS='time_controls';var TIME_FIELD_DATE_PREFIX="19000101";var KEYCODE_UP=38;var KEYCODE_DOWN=40;var KEYCODE_A=65;var KEYCODE_Z=90;function get_form_by_id(frm_i){alert("The function get_form_by_id function is no longer valid as called from "+get_form_by_id.caller+".\nPlease use rp._get instead.");return "";if(document.getElementById){return document.getElementById(frm_i);}else{for(var ii=0;ii<document.forms.length;ii++){if(document.forms[ii].name==frm_i){return document.forms[ii];}}}}function get_form_elements(frm_i,type_i){alert("The get_form_elements function is no longer valid as called from "+get_form_ele

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5642), with CRLF line terminators
Category:	downloaded
Size (bytes):	5787
Entropy (8bit):	5.0123577551315055
Encrypted:	false
SSDEEP:	96:DcdtOPa9gqaxUbnfeyBPzCuICVqvq5gMEPlBOoDervwNouTchrvw0yIShnZJOZ:odtOPCaxUbnfeyNntgMOOoDervIfchr1
MD5:	3BF69F50FD705EFFF94B38E3A1BE73C0
SHA1:	E863D9056743D20BA849B3403C24BDCE3EDF966F
SHA-256:	AD77C5B7E89C41152AD656A1614E13B1B6D38DAFFEE8B39847DA9794D4F430A5
SHA-512:	E002C9252B290E8F533F3BB21BC8491A8AF37011F82CE73CC399964CD533AD8014626519B758FDDEA7E7BCA7E618BD2B5B400BC68A71138B3F9679BCA4FBA743
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_tab_tiny.js
Preview:	// Copyright 2006..// RedPrairie Corporation..// All Rights Reserved..//..// rp_tab.js..// Classes and functions for tabs...//..// WAFFLE..//..var rpTab=new Object();rpTab.tabButtonContainer="tab_button_container";rpTab.tabContentContainer="tab_content_container";rpTab.tabContent="tab_content";rpTab.tabButtons="tab_buttons";rpTab.active="active";rpTab.TabGroup=function(group_id_i,options_i){this._group_div=rp._get(group_id_i);if(!this._group_div\|\|this._group_div.tabs_processed){return false;}rpEvent.getEventRouter(window,"onunload").addListener(this.finalize.bind(this));this._tab_button_ctr=null;this._tab_content_ctr=null;this._ulist=null;this._clickEvents=new Array();var ii;var jj;var children=this._group_div.childNodes;var content_children;var content_divs=new Array();for(ii=0;ii<children.length;ii++){if(children[ii].tagName&&children[ii].tagName.toLowerCase()=="div"){if(children[ii].className.toLowerCase()==rpTab.tabButtonContainer){this._tab_button_ctr=children[ii];}if(children[ii]

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5865
Entropy (8bit):	4.654508167194545
Encrypted:	false
SSDEEP:	96:LtP44lCIsYb3zD+ehp0+jKdh2F8iX0yNXrtur0:LFbb3zD+e6h2F8iX0yNXY0
MD5:	E36CE1019F2D9058B6AE54BE2B762CF1
SHA1:	10B8592D5446076C5CDD9DF9B4EE8FA92614F780
SHA-256:	0899158B067ECB55ED7D3E0DC0B8D5470D13FA9E8A16C897CB510F2C5E899086
SHA-512:	5D277970C2B8E569B259C593895D0C2E4DD6754FA2453D54BAB9A1A77DC2E6DD1C86C42F5FAA406C6FF6B6BD27BCE54E1F46D1B8C043E063DD5431798E500565
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/base/includes/base_grid.js
Preview:	// Copyright 2003..// RedPrairie Corporation..// All Rights Reserved..//..// base_grid.js..// Helper functions for working with GRIDS for the BASE template..//..// WAFFLE....// base_show_rows..// This function is called whenever the user decides to show a different..// number of rows in the <grid>_showrows field. This is specific to the..// BASE template...function base_show_rows(grid_i)..{.. var showrows_fld = document.getElementById(grid_i + "_showrows");.. var pages_fld = document.getElementById(grid_i + "_showpage");.. var result_rows = get_num_rows(grid_i);.. var rows_to_show = showrows_fld.value;.... var ii;.... if (rows_to_show == 0).. {.. // Avoid the divide by zero error.. rows_to_show = result_rows;.. }.. var pages = result_rows / rows_to_show;.... if (pages > Math.floor(pages)).. {.. pages = Math.floor(pages) + 1;.. }.... // Remove all of the pages fields.. for (ii = pages_fld.options.length - 1; ii >= 0; ii--).

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 625x415, components 3
Category:	dropped
Size (bytes):	46504
Entropy (8bit):	7.678764258871683
Encrypted:	false
SSDEEP:	768:I5SFHey0PxoCTjvSm5Br7Mt5xmuX+dLgveADNTV1WEBZcexDt/O0qkmnkbT0XS0Z:I5SFHyJJvvSuBEtfmCqAfEWZxR/O0qdB
MD5:	50EFC4DA1F4349CC64A818CC6E4B908C
SHA1:	5204B70268CEA6A23276171F096D17B56859EED1
SHA-256:	925118A34FD9AB5BCC7F06229DADFE5264401019027FBF5E16ABE76996A49F74
SHA-512:	E98344F21DEEF643785989ED8C84DE497B5C47C3EAF983F708D9B3B5B5E373DC492000AC59596D4AA691E60ECF960597006F48DC0799CBF7782FFF4A7FB215BE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................q.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....jQ.E..M.y...O./.\|J...;..I.....[.J)%...$.O.rG..<...........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC..=+.v....?........Q....Q.....L..r.=..Z...G..?..Go.?..!....?...\|Q..E.........(.........kC

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53525), with CRLF line terminators
Category:	downloaded
Size (bytes):	53729
Entropy (8bit):	5.234067356545601
Encrypted:	false
SSDEEP:	1536:qdp2QquCQEcfa5t5Bjmj+id43zy0gqeedQA6kFpBxwPN1V:+0gqeyQAdBxwl1V
MD5:	9B02048B9B904822106B99EC636B754C
SHA1:	17F90898CA4120202FD860EA33CEA3CA1CAE3EF8
SHA-256:	A065D79189F3F162DAD6DBE0EE60BC2509585B8D5B87A9945A5C63AFDB5075AA
SHA-512:	A7EF787579C52698C2202D176752C63691C361E7000842018B87589BA239BC9DF938837D29C0D5D63CB0AF1966032542F3B187CFF19304FFA7162ADD15ACE54C
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_util_tiny.js
Preview:	// Copyright 2006..// RedPrairie Corporation..// All Rights Reserved..//..// rp_util.js..// Utility JavaScript library. This is the tiny version generated using..// jscrunch.php...//..// WAFFLE..//....Function.prototype.bind=function(object){var __method=this;return function(){return __method.apply(object,arguments);}};Function.prototype.bindEventListener=function(object){var __method=this;return function(event){__method.call(object,event\|\|window.event);}};Array.prototype.indexOf=function(obj){var result=-1;for(var ii=0;ii<this.length;ii++){if(this[ii]==obj){result=ii;break;}}return result;};Array.prototype.contains=function(obj){return(this.indexOf(obj)>=0);};Array.prototype.append=function(obj,nodup){if(!(nodup&&this.contains(obj))){this[this.length]=obj;}};Array.prototype.remove=function(obj){var pos=this.indexOf(obj);if(pos>=0){for(var ii=pos;ii<(this.length-1);ii++){this[ii]=this[ii+1];}this.length--;}};Array.prototype.addArray=function(arr){var ii;for(ii=0;ii<arr.length;ii++){if

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10475), with CRLF line terminators
Category:	downloaded
Size (bytes):	10676
Entropy (8bit):	4.999191752949248
Encrypted:	false
SSDEEP:	192:oMkDhP3syxmuFpbRAnmFL/qGu4OtyxedVRcumKal6BZQekEo40y01xxeK6RhqyGu:oMoh0y9F9RAmFL/sHyxedVR5mKaPekER
MD5:	A554559DE843AD3D4D3808D7988F8453
SHA1:	D641F3566A212494C908E3EED7DDE20C4E55F5DC
SHA-256:	24D122469693AF2E689A41FAC09293AF1DE9CC8DAE7BCBC55E242BD1198710F5
SHA-512:	EDB585885E8FC49BB04E64EA4B30E417FC58BA5B6E0253BF8A524BC605D79DC4AE4758F225693E2F445116761726F08C0561552827E6BE35C9DF994781ECDA28
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/javascript/rp_new_menu_tiny.js
Preview:	// Copyright 2006..// RedPrairie Corporation..// All Rights Reserved..//..// rp_new_menu.js..// Menu javascript library. This is the tiny version generated using..// jscrunch.php...//..// WAFFLE....rpMenu=new Object();rpMenu.SUBMENU="S";rpMenu.LEAF="L";rpMenu.selectedImg="templates/base/images/redblock_nav.gif";rpMenu.clearImg="templates/base/images/menuClearBox.gif";rpMenu.defaultSubImage="apps_16.gif";rpMenu.defaultImagePath="templates/base/images/";rpMenu.maxRecursion=14;rpMenu.PATH_SEPARATOR="\|";rpMenu.Menu=function(name_i,title_i,icon_i,options_i){this._name=name_i;this._title=title_i;this._icon=icon_i;var mnu_div=rp._get(name_i);if(mnu_div!=null){document.body.removeChild(mnu_div);}mnu_div=document.createElement("div");mnu_div.id=name_i;mnu_div.className="menu_div";mnu_div.style.display="none";document.body.appendChild(mnu_div);this._div=mnu_div;this._el=null;this._timer=null;this._noclose=0;this._timeout=1000;this._parent=null;if(options_i){if(options_i.noclose){this._noclose=o

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x15, 8 bits/pixel
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	1.7759897540658185
Encrypted:	false
SSDEEP:	12:jkOhm4hb1VoJl6K8dWloE3tkG2Jtjs4q8TjbT7nR:i4hb1VSp3W1J9Y8HbfnR
MD5:	6E287AB8BB89EBB6D4F4D4A8150F0403
SHA1:	E166F04ABCDD3FFF442B0A132B68FDBC8A986542
SHA-256:	F9B60A959536DCF5D976203754A11E4FE610831B78DCBF4D98C09C209A5F472D
SHA-512:	D8AC3998474AF5D1C14F0F80E21FEF4FFB0A99F912BF0A6181C2E5F336AB72B06B7B0ECEB3B8A1D1C9818E3638EEB70555C9286623B4122B40E3449729899F26
Malicious:	false
Reputation:	low
Preview:	..............T.......(...............................................................................................................!!..""..((..,,......33..??..BB..CC..HH..OO..RR..SS..YY..cc..vv..xx................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1986)
Category:	downloaded
Size (bytes):	1991
Entropy (8bit):	5.829819042712877
Encrypted:	false
SSDEEP:	48:NqgFz1+KlgJXwnU2EVoGLIwOo7G/1C9RBA9OdAjuSNYYYYYYYomfffffX:wS7ls2GrLIA781+EsfffffX
MD5:	9D14D8B0E81B8A2FA6FFA7278C21ACC8
SHA1:	04FCF490DA859A12B78E9013210BCD663E04DEEF
SHA-256:	43330BFC1C8FD1659C5A9302684E3EDD2E2A41F56DE21FC51E7CD7FB0AE532F3
SHA-512:	5C479CA2B0FF37A7DEF092810B6970CF41A2CE8E6CF1C714A1CD66606DC5603B86FAFA217A2D850A60A978D764ADC06D1C2CD59F6F41C208A615C99A53146A30
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["nasa washington county maine meteorite","united airlines million miler","wwe 2k25 review","carnival cruise lines","social security administration","pga tour arnold palmer invitational","split fiction games","red robin restaurants closing"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"Cg0vZy8xMXd0bTU4N19uEgtPbmxpbmUgZ2FtZTKmBWRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBRUFBQUFBTkNBTUFBQUF1Y1poZUFBQUFVVkJNVkVYLy8vOEF0dHdBdGRzQXQ5d0F1dDRBdWQzUDdmWS93K0kxd2VIbjl2clo4UGduditEZzgvbDIwT2hleXVYdytmeXU0ZkJOeHVPKzUvT1YyZXlNMXV2My9QMjI1UExHNnZSLzArbHB6ZWFtMys4VFZERkZBQUFCVkVsRVFWUW9rWDNUMlhhRUlBd0EwR3hzQnNlNm9IYisvME1ic0hiMnZuZ0l3aFZpQXAyS1RLQWhCSjkxQkFCVmIxRU1OdXhqQ0pwc2RoR0phYW5STm1yT3RtV0dVV0hSYm9Nb0tBUnNUOHlvdG92WUV3czdHMTRjRTJXTW1TeSs3T1NF

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 104 x 16
Category:	dropped
Size (bytes):	1342
Entropy (8bit):	6.834855481232308
Encrypted:	false
SSDEEP:	24:/6U4+jRVsSsbS7uJXFUsoJgFLbh8lcuQ7aaBGMvE/yXd6kP89:CU40RSppFGJg9aQ7RjvEsdvE
MD5:	57D8B5631A9B56D3D6E217966A761E06
SHA1:	A72F938A6D684CEF6F946577A9A87BBB8179A8F0
SHA-256:	520C523062C9D2596CF4EDE522D1B9DA3F7BC8B760D25C0BFCF86FA28C07A076
SHA-512:	02A792C2AB2A3732C1B658FD98B19EE1AF53708A186BB273EA976A94FD75CEEC3F69A37FD7D4EA58A9C9C18DE4BCF0C242DB23487965C9188AC24F5EC79539C3
Malicious:	false
Reputation:	low
Preview:	GIF89ah..........<<..ww..............ZZ.......--..............ii.44.KK...........hh....11.......%%.[[..............vv...........((.....ll....LL...gg.ww...........22.\|\|....@@..FF....;;.......>>.GG......JJ....``.......cc......"".33..........ii.//.............\\..................ee.)).....{{......................................................................~f.~..~.~..~..~3.~f.~..~..~..~..~3.~f.~..~..~......3..f.........3..3.33.f3..3..3..f..f.3f.ff..f..f.......3..f...........3.f...........3..f..............3..f........3..3.33.f3.3..3..f..f.3f.ff.f..f.......3..f............3..f.............3..f.............3..f.........3..3.33.f3..3..3..f..f.3f.ff..f..f.......3..f.............3..f..............3..f.....................!.....j.,....h.......C8.H..A....Y....#J.H..D. .h.... C......'...Xq...)-....`..8%...H..02..AdE.....(@.R...H.p....:j..aS..D~].@.....><..l....n.*W.S5e..X..F..'@.;w.X.wA..kx....(HL0.`.Z..d.Q@C...;. .....4.0..@.

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	30273
Entropy (8bit):	4.911362366678866
Encrypted:	false
SSDEEP:	192:yy+YNuKZuNZoNTV4DQuJQ+MZMzxHhoMbZMj+32MBZrm/04fAj+/vLD74lcIUTDbT:l+k8+beH7Gr/r8SWqlDxOYX
MD5:	DA9CA18FE5EC9CB6E50FF67B8ED2F85B
SHA1:	F4BFD84A1A2E10855254DDA8675BA9A543178EE2
SHA-256:	EF843F57F6906A5124295AA2F0AF47D0260A5CBCC62F9F4FFEC1242A4A978358
SHA-512:	7CAE1F188B73CD1ECBCD3BE5ADD801ADACA35CB4E7EE62DBA07D0B71F4730E0DE27567B0C1CDDDB5FCB2C0A20335A1E5B856A82540E366A019CA3C80A11DB0A1
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/templates/base/base.css
Preview:	/* Header stuff /...waffle_waiting_div..{.. position: absolute;.. background-color: #000000;.. z-index: 1000001;..}..../ .. * loading status div attributes .. /...waffle_form_status..{.. background-image: url(images/bkgdgradient_full.jpg);.. background-repeat:repeat;.. margin-top: 0;.. margin-left: 0;.. top: 0;.. left: 0;.. z-index: 5001;.. position: absolute;.. width: 100%;.. height: 100%;..}.....waffle_form_status_anim..{.. font-size: 10pt;.. font-weight: bold;.. position: absolute;.. margin: auto;.. z-index:5002;.. background-color: #DDDDDD;.. border: 2px solid #555555;.. padding: 50px;..}../ end - loading status div */.....waffle_blocking_layer..{.. position: absolute;.. background-color: #DDDDDD;.. border: 1px solid #555555;..}....#waffle_debug_div..{.. position: absolute;.. background-color: #739cc8;.. color: white;.. top: 10px;.. left: 10px;.. width: 90%;.. height: 90%;.. text-ali

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 104 x 16
Category:	downloaded
Size (bytes):	1342
Entropy (8bit):	6.834855481232308
Encrypted:	false
SSDEEP:	24:/6U4+jRVsSsbS7uJXFUsoJgFLbh8lcuQ7aaBGMvE/yXd6kP89:CU40RSppFGJg9aQ7RjvEsdvE
MD5:	57D8B5631A9B56D3D6E217966A761E06
SHA1:	A72F938A6D684CEF6F946577A9A87BBB8179A8F0
SHA-256:	520C523062C9D2596CF4EDE522D1B9DA3F7BC8B760D25C0BFCF86FA28C07A076
SHA-512:	02A792C2AB2A3732C1B658FD98B19EE1AF53708A186BB273EA976A94FD75CEEC3F69A37FD7D4EA58A9C9C18DE4BCF0C242DB23487965C9188AC24F5EC79539C3
Malicious:	false
Reputation:	low
URL:	https://www.logisticsacp.com/rppowered.gif
Preview:	GIF89ah..........<<..ww..............ZZ.......--..............ii.44.KK...........hh....11.......%%.[[..............vv...........((.....ll....LL...gg.ww...........22.\|\|....@@..FF....;;.......>>.GG......JJ....``.......cc......"".33..........ii.//.............\\..................ee.)).....{{......................................................................~f.~..~.~..~..~3.~f.~..~..~..~..~3.~f.~..~..~......3..f.........3..3.33.f3..3..3..f..f.3f.ff..f..f.......3..f...........3.f...........3..f..............3..f........3..3.33.f3.3..3..f..f.3f.ff.f..f.......3..f............3..f.............3..f.............3..f.........3..3.33.f3..3..3..f..f.3f.ff..f..f.......3..f.............3..f..............3..f.....................!.....j.,....h.......C8.H..A....Y....#J.H..D. .h.... C......'...Xq...)-....`..8%...H..02..AdE.....(@.R...H.p....:j..aS..D~].@.....><..l....n.*W.S5e..X..F..'@.;w.X.wA..kx....(HL0.`.Z..d.Q@C...;. .....4.0..@.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 7, 2025 16:00:45.329195976 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:45.638425112 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:46.354176998 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:47.676815987 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:50.088114023 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:50.382392883 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:50.382432938 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:50.382488012 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:50.383019924 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:50.383034945 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:51.406083107 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.406179905 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:51.406265974 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.406475067 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.406522989 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:51.406635046 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.408787012 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.408799887 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:51.409145117 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:51.409187078 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:52.377191067 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:52.380289078 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:52.380326986 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:52.381362915 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:52.381422997 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:52.389899969 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:52.390043020 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:52.455265999 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:52.455302954 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:00:52.511341095 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:00:53.322726965 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.323040962 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.323067904 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.324090004 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.324146986 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.326795101 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.326884985 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.327184916 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.327189922 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.328155041 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.328346014 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.328370094 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.329428911 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.329485893 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.329960108 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.330008984 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.371608973 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.371953964 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.371965885 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:53.417917967 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:53.905461073 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:00:54.159997940 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.160032988 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.160060883 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.160171032 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.160171032 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.160202980 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.190228939 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.190458059 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.190499067 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.193716049 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.193716049 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.193788052 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.194247961 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.194607973 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.194643021 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.194794893 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.195044994 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.195061922 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.195359945 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.195379019 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.196382046 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.196419954 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.197263002 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.197345018 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.197385073 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.197663069 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.198057890 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.198072910 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.198430061 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.198461056 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.205166101 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:00:54.235613108 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.236323118 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.259182930 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.259193897 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.259226084 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.259273052 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.259352922 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.260586023 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.260593891 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.260621071 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.260651112 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.260699987 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.304491043 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.304570913 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.304605007 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.304677963 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.309566021 CET	49726	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.309617996 CET	443	49726	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.312382936 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.312437057 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.312602043 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.313462973 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.313479900 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627280951 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627316952 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627322912 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627342939 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627408981 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.627424955 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.627449989 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.657984972 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.658019066 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.658067942 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.658082962 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.658149958 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.678988934 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.679049969 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.679068089 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.709171057 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.709193945 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.709212065 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.709244013 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.709263086 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.709321022 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.718759060 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.718780041 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.718813896 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.718847990 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.718856096 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.718957901 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.718997002 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.719146013 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.719166040 CET	443	49727	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.719177008 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.719208956 CET	49727	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.719693899 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.719786882 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.719870090 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.721028090 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:54.721066952 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:54.807301044 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:00:54.893377066 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:00:56.013241053 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:00:56.077008009 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.077074051 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.077431917 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.077497005 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.077670097 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.077739000 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.078138113 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.078627110 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.078677893 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.078722000 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.078742981 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.079206944 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.079294920 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.079394102 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.079508066 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.079525948 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.092705965 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.093381882 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.093405008 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.093607903 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.094100952 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.094130039 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.094683886 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.094757080 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.095256090 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.095550060 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.095619917 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.097796917 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.097995996 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.098028898 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.098037958 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.098155022 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.119581938 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.120335102 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.138644934 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.140350103 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.262336016 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.262645006 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.262667894 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.266416073 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.266500950 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.266916990 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.267031908 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.267153978 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.267160892 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.310239077 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.610539913 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.610579967 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.610589027 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.610651016 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.610670090 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.612806082 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.612864017 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.612962961 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.612984896 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.613028049 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.613080978 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.613503933 CET	49729	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.613518953 CET	443	49729	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.614094973 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.614140034 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.614204884 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.614834070 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.614862919 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619312048 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619383097 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619432926 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619462967 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.619503975 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619554043 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.619570971 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.619626999 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.620250940 CET	49732	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.620282888 CET	443	49732	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.620553017 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.620579958 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.620771885 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.621109962 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.621121883 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.638504982 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.638537884 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.638605118 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.638685942 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.651520014 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.651591063 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.651621103 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.651667118 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.652095079 CET	49731	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.652107954 CET	443	49731	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.652476072 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.652566910 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.652642012 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.653816938 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.653852940 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.658823013 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.658898115 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.658916950 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.671766996 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.672111988 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.672132969 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.675873995 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.675956011 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.676434994 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.676619053 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.676623106 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.713291883 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.716780901 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.716799021 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.718137980 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.718218088 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.725155115 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.725166082 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.725234985 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.725254059 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.742008924 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.742079020 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.742096901 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.742117882 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.742176056 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.748986006 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.749052048 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.760066032 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.761084080 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.761112928 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.761121035 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.761178017 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.761203051 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.762806892 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.762826920 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.762897968 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.762914896 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.763062000 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.782423973 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.782521963 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.782536983 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.782603979 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.782660007 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.783775091 CET	49730	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.783809900 CET	443	49730	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.784324884 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.784363031 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.784424067 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.786881924 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.786897898 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.806989908 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.839694023 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.839716911 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.839833021 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.839833021 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.839859962 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.839893103 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.839914083 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.839940071 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.843301058 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.843323946 CET	443	49733	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:56.843352079 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:56.843374014 CET	49733	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:57.217860937 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.217896938 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.217905998 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.217930079 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.217959881 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:57.217989922 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.218005896 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:57.218005896 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.218067884 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:57.219424009 CET	49734	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:57.219439983 CET	443	49734	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:57.444463968 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.449588060 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.451611042 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.453394890 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.456639051 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.458583117 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.552252054 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.552263975 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.552381039 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.553030014 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.558027983 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.646131992 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.646214962 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.649739027 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.654767990 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.761542082 CET	443	49710	131.253.33.254	192.168.2.4
Mar 7, 2025 16:00:57.761667967 CET	49710	443	192.168.2.4	131.253.33.254
Mar 7, 2025 16:00:57.766045094 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:57.766318083 CET	49743	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:57.766371965 CET	443	49743	204.79.197.222	192.168.2.4
Mar 7, 2025 16:00:57.766669035 CET	49743	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:57.767050982 CET	49743	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:57.767067909 CET	443	49743	204.79.197.222	192.168.2.4
Mar 7, 2025 16:00:58.073622942 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:58.418802977 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:00:58.566518068 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.566870928 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.566886902 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.567243099 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.567599058 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.567672968 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.567771912 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.585506916 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.585851908 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.585901022 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.587011099 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.587080956 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.587512016 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.587611914 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.587692022 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.595369101 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.595776081 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.595809937 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.596189976 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.596525908 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.596602917 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.596689939 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.608321905 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.621186018 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.628329992 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.636281013 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.636315107 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.636353970 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.636380911 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.663130045 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.663512945 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.663527966 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.663845062 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.664344072 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.664402008 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.664460897 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.680816889 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:58.683237076 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:58.708326101 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:58.716227055 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.073843956 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.073930025 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.073992014 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.074884892 CET	49737	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.074903011 CET	443	49737	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106621027 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106652975 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106667042 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106695890 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106722116 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.106756926 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.106781960 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.128230095 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.128242970 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.128300905 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.128338099 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.133830070 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.133855104 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.133923054 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.133949041 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.133984089 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.136631966 CET	49736	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.136656046 CET	443	49736	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.169537067 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.182939053 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.182965040 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.183026075 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.183092117 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.183092117 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.183487892 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.183557987 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.185096025 CET	49739	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.185120106 CET	443	49739	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.200884104 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.200898886 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.200943947 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.200973034 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.201050997 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.211292982 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.211308002 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.211386919 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.211410046 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.218204975 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.218257904 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.218277931 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.256155968 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.256165981 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.256232023 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.256254911 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279266119 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279274940 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279342890 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.279354095 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279406071 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279421091 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.279447079 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.279465914 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.279839039 CET	49738	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.279861927 CET	443	49738	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.320563078 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.320610046 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.320672989 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.321093082 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.321144104 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.321194887 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.321511030 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.321553946 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.321717978 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.322010040 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.322029114 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.322432995 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.322457075 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.323272943 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:00:59.323290110 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:00:59.868022919 CET	443	49743	204.79.197.222	192.168.2.4
Mar 7, 2025 16:00:59.868144035 CET	49743	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:00:59.892524004 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:01:00.011626005 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:00.052370071 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:00.523924112 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:00.524063110 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:00.524285078 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:00.524369001 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:00.552485943 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:00.552567959 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:00.552748919 CET	49724	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:00.552786112 CET	443	49724	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:01.274892092 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.275433064 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.275465012 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.275774002 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.276041985 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.276240110 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.276302099 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.276484966 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.276508093 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.276667118 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.277455091 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.277527094 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.277915001 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.277987003 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.278058052 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.318213940 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.318242073 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.320328951 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.327790976 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.333489895 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.333508015 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.334140062 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.334615946 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.334718943 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.334844112 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.363724947 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.376323938 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.766705036 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.766777992 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.766850948 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.768536091 CET	49747	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.768569946 CET	443	49747	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.798114061 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.798154116 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.798213959 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.798620939 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.798634052 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.841836929 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.841919899 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.841999054 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.843302011 CET	49748	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.843324900 CET	443	49748	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.847728014 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.847775936 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.847835064 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.848285913 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.848314047 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.851919889 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.851988077 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.852051973 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.852072001 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.899044991 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.899144888 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.899163961 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.919040918 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.919130087 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.919147968 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.935379982 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.935403109 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.935446024 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.935472012 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.935504913 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.956276894 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.956298113 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.956378937 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.956396103 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.956422091 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.959714890 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:01.959769964 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:01.959784031 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.010703087 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.044646025 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.044691086 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.044708967 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.044724941 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.044776917 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.044790030 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.045063972 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.045116901 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.071304083 CET	49746	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.071332932 CET	443	49746	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.102791071 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.102834940 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.102895975 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.103288889 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.103302002 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.129949093 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.130047083 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.130283117 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.130831003 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.130863905 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.265672922 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.265721083 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.265818119 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.266319036 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:02.266330957 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:02.292237997 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:01:03.229144096 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:01:03.688771963 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.689107895 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.689130068 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.692884922 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.693312883 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.693507910 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.693507910 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.693695068 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.723464966 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.723856926 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.723895073 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.724975109 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.725060940 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.725414038 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.725480080 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.725868940 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.744951010 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.744985104 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.768335104 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.776103973 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.776129961 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:03.791677952 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:03.822947025 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.007002115 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.007328987 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.007356882 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.007677078 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.008188963 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.008188963 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.008250952 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.052577972 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.052900076 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.052923918 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.053292990 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.053916931 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.053916931 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.053985119 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.057423115 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.104147911 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.184010983 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.184114933 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.184250116 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.185398102 CET	49750	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.185415983 CET	443	49750	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.456429005 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.456523895 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.458040953 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.458198071 CET	49751	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.458226919 CET	443	49751	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.459479094 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.460028887 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.460042953 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.461539984 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.461615086 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.462138891 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.462219000 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.462449074 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.462456942 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.496849060 CET	49671	443	192.168.2.4	204.79.197.203
Mar 7, 2025 16:01:04.510478973 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.558026075 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.558115959 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.558775902 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.559216022 CET	49752	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.559243917 CET	443	49752	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.562412977 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.562458038 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.562926054 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.562926054 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.562963009 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.663954973 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.664047956 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.664185047 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.665487051 CET	49753	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.665517092 CET	443	49753	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.671624899 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.671681881 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.671925068 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.672158003 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.672182083 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.991524935 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.991564989 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.991574049 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:04.991676092 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:04.991688967 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.011045933 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.011176109 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.011187077 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.056934118 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.074053049 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.074162960 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.075665951 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.075675011 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.075725079 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.075736046 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.075834036 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.092499018 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.092506886 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.092592955 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.092601061 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.106367111 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.106481075 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.106487989 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.145745993 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.145760059 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.145912886 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:05.145970106 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.146152020 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.146459103 CET	49754	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:05.146476030 CET	443	49754	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.625849009 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.628743887 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.628781080 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.629153967 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.629600048 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.629677057 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.629786015 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.631673098 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.632349968 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.632361889 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.632843018 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.633281946 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.633281946 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.633354902 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.672337055 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:06.683182001 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:06.684437990 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.105063915 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:01:07.258212090 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.258271933 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.258358955 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.259362936 CET	49759	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.259397984 CET	443	49759	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.483371973 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.483411074 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.483421087 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.483454943 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.483556986 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.483570099 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.532016039 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.532082081 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.532088995 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.547735929 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.547751904 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.547787905 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.547800064 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.547816038 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.547862053 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.580207109 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.580223083 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.580317974 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.580328941 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.627057076 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.627131939 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.627146959 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.627162933 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:07.627190113 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.627218962 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.653754950 CET	49758	443	192.168.2.4	67.133.132.20
Mar 7, 2025 16:01:07.653773069 CET	443	49758	67.133.132.20	192.168.2.4
Mar 7, 2025 16:01:12.837155104 CET	49678	443	192.168.2.4	20.189.173.27
Mar 7, 2025 16:01:16.713502884 CET	49680	443	192.168.2.4	204.79.197.222
Mar 7, 2025 16:01:50.433957100 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:50.434007883 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:50.434123039 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:50.434407949 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:50.434420109 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:52.613082886 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:52.613480091 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:52.613512039 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:52.615127087 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:52.615616083 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:52.615875959 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:01:52.666646004 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:01:59.264266014 CET	443	49708	13.107.246.60	192.168.2.4
Mar 7, 2025 16:01:59.264364958 CET	49708	443	192.168.2.4	13.107.246.60
Mar 7, 2025 16:01:59.266125917 CET	443	49708	13.107.246.60	192.168.2.4
Mar 7, 2025 16:01:59.266176939 CET	49708	443	192.168.2.4	13.107.246.60
Mar 7, 2025 16:02:02.213535070 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:02:02.213700056 CET	443	49763	172.217.16.196	192.168.2.4
Mar 7, 2025 16:02:02.213876963 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:02:02.465873957 CET	49763	443	192.168.2.4	172.217.16.196
Mar 7, 2025 16:02:02.465898037 CET	443	49763	172.217.16.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 7, 2025 16:00:46.404835939 CET	53	56224	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:46.438159943 CET	53	60602	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:49.875056982 CET	53	64724	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:50.373178959 CET	58459	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:00:50.373450041 CET	61666	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:00:50.380681038 CET	53	58459	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:50.380994081 CET	53	61666	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:51.384377003 CET	62452	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:00:51.384622097 CET	60888	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:00:51.397516012 CET	53	62452	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:51.405472040 CET	53	60888	1.1.1.1	192.168.2.4
Mar 7, 2025 16:00:59.374783993 CET	53	51449	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:01.774532080 CET	53962	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:01:01.774764061 CET	51778	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:01:01.787755013 CET	53	53962	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:01.797657967 CET	53	51778	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:06.989203930 CET	53	62668	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:25.924364090 CET	53	59605	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:45.712153912 CET	53	55680	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:48.331573009 CET	53	50609	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:49.644409895 CET	53	52348	1.1.1.1	192.168.2.4
Mar 7, 2025 16:01:53.408536911 CET	138	138	192.168.2.4	192.168.2.255
Mar 7, 2025 16:02:02.469199896 CET	64883	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:02.469573975 CET	52954	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:02.476080894 CET	53	64883	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:02.476772070 CET	53	52954	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:03.497176886 CET	49587	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:03.497657061 CET	56670	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:03.504740000 CET	53	49587	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:03.505347013 CET	53	56670	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:05.526691914 CET	65311	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:05.534305096 CET	53	65311	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:06.526247025 CET	65311	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:06.534146070 CET	53	65311	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:07.541301966 CET	65311	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:07.552037001 CET	53	65311	1.1.1.1	192.168.2.4
Mar 7, 2025 16:02:09.556793928 CET	65311	53	192.168.2.4	1.1.1.1
Mar 7, 2025 16:02:09.564192057 CET	53	65311	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 7, 2025 16:00:50.373178959 CET	192.168.2.4	1.1.1.1	0x6e74	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:00:50.373450041 CET	192.168.2.4	1.1.1.1	0x8994	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 7, 2025 16:00:51.384377003 CET	192.168.2.4	1.1.1.1	0x4602	Standard query (0)	www.logisticsacp.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:00:51.384622097 CET	192.168.2.4	1.1.1.1	0xd9aa	Standard query (0)	www.logisticsacp.com	65	IN (0x0001)	false
Mar 7, 2025 16:01:01.774532080 CET	192.168.2.4	1.1.1.1	0x37aa	Standard query (0)	www.logisticsacp.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:01:01.774764061 CET	192.168.2.4	1.1.1.1	0xea55	Standard query (0)	www.logisticsacp.com	65	IN (0x0001)	false
Mar 7, 2025 16:02:02.469199896 CET	192.168.2.4	1.1.1.1	0x139d	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:02.469573975 CET	192.168.2.4	1.1.1.1	0x6e34	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 7, 2025 16:02:03.497176886 CET	192.168.2.4	1.1.1.1	0x3a11	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:03.497657061 CET	192.168.2.4	1.1.1.1	0xe86b	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 7, 2025 16:02:05.526691914 CET	192.168.2.4	1.1.1.1	0x9478	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:06.526247025 CET	192.168.2.4	1.1.1.1	0x9478	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:07.541301966 CET	192.168.2.4	1.1.1.1	0x9478	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:09.556793928 CET	192.168.2.4	1.1.1.1	0x9478	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 7, 2025 16:00:50.380681038 CET	1.1.1.1	192.168.2.4	0x6e74	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:00:50.380994081 CET	1.1.1.1	192.168.2.4	0x8994	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 7, 2025 16:00:51.397516012 CET	1.1.1.1	192.168.2.4	0x4602	No error (0)	www.logisticsacp.com		67.133.132.20	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:01:01.787755013 CET	1.1.1.1	192.168.2.4	0x37aa	No error (0)	www.logisticsacp.com		67.133.132.20	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:02.476080894 CET	1.1.1.1	192.168.2.4	0x139d	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:02.476080894 CET	1.1.1.1	192.168.2.4	0x139d	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:02.476772070 CET	1.1.1.1	192.168.2.4	0x6e34	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:03.504740000 CET	1.1.1.1	192.168.2.4	0x3a11	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:03.504740000 CET	1.1.1.1	192.168.2.4	0x3a11	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:03.505347013 CET	1.1.1.1	192.168.2.4	0xe86b	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:05.534305096 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:05.534305096 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:06.534146070 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:06.534146070 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:07.552037001 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:07.552037001 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 7, 2025 16:02:09.564192057 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 7, 2025 16:02:09.564192057 CET	1.1.1.1	192.168.2.4	0x9478	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.logisticsacp.com

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:53 UTC	670	OUT	GET / HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 15:00:54 UTC	437	IN	HTTP/1.1 200 OK Cache-Control: private, must-revalidate Pragma: private Content-Type: text/html Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 07 Mar 2025 15:03:44 GMT Set-Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; path=/; Secure; HttpOnly Set-Cookie: BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=; path=/; Secure; HttpOnly Connection: close
2025-03-07 15:00:54 UTC	7755	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 62 61 73 65 2f 69 6d 61 67 65 73 2f 72 70 5f 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 4c 49 4e 4b 20 52 45 4c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 48 52 45 46 3d 22 74 65 6d 70 6c 61 74 65 73 2f 62 61 73 65 2f 62 61 73 65 2e 63 73 73 22 20 54 59 50 45 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 76 61 72 20 62 6f 6f 6c 5f 69 6d 61 67 65 5f 74 72 75 Data Ascii: <html> <head> <link rel="SHORTCUT ICON" href="templates/base/images/rp_icon.ico"><title>Login</title><LINK REL="stylesheet" HREF="templates/base/base.css" TYPE="text/css"><script type="text/javascript">var bool_image_tru
2025-03-07 15:00:54 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 61 73 73 69 67 6e 41 4c 50 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 72 70 2e 46 38 20 3d 3d 20 6b 65 79 20 26 26 20 63 74 72 6c 20 26 26 20 73 68 69 66 74 29 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 73 68 69 66 74 2d 63 74 72 6c 2d 46 38 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 61 66 66 6c 65 41 64 6d 69 6e 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 6b 65 79 5f 63 68 61 72 20 3d 3d 20 22 4d 22 20 26 26 20 63 74 72 6c 20 26 26 20 73 68 69 66 74 29 20 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 73 68 69 66 74 2d 63 74 72 6c 2d 64 0d 0a 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: assignALP(); } else if (rp.F8 == key && ctrl && shift) // check for shift-ctrl-F8 { waffleAdmin(); } else if (key_char == "M" && ctrl && shift) // Check for shift-ctrl-d {
2025-03-07 15:00:54 UTC	15	IN	Data Raw: 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 0a Data Ascii: ipt>
2025-03-07 15:00:54 UTC	8192	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 64 74 5f 66 6f 72 6d 61 74 3d 27 6d 64 79 79 79 79 27 3b 76 61 72 20 64 74 5f 73 65 70 3d 27 2f 27 3b 76 61 72 20 74 69 6d 5f 66 6f 72 6d 61 74 3d 27 32 34 27 3b 76 61 72 20 74 69 6d 5f 73 65 70 3d 27 3a 27 3b 76 61 72 20 74 69 6d 5f 61 6d 5f 73 74 72 3d 27 61 6d 27 3b 76 61 72 20 74 69 6d 5f 70 6d 5f 73 74 72 3d 27 70 6d 27 3b 76 61 72 20 66 6f 72 6d 5f 6d 6c 73 3d 7b 22 74 74 6c 43 61 6c 65 6e 64 61 72 22 3a 22 43 61 6c 65 6e 64 61 72 22 2c 22 74 69 6d 65 22 3a 22 54 69 6d 65 22 2c 22 65 72 72 49 6e 76 61 6c 69 64 44 61 74 65 46 6f 72 6d 61 74 22 3a 22 49 6e 76 61 6c 69 64 20 64 61 74 65 20 61 6e 64 5c 2f 6f 72 20 74 69 6d 65 20 66 6f 72 6d 61 74 2e Data Ascii: <script type="text/javascript">var dt_format='mdyyyy';var dt_sep='/';var tim_format='24';var tim_sep=':';var tim_am_str='am';var tim_pm_str='pm';var form_mls={"ttlCalendar":"Calendar","time":"Time","errInvalidDateFormat":"Invalid date and\/or time format.
2025-03-07 15:00:54 UTC	8192	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 68 5f 66 6c 67 20 3d 20 72 70 2e 5f 67 65 74 28 22 77 68 5f 69 64 5f 66 6c 67 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 6c 64 5f 77 68 20 3d 20 72 70 2e 5f 67 65 74 28 22 77 68 5f 69 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 53 74 72 20 3d 20 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 20 3d 20 73 74 61 74 75 73 53 74 72 2e 73 70 6c 69 74 28 72 70 2e 4d 55 4c 54 49 5f 52 4f 57 5f 53 45 50 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 5b 30 5d 20 21 3d 20 72 Data Ascii: var wh_flg = rp._get("wh_id_flg"); var fld_wh = rp._get("wh_id"); var statusStr = this.responseText; var status = statusStr.split(rp.MULTI_ROW_SEP); if (status[0] != r
2025-03-07 15:00:54 UTC	3916	IN	Data Raw: 79 20 69 64 3d 22 63 6f 6e 74 65 6e 74 5f 74 61 62 6c 65 5f 62 6f 64 79 5f 63 6f 6e 6e 65 63 74 5f 66 6f 72 6d 5f 22 3e 0a 3c 74 72 3e 0a 3c 74 64 20 73 74 79 6c 65 3d 27 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 27 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 5f 6e 61 6d 65 5f 63 65 6c 6c 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 6f 6e 66 69 67 5f 6d 6f 63 61 5f 68 6f 73 74 22 20 69 64 3d 22 74 69 74 6c 65 5f 63 6f 6e 66 69 67 5f 6d 6f 63 61 5f 68 6f 73 74 22 3e 4d 4f 43 41 20 48 6f 73 74 20 4e 61 6d 65 3a 3c 2f 6c 61 62 65 6c 3e 3c 2f 74 64 3e 0a 3c 74 64 20 6e 6f 77 72 61 70 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 74 65 78 74 22 20 Data Ascii: y id="content_table_body_connect_form_"><tr><td style='vertical-align:top;padding-top:6px;' class="field_name_cell"><label for="config_moca_host" id="title_config_moca_host">MOCA Host Name:</label></td><td nowrap><input type="text" class="text"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49727	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:54 UTC	740	OUT	GET /templates/base/base.css HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:54 UTC	216	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 30 Aug 2011 16:34:00 GMT Accept-Ranges: bytes ETag: "04cf89e3267cc1:0" Date: Fri, 07 Mar 2025 15:03:44 GMT Content-Length: 30273 Connection: close
2025-03-07 15:00:54 UTC	7976	IN	Data Raw: 2f 2a 20 48 65 61 64 65 72 20 73 74 75 66 66 20 2a 2f 0d 0a 2e 77 61 66 66 6c 65 5f 77 61 69 74 69 6e 67 5f 64 69 76 0d 0a 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 31 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 0d 0a 20 2a 20 6c 6f 61 64 69 6e 67 20 73 74 61 74 75 73 20 64 69 76 20 61 74 74 72 69 62 75 74 65 73 20 0d 0a 20 2a 2f 0d 0a 2e 77 61 66 66 6c 65 5f 66 6f 72 6d 5f 73 74 61 74 75 73 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 69 6d 61 67 65 73 2f 62 6b 67 64 67 72 61 64 69 65 6e 74 5f 66 75 6c 6c 2e 6a 70 67 29 3b 0d Data Ascii: /* Header stuff /.waffle_waiting_div{ position: absolute; background-color: #000000; z-index: 1000001;}/ * loading status div attributes */.waffle_form_status{ background-image: url(images/bkgdgradient_full.jpg);
2025-03-07 15:00:54 UTC	8192	IN	Data Raw: 65 6c 64 5f 6e 61 6d 65 5f 63 65 6c 6c 2e 72 65 71 75 69 72 65 64 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 74 64 2e 66 69 65 6c 64 5f 6e 61 6d 65 5f 63 65 6c 6c 2e 64 69 73 61 62 6c 65 64 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 65 39 65 39 65 3b 0d 0a 7d 0d 0a 0d 0a 74 64 2e 66 69 65 6c 64 5f 63 6f 6e 74 65 6e 74 73 5f 63 65 6c 6c 0d 0a 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6c 75 6d 6e 5f 74 69 74 Data Ascii: eld_name_cell.required{ color: #cc0000;}td.field_name_cell.disabled{ color: #9e9e9e;}td.field_contents_cell{ border: 1px solid black; width: 200px; font-size: 12px; background-color: white;}.column_tit
2025-03-07 15:00:54 UTC	2770	IN	Data Raw: 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 30 3b 0d 0a 7d 0d 0a 0d 0a 23 77 61 66 66 6c 65 5f 69 6e 66 6f 5f 63 6f 6e 6e 65 63 74 69 6f 6e 0d 0a 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 32 30 70 78 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 70 78 3b 0d 0a 7d 0d 0a Data Ascii: or: white; border-top: 1px solid black; border-left: 1px solid black; border-right: 1px solid #c0c0c0; border-bottom: 1px solid #c0c0c0;}#waffle_info_connection{ width: 120px; float: left; padding-left: 2px;}
2025-03-07 15:00:54 UTC	8192	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 23 6e 61 76 5f 6d 65 6e 75 20 61 2e 74 6f 70 5f 6d 65 6e 75 0d 0a 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 2e 35 70 74 3b 0d 0a 7d 0d 0a 0d 0a 23 6e 61 76 5f 6d 65 6e 75 20 2e 69 74 65 6d 0d 0a 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 70 78 3b 0d 0a Data Ascii: text-decoration: none; color: black;}#nav_menu a.top_menu{ font-family: arial; font-weight: bold; font-size: 10.5pt;}#nav_menu .item{ display:block; margin-left: 8px; width: 100%; padding-top: 2px;
2025-03-07 15:00:54 UTC	3143	IN	Data Raw: 65 6e 64 61 72 20 53 74 79 6c 65 73 20 2a 2f 0d 0a 2f 2a 20 44 41 54 45 20 50 49 43 4b 45 52 20 53 54 59 4c 45 53 20 2a 2f 0d 0a 23 77 61 66 66 6c 65 5f 63 61 6c 5f 64 69 76 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 33 39 63 63 38 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 74 68 69 6e 20 69 6e 73 65 74 20 23 63 30 63 30 63 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 33 39 63 63 38 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 63 61 6c 2d 70 72 65 76 2d 6d 6f 6e 74 68 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 Data Ascii: endar Styles // DATE PICKER STYLES */#waffle_cal_div{ background-color: #739cc8; width: 200px; height: 1%; border: thin inset #c0c0c0;}.cal-container{ background-color: #739cc8;}a.cal-prev-month{ color

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49730	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	739	OUT	GET /templates/javascript/rp_util_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:56 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 15 Apr 2009 17:38:28 GMT Accept-Ranges: bytes ETag: "0255fcf0bdc91:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 53729 Connection: close
2025-03-07 15:00:56 UTC	7963	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 75 74 69 6c 2e 6a 73 0d 0a 2f 2f 20 55 74 69 6c 69 74 79 20 4a 61 76 61 53 63 72 69 70 74 20 6c 69 62 72 61 72 79 2e 20 20 54 68 69 73 20 69 73 20 74 68 65 20 74 69 6e 79 20 76 65 72 73 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 0d 0a 2f 2f 20 6a 73 63 72 75 6e 63 68 2e 70 68 70 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 2f 2f 0d 0a 0d 0a 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 76 61 72 20 5f 5f 6d 65 74 68 6f 64 Data Ascii: // Copyright 2006// RedPrairie Corporation// All Rights Reserved//// rp_util.js// Utility JavaScript library. This is the tiny version generated using// jscrunch.php.//// WAFFLE//Function.prototype.bind=function(object){var __method
2025-03-07 15:00:56 UTC	8192	IN	Data Raw: 72 20 74 65 6d 70 3d 61 70 70 56 65 72 2e 73 70 6c 69 74 28 22 4d 53 49 45 22 29 3b 69 66 28 61 70 70 56 65 72 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 22 29 21 3d 2d 31 29 7b 76 61 72 20 76 65 72 73 69 6f 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 65 6d 70 5b 31 5d 29 3b 69 66 28 76 65 72 73 69 6f 6e 3e 3d 35 2e 35 26 26 76 65 72 73 69 6f 6e 3c 37 2e 30 29 7b 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 3b 72 70 2e 5f 69 73 5f 6d 6f 62 69 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 72 65 74 75 72 6e 20 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 3b 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 3b 72 70 2e 5f 69 Data Ascii: r temp=appVer.split("MSIE");if(appVer.indexOf("MSIE")!=-1){var version=parseFloat(temp[1]);if(version>=5.5&&version<7.0){return true;}}return false;};rp._is_mobile=function(){if(typeof mobile_device!="undefined"){return mobile_device;}return false;};rp._i
2025-03-07 15:00:56 UTC	2784	IN	Data Raw: 6e 74 5f 6e 61 6d 65 5d 3d 74 68 69 73 3b 72 70 45 76 65 6e 74 2e 61 74 74 61 63 68 43 61 6c 6c 62 61 63 6b 28 65 6c 65 6d 65 6e 74 5f 69 2c 65 76 65 6e 74 5f 74 79 70 65 5f 69 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 72 70 45 76 65 6e 74 2e 45 76 65 6e 74 52 6f 75 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 73 6e 72 5f 69 29 7b 74 68 69 73 2e 6c 73 6e 72 73 2e 61 70 70 65 6e 64 28 6c 73 6e 72 5f 69 2c 74 72 75 65 29 3b 7d 3b 72 70 45 76 65 6e 74 2e 45 76 65 6e 74 52 6f 75 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 73 6e 72 5f 69 29 7b 74 68 69 73 2e 6c 73 6e 72 73 2e 72 65 6d 6f 76 65 28 6c 73 6e 72 5f 69 29 3b Data Ascii: nt_name]=this;rpEvent.attachCallback(element_i,event_type_i);}}catch(e){}};rpEvent.EventRouter.prototype.addListener=function(lsnr_i){this.lsnrs.append(lsnr_i,true);};rpEvent.EventRouter.prototype.removeListener=function(lsnr_i){this.lsnrs.remove(lsnr_i);
2025-03-07 15:00:56 UTC	8192	IN	Data Raw: 77 5f 69 3f 66 75 6c 6c 5f 77 69 6e 64 6f 77 5f 69 3a 66 61 6c 73 65 29 3b 72 70 44 65 62 75 67 2e 6c 6f 67 4d 73 67 28 22 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 63 72 65 61 74 65 64 3a 20 22 2b 75 72 6c 5f 69 29 3b 69 66 28 21 74 68 69 73 2e 64 65 6c 61 79 5f 72 75 6e 29 7b 74 68 69 73 2e 73 68 6f 77 57 69 6e 64 6f 77 28 29 3b 7d 7d 3b 72 70 2e 4d 6f 64 61 6c 57 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 5f 64 65 66 61 75 6c 74 5f 72 61 74 69 6f 3d 30 2e 35 3b 72 70 2e 4d 6f 64 61 6c 57 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 5f 6d 69 6e 5f 77 69 64 74 68 3d 35 30 30 3b 72 70 2e 4d 6f 64 61 6c 57 69 6e 64 6f 77 2e 6c 69 67 68 74 62 6f 78 5f 6d 69 6e 5f 68 65 69 67 68 74 3d 33 30 30 3b 72 70 2e 4d 6f 64 61 6c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: w_i?full_window_i:false);rpDebug.logMsg("ModalWindow created: "+url_i);if(!this.delay_run){this.showWindow();}};rp.ModalWindow.lightbox_default_ratio=0.5;rp.ModalWindow.lightbox_min_width=500;rp.ModalWindow.lightbox_min_height=300;rp.ModalWindow.prototype
2025-03-07 15:00:56 UTC	8192	IN	Data Raw: 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 43 6c 65 61 72 22 29 3b 61 6e 63 68 6f 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 78 74 29 3b 61 6e 63 68 6f 72 2e 68 72 65 66 3d 22 23 22 3b 72 70 45 76 65 6e 74 2e 67 65 74 45 76 65 6e 74 52 6f 75 74 65 72 28 61 6e 63 68 6f 72 2c 22 6f 6e 63 6c 69 63 6b 22 29 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 72 70 44 65 62 75 67 2e 63 6c 65 61 72 4c 6f 67 29 3b 64 69 76 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 6e 63 68 6f 72 29 3b 61 6e 63 68 6f 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 74 78 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 43 6f 70 79 20 74 6f 20 43 6c 69 70 62 6f 61 72 64 22 29 3b 61 6e 63 68 6f 72 2e Data Ascii: ment.createTextNode("Clear");anchor.appendChild(txt);anchor.href="#";rpEvent.getEventRouter(anchor,"onclick").addListener(rpDebug.clearLog);div.appendChild(anchor);anchor=document.createElement("a");txt=document.createTextNode("Copy to Clipboard");anchor.
2025-03-07 15:00:56 UTC	2816	IN	Data Raw: 73 65 28 29 3d 3d 22 73 65 6c 65 63 74 22 7c 7c 28 66 6c 64 5b 69 69 5d 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 69 6e 70 75 74 22 26 26 28 66 6c 64 5b 69 69 5d 2e 74 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 74 65 78 74 22 7c 7c 66 6c 64 5b 69 69 5d 2e 74 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 63 68 65 63 6b 62 6f 78 22 7c 7c 66 6c 64 5b 69 69 5d 2e 74 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 70 61 73 73 77 6f 72 64 22 29 29 29 26 26 21 66 6c 64 5b 69 69 5d 2e 69 64 2e 6d 61 74 63 68 28 22 5f 73 65 6c 65 63 74 22 29 29 7b 66 6c 64 5b 69 69 5d 2e 66 78 3d 74 68 69 73 3b 72 70 45 76 65 6e 74 2e 67 65 74 45 76 65 6e 74 52 6f 75 74 65 72 28 66 6c 64 5b 69 69 5d 2c 22 Data Ascii: se()=="select"\|\|(fld[ii].tagName.toLowerCase()=="input"&&(fld[ii].type.toLowerCase()=="text"\|\|fld[ii].type.toLowerCase()=="checkbox"\|\|fld[ii].type.toLowerCase()=="password")))&&!fld[ii].id.match("_select")){fld[ii].fx=this;rpEvent.getEventRouter(fld[ii],"
2025-03-07 15:00:56 UTC	8192	IN	Data Raw: 6f 6e 73 5f 69 2e 65 6e 64 5f 66 75 6e 63 74 69 6f 6e 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 65 6e 64 5f 66 75 6e 63 74 69 6f 6e 3d 6f 70 69 74 6f 6e 73 5f 69 2e 65 6e 64 5f 66 75 6e 63 74 69 6f 6e 3b 7d 7d 74 68 69 73 2e 6f 72 69 67 5f 63 6f 6c 6f 72 3d 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3b 74 68 69 73 2e 69 74 65 72 61 74 69 6f 6e 3d 30 3b 74 68 69 73 2e 74 69 6d 65 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 62 6c 69 6e 6b 53 74 65 70 2e 62 69 6e 64 28 74 68 69 73 29 2c 32 35 30 29 3b 7d 3b 72 70 46 58 2e 42 6c 69 6e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 62 6c 69 6e 6b 53 74 65 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 26 26 21 Data Ascii: ons_i.end_function!="undefined"){this.end_function=opitons_i.end_function;}}this.orig_color=this.el.style.backgroundColor;this.iteration=0;this.timer=setInterval(this.blinkStep.bind(this),250);};rpFX.Blink.prototype.blinkStep=function(){if(document.all&&!
2025-03-07 15:00:56 UTC	7398	IN	Data Raw: 6e 6d 6f 75 73 65 6f 76 65 72 27 29 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 72 70 2e 73 74 61 74 69 63 5f 74 6f 6f 6c 74 69 70 5f 73 68 6f 77 29 3b 72 70 45 76 65 6e 74 2e 67 65 74 45 76 65 6e 74 52 6f 75 74 65 72 28 6f 62 6a 2c 27 6f 6e 6d 6f 75 73 65 6f 75 74 27 29 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 68 69 64 65 29 3b 7d 7d 3b 72 70 2e 77 61 66 66 6c 65 5f 74 6f 6f 6c 74 69 70 5f 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 6f 6f 6c 74 69 70 5f 6f 62 6a 65 63 74 3d 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6f 62 6a 65 63 74 3b 76 61 72 20 72 65 71 75 65 73 74 69 6e 67 5f 6f 62 6a 65 63 74 3d 74 68 69 73 2e 72 65 71 75 65 73 74 69 6e 67 5f 6f 62 6a 65 63 74 3b 69 66 28 74 6f 6f 6c 74 69 70 5f 6f 62 6a 65 63 74 Data Ascii: nmouseover').addListener(rp.static_tooltip_show);rpEvent.getEventRouter(obj,'onmouseout').addListener(this.hide);}};rp.waffle_tooltip_callback=function(){var tooltip_object=this.tooltip_object;var requesting_object=this.requesting_object;if(tooltip_object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49732	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	739	OUT	GET /templates/base/includes/base_grid.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:56 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 11 Jan 2006 00:23:38 GMT Accept-Ranges: bytes ETag: "0613c444516c61:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 5865 Connection: close
2025-03-07 15:00:56 UTC	5865	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 33 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 62 61 73 65 5f 67 72 69 64 2e 6a 73 0d 0a 2f 2f 20 48 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 47 52 49 44 53 20 66 6f 72 20 74 68 65 20 42 41 53 45 20 74 65 6d 70 6c 61 74 65 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 0d 0a 2f 2f 20 62 61 73 65 5f 73 68 6f 77 5f 72 6f 77 73 0d 0a 2f 2f 20 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 63 61 6c 6c 65 64 20 77 68 65 6e 65 76 65 72 20 74 68 65 20 75 73 65 72 20 64 65 63 69 64 65 73 20 74 6f 20 73 68 6f 77 20 61 Data Ascii: // Copyright 2003// RedPrairie Corporation// All Rights Reserved//// base_grid.js// Helper functions for working with GRIDS for the BASE template//// WAFFLE// base_show_rows// This function is called whenever the user decides to show a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49731	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	743	OUT	GET /templates/javascript/rp_new_menu_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:56 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Thu, 31 Jul 2008 21:25:22 GMT Accept-Ranges: bytes ETag: "0d55f053f3c81:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 10676 Connection: close
2025-03-07 15:00:56 UTC	7963	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 6e 65 77 5f 6d 65 6e 75 2e 6a 73 0d 0a 2f 2f 20 4d 65 6e 75 20 6a 61 76 61 73 63 72 69 70 74 20 6c 69 62 72 61 72 79 2e 20 20 54 68 69 73 20 69 73 20 74 68 65 20 74 69 6e 79 20 76 65 72 73 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 0d 0a 2f 2f 20 6a 73 63 72 75 6e 63 68 2e 70 68 70 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 0d 0a 72 70 4d 65 6e 75 3d 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 72 70 4d 65 6e 75 2e 53 55 42 4d 45 4e 55 3d 22 53 22 3b 72 70 4d 65 6e 75 2e 4c 45 41 46 3d 22 4c 22 3b 72 Data Ascii: // Copyright 2006// RedPrairie Corporation// All Rights Reserved//// rp_new_menu.js// Menu javascript library. This is the tiny version generated using// jscrunch.php.//// WAFFLErpMenu=new Object();rpMenu.SUBMENU="S";rpMenu.LEAF="L";r
2025-03-07 15:00:56 UTC	2713	IN	Data Raw: 29 3b 69 66 28 21 74 68 69 73 2e 5f 74 65 73 74 4d 65 6e 75 29 7b 76 61 72 20 72 6f 75 74 65 72 3d 72 70 45 76 65 6e 74 2e 67 65 74 45 76 65 6e 74 52 6f 75 74 65 72 28 61 6e 63 68 6f 72 2c 22 6f 6e 63 6c 69 63 6b 22 29 3b 72 6f 75 74 65 72 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 72 70 4d 65 6e 75 2e 4e 61 76 4d 65 6e 75 2e 68 61 6e 64 6c 65 49 74 65 6d 43 6c 69 63 6b 29 3b 69 66 28 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 4c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 69 69 3d 30 3b 69 69 3c 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 4c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 69 69 2b 2b 29 7b 72 6f 75 74 65 72 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 4c 69 73 74 65 6e 65 72 73 Data Ascii: );if(!this._testMenu){var router=rpEvent.getEventRouter(anchor,"onclick");router.addListener(rpMenu.NavMenu.handleItemClick);if(this._menuItemListeners.length){for(var ii=0;ii<this._menuItemListeners.length;ii++){router.addListener(this._menuItemListeners

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49729	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	739	OUT	GET /templates/javascript/rp_pmsn_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:56 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 06 Jun 2008 21:08:16 GMT Accept-Ranges: bytes ETag: "0a0117019c8c81:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 2448 Connection: close
2025-03-07 15:00:56 UTC	2448	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 38 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2f 2f 0a 2f 2f 20 72 70 5f 70 6d 73 6e 2e 6a 73 0a 2f 2f 20 55 74 69 6c 69 74 79 20 4a 61 76 61 53 63 72 69 70 74 20 6c 69 62 72 61 72 79 2e 20 20 54 68 69 73 20 69 73 20 74 68 65 20 74 69 6e 79 20 76 65 72 73 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 0a 2f 2f 20 6a 73 63 72 75 6e 63 68 2e 70 68 70 2e 0a 2f 2f 0a 2f 2f 20 57 41 46 46 4c 45 0a 2f 2f 0a 0a 76 61 72 20 70 6d 73 6e 3d 7b 7d 3b 70 6d 73 6e 2e 43 54 4c 5f 54 59 50 5f 41 43 54 49 4f 4e 3d 22 41 22 3b 70 6d 73 6e 2e 43 54 4c 5f 54 59 50 5f 54 41 42 3d 22 54 22 3b 70 6d 73 6e 2e 43 54 Data Ascii: // Copyright 2008// RedPrairie Corporation// All Rights Reserved//// rp_pmsn.js// Utility JavaScript library. This is the tiny version generated using// jscrunch.php.//// WAFFLE//var pmsn={};pmsn.CTL_TYP_ACTION="A";pmsn.CTL_TYP_TAB="T";pmsn.CT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49733	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	739	OUT	GET /templates/javascript/rp_menu_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:56 UTC	228	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 08 Oct 2007 22:22:42 GMT Accept-Ranges: bytes ETag: "0a5bbef99c81:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 13808 Connection: close
2025-03-07 15:00:56 UTC	7964	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 33 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 6d 65 6e 75 2e 6a 73 0d 0a 2f 2f 20 48 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 6d 65 6e 75 73 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 72 70 5f 6d 65 6e 75 20 50 48 50 20 63 6c 61 73 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 2f 2f 0d 0a 2f 2f 20 54 68 69 73 20 63 6f 64 65 20 77 61 73 20 74 61 6b 65 6e 20 64 69 72 65 63 74 6c 79 20 66 72 6f 6d 20 74 68 65 20 6c 61 79 65 72 73 6d 65 6e 75 2e 6a 73 20 61 6e 64 20 6c 61 79 65 72 73 6d 65 6e 75 2d 6c 69 62 72 61 72 79 Data Ascii: // Copyright 2003// RedPrairie Corporation// All Rights Reserved//// rp_menu.js// Helper functions for menus generated using the rp_menu PHP class.//// WAFFLE//// This code was taken directly from the layersmenu.js and layersmenu-library
2025-03-07 15:00:56 UTC	5844	IN	Data Raw: 74 28 66 61 74 68 65 72 5b 6d 65 6e 75 4e 61 6d 65 5d 29 2d 77 69 64 74 68 31 2b 6d 65 6e 75 4c 65 66 74 53 68 69 66 74 3b 6f 6e 52 69 67 68 74 3d 67 65 74 4f 66 66 73 65 74 4c 65 66 74 28 66 61 74 68 65 72 5b 6d 65 6e 75 4e 61 6d 65 5d 29 2b 77 69 64 74 68 30 2d 6d 65 6e 75 52 69 67 68 74 53 68 69 66 74 3b 77 69 6e 64 6f 77 57 69 64 74 68 3d 67 65 74 57 69 6e 64 6f 77 57 69 64 74 68 28 29 3b 77 69 6e 64 6f 77 58 4f 66 66 73 65 74 3d 67 65 74 57 69 6e 64 6f 77 58 4f 66 66 73 65 74 28 29 3b 69 66 28 6f 6e 4c 65 66 74 3c 77 69 6e 64 6f 77 58 4f 66 66 73 65 74 26 26 6f 6e 52 69 67 68 74 2b 77 69 64 74 68 31 3e 77 69 6e 64 6f 77 57 69 64 74 68 2b 77 69 6e 64 6f 77 58 4f 66 66 73 65 74 29 7b 69 66 28 6f 6e 52 69 67 68 74 2b 77 69 64 74 68 31 2d 77 69 6e 64 6f Data Ascii: t(father[menuName])-width1+menuLeftShift;onRight=getOffsetLeft(father[menuName])+width0-menuRightShift;windowWidth=getWindowWidth();windowXOffset=getWindowXOffset();if(onLeft<windowXOffset&&onRight+width1>windowWidth+windowXOffset){if(onRight+width1-windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49734	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:56 UTC	735	OUT	GET /templates/javascript/callHelp.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:57 UTC	228	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 27 Sep 2004 17:39:56 GMT Accept-Ranges: bytes ETag: "0fea50b9a4c41:0" Date: Fri, 07 Mar 2025 15:03:47 GMT Content-Length: 7588 Connection: close
2025-03-07 15:00:57 UTC	7588	IN	Data Raw: 2f 2f 20 4d 6f 64 69 66 69 65 64 20 73 6c 69 67 68 6c 79 20 62 75 74 20 74 61 6b 65 6e 20 64 69 72 65 63 74 6c 79 20 66 72 6f 6d 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 6f 75 72 63 65 2e 2e 2e 0d 0a 2f 2f 43 6f 70 79 72 69 67 68 74 20 50 61 74 72 69 63 6b 20 52 6f 65 62 75 63 6b 20 72 6f 65 62 75 63 6b 40 76 2d 70 61 67 65 2e 63 6f 6d 20 77 77 77 2e 76 2d 70 61 67 65 2e 63 6f 6d 0d 0a 76 61 72 20 6e 65 77 57 69 6e 64 6f 77 3b 0d 0a 76 61 72 20 6e 65 77 57 69 6e 64 6f 77 53 69 6d 70 6c 65 3b 0d 0a 76 61 72 20 6e 65 77 57 69 6e 64 6f 77 53 69 6d 70 6c 65 50 72 6f 63 3b 0d 0a 76 61 72 20 68 65 6c 70 57 69 6e 64 6f 77 3b 0d 0a 76 61 72 20 68 65 6c 70 57 69 6e 64 6f 77 53 69 6d 70 6c 65 3b 0d 0a 76 61 72 20 68 65 6c 70 57 69 6e 64 6f 77 53 69 6d 70 6c Data Ascii: // Modified slighly but taken directly from the following source...//Copyright Patrick Roebuck roebuck@v-page.com www.v-page.comvar newWindow;var newWindowSimple;var newWindowSimpleProc;var helpWindow;var helpWindowSimple;var helpWindowSimpl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49737	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:58 UTC	739	OUT	GET /templates/javascript/rp_constants.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:59 UTC	228	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 09 Aug 2005 21:27:52 GMT Accept-Ranges: bytes ETag: "0fcb632299dc51:0" Date: Fri, 07 Mar 2025 15:03:49 GMT Content-Length: 477 Connection: close
2025-03-07 15:00:59 UTC	477	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 33 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 63 6f 6e 73 74 61 6e 74 73 2e 6a 73 0d 0a 2f 2f 20 4c 69 73 74 20 6f 66 20 63 6f 6e 73 74 61 6e 74 73 20 75 73 65 64 20 69 6e 20 4a 61 76 61 53 63 72 69 70 74 20 72 6f 75 74 69 6e 65 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 2f 2f 0d 0a 0d 0a 76 61 72 20 57 41 46 46 4c 45 5f 46 49 45 4c 44 5f 54 59 50 45 5f 54 45 58 54 20 3d 20 27 54 27 3b 0d 0a 76 61 72 20 57 41 46 46 4c 45 5f 46 49 45 4c 44 5f 54 59 50 45 5f 43 4f 4d 42 4f 20 3d 20 27 43 27 3b 0d 0a 76 61 72 20 57 41 46 46 4c 45 5f 46 49 45 4c 44 5f 54 Data Ascii: // Copyright 2003// RedPrairie Corporation// All Rights Reserved//// rp_constants.js// List of constants used in JavaScript routines.//// WAFFLE//var WAFFLE_FIELD_TYPE_TEXT = 'T';var WAFFLE_FIELD_TYPE_COMBO = 'C';var WAFFLE_FIELD_T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49738	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:58 UTC	740	OUT	GET /templates/javascript/rp_forms_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:59 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Tue, 16 Jun 2009 19:02:00 GMT Accept-Ranges: bytes ETag: "0454edb4eec91:0" Date: Fri, 07 Mar 2025 15:03:49 GMT Content-Length: 54004 Connection: close
2025-03-07 15:00:59 UTC	7963	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 33 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 66 6f 72 6d 73 2e 6a 73 0d 0a 2f 2f 20 48 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 66 6f 72 6d 73 20 67 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 72 70 5f 66 6f 72 6d 73 20 50 48 50 20 63 6c 61 73 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 0d 0a 76 61 72 20 69 6e 66 6f 5f 77 69 6e 64 6f 77 3b 76 61 72 20 77 69 6e 64 6f 77 5f 70 61 74 68 3b 76 61 72 20 66 6f 72 6d 5f 63 6f 6e 74 65 6e 74 3b 76 61 72 20 74 69 74 6c 65 5f 70 72 65 66 69 78 3d 22 74 69 74 6c 65 5f 22 3b 76 61 Data Ascii: // Copyright 2003// RedPrairie Corporation// All Rights Reserved//// rp_forms.js// Helper functions for forms generated using the rp_forms PHP class.//// WAFFLEvar info_window;var window_path;var form_content;var title_prefix="title_";va
2025-03-07 15:00:59 UTC	8192	IN	Data Raw: 79 6e 63 68 72 6f 6e 6f 75 73 5f 72 65 61 63 74 5f 6f 6e 5f 63 68 61 6e 67 65 2e 73 72 63 5f 66 69 65 6c 64 3b 72 65 73 75 6c 74 73 3d 77 69 6e 64 6f 77 2e 73 79 6e 63 68 72 6f 6e 6f 75 73 5f 72 65 61 63 74 5f 6f 6e 5f 63 68 61 6e 67 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 69 66 28 21 63 68 65 63 6b 5f 6c 6f 67 69 6e 5f 66 6f 72 6d 28 72 65 73 75 6c 74 73 29 29 7b 72 65 74 75 72 6e 3b 7d 7d 76 61 72 20 6c 69 6e 65 73 3d 72 65 73 75 6c 74 73 2e 73 70 6c 69 74 28 4c 49 4e 45 5f 53 45 50 29 3b 76 61 72 20 6c 69 6e 65 3b 76 61 72 20 69 69 2c 6a 6a 2c 6b 6b 3b 76 61 72 20 76 61 6c 31 2c 76 61 6c 32 3b 76 61 72 20 70 61 69 72 5f 61 72 72 3b 76 61 72 20 6e 65 77 5f 6f 70 74 3b 76 61 72 20 66 6c 64 3b 76 61 72 20 66 6c 64 5f 74 69 74 6c 65 3b 76 61 72 20 61 Data Ascii: ynchronous_react_on_change.src_field;results=window.synchronous_react_on_change.responseText;if(!check_login_form(results)){return;}}var lines=results.split(LINE_SEP);var line;var ii,jj,kk;var val1,val2;var pair_arr;var new_opt;var fld;var fld_title;var a
2025-03-07 15:00:59 UTC	2784	IN	Data Raw: 29 29 7b 77 65 65 6b 5f 77 65 65 6b 65 6e 64 3d 22 22 3b 7d 65 6c 73 65 20 69 66 28 64 74 5f 63 75 72 72 65 6e 74 5f 64 61 79 2e 67 65 74 44 61 79 28 29 3d 3d 30 7c 7c 64 74 5f 63 75 72 72 65 6e 74 5f 64 61 79 2e 67 65 74 44 61 79 28 29 3d 3d 36 29 7b 77 65 65 6b 5f 77 65 65 6b 65 6e 64 3d 22 77 65 65 6b 65 6e 64 22 3b 7d 65 6c 73 65 7b 77 65 65 6b 5f 77 65 65 6b 65 6e 64 3d 22 77 65 65 6b 64 61 79 22 3b 7d 69 66 28 64 74 5f 63 75 72 72 65 6e 74 5f 64 61 79 2e 67 65 74 4d 6f 6e 74 68 28 29 3d 3d 64 74 5f 64 61 74 65 74 69 6d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 29 7b 69 66 28 77 65 65 6b 5f 77 65 65 6b 65 6e 64 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 63 6c 73 3d 22 63 61 6c 2d 63 75 72 2d 64 61 79 22 3b 7d 65 6c 73 65 7b 63 6c 73 3d 22 63 61 6c 2d 22 2b 77 65 Data Ascii: )){week_weekend="";}else if(dt_current_day.getDay()==0\|\|dt_current_day.getDay()==6){week_weekend="weekend";}else{week_weekend="weekday";}if(dt_current_day.getMonth()==dt_datetime.getMonth()){if(week_weekend.length==0){cls="cal-cur-day";}else{cls="cal-"+we
2025-03-07 15:00:59 UTC	8192	IN	Data Raw: 29 2b 22 27 3b 22 29 3b 7d 76 61 72 20 63 61 6c 5f 64 69 76 3d 72 70 2e 5f 67 65 74 28 22 77 61 66 66 6c 65 5f 63 61 6c 5f 64 69 76 22 29 3b 69 66 28 63 61 6c 5f 64 69 76 29 7b 63 61 6c 5f 64 69 76 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 63 61 6c 5f 64 69 76 2e 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3b 7d 72 70 2e 5f 73 68 6f 77 5f 7a 5f 66 69 65 6c 64 73 28 29 3b 74 72 79 7b 65 76 61 6c 28 22 76 61 72 20 66 6f 72 6d 5f 6f 62 6a 20 3d 20 22 2b 72 65 74 5f 66 6c 64 5f 73 74 72 5f 69 2b 22 2e 66 6f 72 6d 3b 22 29 3b 65 76 61 6c 28 22 76 61 72 20 66 69 65 6c 64 5f 6f 62 6a 20 3d 20 22 2b 72 65 74 5f 66 6c 64 5f 73 74 72 5f 69 2b 22 3b 22 29 3b 76 61 72 20 70 6f 73 74 63 68 61 6e 67 65 3d 22 70 6f 73 74 63 68 61 6e 67 65 5f 22 2b 66 Data Ascii: )+"';");}var cal_div=rp._get("waffle_cal_div");if(cal_div){cal_div.style.display="none";cal_div.hidden="true";}rp._show_z_fields();try{eval("var form_obj = "+ret_fld_str_i+".form;");eval("var field_obj = "+ret_fld_str_i+";");var postchange="postchange_"+f
2025-03-07 15:00:59 UTC	8192	IN	Data Raw: 6f 72 6d 3d 73 72 63 5f 66 6f 72 6d 3b 69 6e 66 6f 2e 61 63 74 69 6f 6e 3d 61 63 74 69 6f 6e 5f 69 3b 69 6e 66 6f 2e 72 65 66 72 65 73 68 3d 72 65 66 72 65 73 68 5f 69 3b 69 6e 66 6f 2e 74 61 72 67 65 74 3d 74 61 72 67 65 74 5f 69 3b 69 6e 66 6f 2e 6d 6f 64 65 6c 3d 6d 6f 64 61 6c 5f 69 3b 69 6e 66 6f 2e 73 74 61 72 74 52 65 71 75 65 73 74 28 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 65 72 72 6f 72 5f 77 61 66 66 6c 65 5f 66 6f 72 6d 28 29 7b 69 66 28 74 68 69 73 2e 72 65 71 26 26 74 68 69 73 2e 72 65 71 2e 73 74 61 74 75 73 54 65 78 74 2e 6c 65 6e 67 74 68 29 7b 61 6c 65 72 74 28 74 68 69 73 2e 72 65 71 2e 73 74 61 74 75 73 54 65 78 74 29 3b 7d 65 6c 73 65 7b 61 6c 65 72 74 28 22 45 72 72 6f 72 20 77 68 69 6c 65 20 73 75 62 6d 69 74 74 69 6e 67 20 61 72 67 75 Data Ascii: orm=src_form;info.action=action_i;info.refresh=refresh_i;info.target=target_i;info.model=modal_i;info.startRequest();}function error_waffle_form(){if(this.req&&this.req.statusText.length){alert(this.req.statusText);}else{alert("Error while submitting argu
2025-03-07 15:00:59 UTC	2816	IN	Data Raw: 2e 76 61 6c 75 65 3b 76 61 72 20 74 61 67 3d 72 70 2e 5f 67 65 74 28 66 6f 72 6d 2b 27 5f 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 27 29 3b 76 61 72 20 68 74 6d 6c 3d 74 61 67 2e 69 6e 6e 65 72 48 54 4d 4c 3b 76 61 72 20 70 61 72 6d 73 3d 22 6d 6f 64 65 3d 72 70 7c 63 61 63 68 65 5f 6e 75 6c 6c 5f 70 72 6f 66 69 6c 65 5f 69 6e 70 75 74 73 22 2b 22 26 68 74 6d 6c 3d 22 2b 65 73 63 61 70 65 28 68 74 6d 6c 29 2b 22 26 66 6f 72 6d 5f 75 72 6c 3d 22 2b 65 73 63 61 70 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 66 6f 72 6d 3d 22 2b 66 6f 72 6d 3b 76 61 72 20 6c 69 6e 6b 3d 6e 65 77 20 72 70 2e 41 6a 61 78 4c 6f 61 64 65 72 28 77 61 66 66 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 2c 70 61 72 6d 73 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: .value;var tag=rp._get(form+'_input_container');var html=tag.innerHTML;var parms="mode=rp\|cache_null_profile_inputs"+"&html="+escape(html)+"&form_url="+escape(window.location.href)+"&form="+form;var link=new rp.AjaxLoader(waffle_controller,parms,null,null
2025-03-07 15:00:59 UTC	8192	IN	Data Raw: 72 6d 5f 69 64 29 7b 74 72 79 7b 65 76 61 6c 28 27 64 6f 5f 27 2b 66 6f 72 6d 5f 69 64 2b 27 5f 27 2b 61 63 74 5f 69 64 2b 27 28 29 3b 27 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 63 61 74 63 68 28 65 29 7b 7d 66 6f 72 6d 5f 63 6f 6e 74 65 6e 74 3d 67 65 74 5f 66 6f 72 6d 5f 6a 73 6f 6e 5f 73 74 72 75 63 74 75 72 65 28 66 6f 72 6d 5f 69 64 29 3b 69 66 28 21 76 61 6c 69 64 61 74 65 5f 77 61 66 66 6c 65 5f 66 6f 72 6d 28 61 63 74 5f 69 64 2c 66 6f 72 6d 5f 69 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 70 61 72 73 65 5f 77 61 66 66 6c 65 5f 73 65 6c 65 63 74 5f 6f 72 64 65 72 73 28 66 6f 72 6d 5f 69 64 29 3b 76 61 72 20 61 63 74 69 6f 6e 5f 6f 62 6a 3d 72 70 2e 5f 67 65 74 28 61 63 74 5f 69 64 29 3b 76 61 72 20 66 6f 72 6d 5f 61 63 74 69 6f Data Ascii: rm_id){try{eval('do_'+form_id+'_'+act_id+'();');return false;}catch(e){}form_content=get_form_json_structure(form_id);if(!validate_waffle_form(act_id,form_id)){return false;}parse_waffle_select_orders(form_id);var action_obj=rp._get(act_id);var form_actio
2025-03-07 15:00:59 UTC	7673	IN	Data Raw: 72 5f 6e 61 6d 3d 22 2b 66 69 65 6c 64 5f 6e 61 6d 65 3b 76 61 72 20 66 6c 64 3d 72 70 2e 5f 67 65 74 28 66 69 65 6c 64 5f 6e 61 6d 65 29 3b 69 66 28 74 61 73 6b 3d 3d 27 6e 65 77 27 29 7b 75 72 6c 2b 3d 22 26 6e 65 77 3d 31 22 3b 7d 65 6c 73 65 20 69 66 28 74 61 73 6b 3d 3d 27 65 64 69 74 27 29 7b 69 66 28 66 6c 64 2e 76 61 6c 75 65 3d 3d 27 27 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 75 72 6c 2b 3d 22 26 65 64 69 74 3d 31 26 61 64 72 5f 69 64 3d 22 2b 66 6c 64 2e 76 61 6c 75 65 3b 7d 65 6c 73 65 7b 69 66 28 66 6c 64 2e 76 61 6c 75 65 3d 3d 27 27 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 75 72 6c 2b 3d 22 26 61 64 72 5f 69 64 3d 22 2b 66 6c 64 2e 76 61 6c 75 65 3b 7d 76 61 72 20 77 69 6e 3d 6e 65 77 20 72 70 2e 4d 6f 64 61 6c 57 69 6e 64 6f Data Ascii: r_nam="+field_name;var fld=rp._get(field_name);if(task=='new'){url+="&new=1";}else if(task=='edit'){if(fld.value==''){return false;}url+="&edit=1&adr_id="+fld.value;}else{if(fld.value==''){return false;}url+="&adr_id="+fld.value;}var win=new rp.ModalWindo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49736	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:58 UTC	738	OUT	GET /templates/javascript/rp_tab_tiny.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:59 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Fri, 06 Jun 2008 21:20:04 GMT Accept-Ranges: bytes ETag: "0da11161bc8c81:0" Date: Fri, 07 Mar 2025 15:03:49 GMT Content-Length: 5787 Connection: close
2025-03-07 15:00:59 UTC	5787	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 0d 0a 2f 2f 20 52 65 64 50 72 61 69 72 69 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 2f 2f 0d 0a 2f 2f 20 72 70 5f 74 61 62 2e 6a 73 0d 0a 2f 2f 20 43 6c 61 73 73 65 73 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 74 61 62 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 57 41 46 46 4c 45 0d 0a 2f 2f 0d 0a 76 61 72 20 72 70 54 61 62 3d 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 72 70 54 61 62 2e 74 61 62 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 3d 22 74 61 62 5f 62 75 74 74 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 3b 72 70 54 61 62 2e 74 61 62 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 3d 22 74 61 62 5f 63 6f 6e 74 65 6e 74 5f 63 6f Data Ascii: // Copyright 2006// RedPrairie Corporation// All Rights Reserved//// rp_tab.js// Classes and functions for tabs.//// WAFFLE//var rpTab=new Object();rpTab.tabButtonContainer="tab_button_container";rpTab.tabContentContainer="tab_content_co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49739	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:00:58 UTC	737	OUT	GET /templates/javascript/staticlogo.js HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:00:59 UTC	229	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Mon, 01 May 2006 21:32:48 GMT Accept-Ranges: bytes ETag: "0c09cca666dc61:0" Date: Fri, 07 Mar 2025 15:03:49 GMT Content-Length: 4283 Connection: close
2025-03-07 15:00:59 UTC	4283	IN	Data Raw: 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 0d 0a 2f 2a 53 69 74 65 20 4c 6f 67 6f 20 53 63 72 69 70 74 20 28 47 65 6f 63 69 74 69 65 73 20 57 61 74 65 72 6d 61 72 6b 29 0d 0a 3f 20 44 79 6e 61 6d 69 63 20 44 72 69 76 65 20 28 77 77 77 2e 64 79 6e 61 6d 69 63 64 72 69 76 65 2e 63 6f 6d 29 0d 0a 46 6f 72 20 66 75 6c 6c 20 73 6f 75 72 63 65 20 63 6f 64 65 2c 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 2c 0d 0a 31 30 30 27 73 20 6d 6f 72 65 20 44 48 54 4d 4c 20 73 63 72 69 70 74 73 2c 20 61 6e 64 20 54 4f 53 2c 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 64 79 Data Ascii: ////////////////////////////////////////////////////////////////////*Site Logo Script (Geocities Watermark)? Dynamic Drive (www.dynamicdrive.com)For full source code, installation instructions,100's more DHTML scripts, and TOS, visit http://www.dy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49724	172.217.16.196	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:00 UTC	595	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BCL7VzgEIgNbOAQjB2M4BCMjczgEIiuDOAQjE4c4BCK7kzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-07 15:01:00 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 07 Mar 2025 15:01:00 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bcWBvQx_kIgAVRFyitIwhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-07 15:01:00 UTC	75	IN	Data Raw: 37 63 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 61 73 61 20 77 61 73 68 69 6e 67 74 6f 6e 20 63 6f 75 6e 74 79 20 6d 61 69 6e 65 20 6d 65 74 65 6f 72 69 74 65 22 2c 22 75 6e 69 74 65 64 20 61 69 72 6c 69 6e 65 73 20 6d 69 Data Ascii: 7c7)]}'["",["nasa washington county maine meteorite","united airlines mi
2025-03-07 15:01:00 UTC	1378	IN	Data Raw: 6c 6c 69 6f 6e 20 6d 69 6c 65 72 22 2c 22 77 77 65 20 32 6b 32 35 20 72 65 76 69 65 77 22 2c 22 63 61 72 6e 69 76 61 6c 20 63 72 75 69 73 65 20 6c 69 6e 65 73 22 2c 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 70 67 61 20 74 6f 75 72 20 61 72 6e 6f 6c 64 20 70 61 6c 6d 65 72 20 69 6e 76 69 74 61 74 69 6f 6e 61 6c 22 2c 22 73 70 6c 69 74 20 66 69 63 74 69 6f 6e 20 67 61 6d 65 73 22 2c 22 72 65 64 20 72 6f 62 69 6e 20 72 65 73 74 61 75 72 61 6e 74 73 20 63 6c 6f 73 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 Data Ascii: llion miler","wwe 2k25 review","carnival cruise lines","social security administration","pga tour arnold palmer invitational","split fiction games","red robin restaurants closing"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false
2025-03-07 15:01:00 UTC	545	IN	Data Raw: 51 55 46 43 53 6c 4a 56 4e 55 56 79 61 30 70 6e 5a 32 63 39 50 54 6f 4e 55 33 42 73 61 58 51 67 52 6d 6c 6a 64 47 6c 76 62 6b 6f 48 49 7a 41 78 4f 44 49 35 59 6c 4a 46 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 46 5a 51 4d 58 70 6a 4d 45 78 44 58 30 70 4f 59 6c 56 33 61 6a 67 34 65 6c 6c 51 55 56 4e 4d 61 54 64 4a 65 56 4e 34 55 6c 4e 4e 64 45 31 4d 63 32 35 4e 65 6a 46 4f 53 56 51 34 65 45 35 4d 55 56 6c 42 65 6e 42 33 54 43 31 33 63 41 51 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 37 39 31 32 35 37 30 37 35 35 32 36 37 31 35 36 33 30 35 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 Data Ascii: QUFCSlJVNUVya0pnZ2c9PToNU3BsaXQgRmljdGlvbkoHIzAxODI5YlJFZ3Nfc3NwPWVKemo0dFZQMXpjMExDX0pOYlV3ajg4ellQUVNMaTdJeVN4UlNNdE1Mc25NejFOSVQ4eE5MUVlBenB3TC13cAQ\u003d","zl":10002},{"zl":10002}],"google:suggesteventid":"7912570755267156305","google:suggestrelevance
2025-03-07 15:01:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49747	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:01 UTC	776	OUT	GET /rppowered.gif HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:01 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 09 Aug 2005 18:27:52 GMT Accept-Ranges: bytes ETag: "0c469d109dc51:0" Date: Fri, 07 Mar 2025 15:03:52 GMT Content-Length: 1342 Connection: close
2025-03-07 15:01:01 UTC	1342	IN	Data Raw: 47 49 46 38 39 61 68 00 10 00 87 00 00 cc 00 00 d5 3c 3c e6 b2 b2 de 77 77 ed df df ce 0f 0f e8 c1 c1 eb d0 d0 e2 94 94 d9 5a 5a d0 1e 1e d1 1f 1f d3 2d 2d e0 85 85 cd 05 05 e4 a3 a3 cd 07 07 cc 01 01 db 69 69 d4 34 34 d7 4b 4b cd 04 04 ef eb eb e3 9b 9b cf 15 15 db 68 68 d0 19 19 d3 31 31 ea ca ca d3 2e 2e d1 25 25 d9 5b 5b cd 06 06 d0 1a 1a d0 1b 1b ee e7 e7 e3 9d 9d dd 76 76 ce 0b 0b cc 03 03 ce 0d 0d e6 af af d2 28 28 e3 9c 9c d0 18 18 dc 6c 6c ef ee ee d7 4c 4c e1 90 90 e1 8e 8e db 67 67 dd 77 77 ce 11 11 ee e5 e5 cf 12 12 e5 a9 a9 d3 32 32 de 7c 7c ef ec ec d5 40 40 e3 a0 a0 d6 46 46 e8 c0 c0 d5 3b 3b ea cb cb cf 16 16 d5 3e 3e d6 47 47 df 82 82 eb d5 d5 d7 4a 4a ee ea ea da 60 60 cf 14 14 ce 0a 0a db 63 63 e7 b6 b6 e6 b3 b3 cd 08 08 d1 22 22 d4 33 Data Ascii: GIF89ah<<wwZZ--ii44KKhh11..%%[[vv((llLLggww22\|\|@@FF;;>>GGJJ``cc""3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49748	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:01 UTC	772	OUT	GET /close.gif HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:01 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 08 Aug 2005 13:53:14 GMT Accept-Ranges: bytes ETag: "0c15885209cc51:0" Date: Fri, 07 Mar 2025 15:03:52 GMT Content-Length: 860 Connection: close
2025-03-07 15:01:01 UTC	860	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 f7 00 00 00 00 00 01 01 01 02 02 02 03 03 03 04 04 04 05 05 05 06 06 06 07 07 07 08 08 08 09 09 09 0a 0a 0a 0b 0b 0b 0c 0c 0c 0d 0d 0d 0e 0e 0e 0f 0f 0f 10 10 10 11 11 11 12 12 12 13 13 13 14 14 14 15 15 15 16 16 16 17 17 17 18 18 18 19 19 19 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 24 24 24 25 25 25 26 26 26 27 27 27 28 28 28 29 29 29 2a 2a 2a 2b 2b 2b 2c 2c 2c 2d 2d 2d 2e 2e 2e 2f 2f 2f 30 30 30 31 31 31 32 32 32 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 38 38 38 39 39 39 3a 3a 3a 3b 3b 3b 3c 3c 3c 3d 3d 3d 3e 3e 3e 3f 3f 3f 40 40 40 41 41 41 42 42 42 43 43 43 44 44 44 45 45 45 46 46 46 47 47 47 48 48 48 49 49 49 4a 4a 4a 4b 4b 4b 4c 4c 4c 4d 4d 4d 4e 4e 4e 4f 4f 4f 50 50 Data Ascii: GIF89a !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49746	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:01 UTC	828	OUT	GET /templates/base/images/Login_SEC_Web_BG.jpg HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.logisticsacp.com/templates/base/base.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:01 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 17 Oct 2024 16:57:17 GMT Accept-Ranges: bytes ETag: "8054389fb520db1:0" Date: Fri, 07 Mar 2025 15:03:52 GMT Content-Length: 46504 Connection: close
2025-03-07 15:01:01 UTC	7973	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 9f 02 71 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF``"ExifMM*CCq"
2025-03-07 15:01:01 UTC	8192	IN	Data Raw: 85 a4 dd ae 9b ba 6d b7 f0 8f 86 7e 1d 45 e3 8f f8 22 be 9f 34 f7 da b5 9c 5a 2f 87 b5 2d 4b c9 b2 b9 30 47 7c f1 b5 d8 48 e7 c0 cb c4 18 87 d9 90 0b 46 9b b2 01 53 ed 9e 3b b2 ff 00 8d 60 6a 8d b7 fe 69 8c 87 3f f7 0b 35 ec 4b fb 20 fc 2f 4d 09 b4 b1 f0 df c0 23 4c 92 75 ba 6b 41 e1 fb 4f 21 a6 55 2a 24 29 e5 ed de 15 98 06 c6 40 62 3a 1a dd d0 fe 08 f8 53 c3 1e 0b ba f0 de 9b e1 9f 0f 69 fe 1d be 59 12 e3 4b b6 d3 a1 86 ca e1 64 1b 64 0f 0a a8 46 0e 38 60 47 23 83 9a cd e5 d3 71 ab 1d 17 b4 82 8f 5d d2 92 be db 7b df 87 9e 9e 96 71 c7 58 4c 55 5f 6b 05 3b 7d 6e 78 95 16 a2 92 53 6a 4e 37 52 77 69 ad ed ae 9b 59 23 f3 db c3 5f 03 75 8b 6f d9 cf 56 f1 9e 95 e1 01 e0 4f 0a 27 c1 09 ac f5 26 f3 6d 50 f8 b6 f9 ec 99 d6 e8 c3 6d 23 82 15 77 37 9b 3e d9 4f 9d Data Ascii: m~E"4Z/-K0G\|HFS;`ji?5K /M#LukAO!U*$)@b:SiYKddF8`G#q]{qXLU_k;}nxSjN7RwiY#_uoVO'&mPm#w7>O
2025-03-07 15:01:01 UTC	2784	IN	Data Raw: a2 31 ea 1e 3a d4 3c 98 19 87 5b 3b 5d c8 a4 77 e6 66 9f 3e bb 16 b8 8f f8 2b 77 8b a6 fd b4 ff 00 e0 a0 ff 00 08 fe 05 d9 cc d2 69 7a 5c a9 75 ab 88 98 e5 0c e4 49 31 3e f1 da 45 b8 7f d7 53 5c 58 cc 0b c4 e3 a3 52 5f 0c 7f 4d 7f 33 f1 5c 46 75 0c 4e 77 2a 17 f7 29 26 e4 fb 28 ab bf c7 43 ee ef f8 21 bf c0 ab 3f d9 7b fe 09 cf e0 bb 6b bb 38 63 d7 3c 60 ad e2 7d 4c ba 0d e5 ae 82 98 41 ee 36 db 2c 0a 41 e8 43 74 af 91 0e ad 6f ff 00 05 19 ff 00 83 8a 7e d1 24 70 de 78 27 e0 64 78 54 c6 23 67 b0 3f 91 27 50 98 9f 42 91 f7 c7 3f 64 7e d1 ff 00 b4 9d 9f ec d1 fb 37 78 a7 c5 4a b0 c3 6f e1 6d 1e 49 6c e0 fb 91 b4 aa 9b 20 88 7a 06 90 c6 83 eb 5f 1e ff 00 c1 bf df 0e a7 f0 7f c0 ef 17 7c 4a d5 0c d3 6b 3f 11 35 56 0b 71 29 dc f3 5b db b3 02 f9 eb 97 9e 49 f3 Data Ascii: 1:<[;]wf>+wiz\uI1>ES\XR_M3\FuNw*)&(C!?{k8c<`}LA6,ACto~$px'dxT#g?'PB?d~7xJomIl z_\|Jk?5Vq)[I
2025-03-07 15:01:01 UTC	8192	IN	Data Raw: 10 fc 42 d1 e6 ff 00 97 ef fb f9 1f 97 5e 47 45 00 7b 44 3e 30 d2 a6 ff 00 98 95 8c 7f f6 f1 1d 5c 86 f2 09 bf d5 cf 1c 9f f5 ce 4a f0 bf f5 55 27 98 ff 00 f3 d3 ff 00 22 50 07 ba 51 5e 17 15 e5 c4 3f ea e7 92 3f fb 69 57 20 f1 86 ab 11 fd dd f5 cd 00 7b 45 15 e4 f0 fc 4e d7 2c c7 fc 7f 79 9f f6 ce ae 43 f1 9b 52 87 fd 64 16 d2 50 07 a6 51 5c 1c 1f 1b 3f e7 be 9b 1f fd fc ab 96 9f 18 34 df f9 69 05 d4 7f f6 ce 3a 00 ec 28 ae 7e cf e2 46 8f 79 fe b2 ef cb ff 00 b6 75 a9 67 e2 9d 36 f3 ee 5f 5b 7f df ca 00 b9 45 14 7f aa a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 0f 01 f0 6f fc 96 8d 3f fe c9 cf 86 3f f4 6e af 5e ed a6 7f c7 b4 75 e1 3e 0d ff 00 92 d1 a7 ff 00 d9 39 f0 c7 fe 8d d5 eb dd b4 cf f8 f6 8e 80 3b 0a 28 a2 80 38 bd 67 fe 3d ab Data Ascii: B^GE{D>0\JU'"PQ^??iW {EN,yCRdPQ\?4i:(~Fyug6_[E(((((o??n^u>9;(8g=
2025-03-07 15:01:01 UTC	8192	IN	Data Raw: 6f d1 6e 3c bb 1f fb 77 8f fd 5f fd fc af 70 f8 4b ac 24 d6 1f d9 b1 c7 a6 fd 8e c2 de 3f b3 cf 61 27 99 6b fb cf dd f9 7f f4 cf fe d9 d0 07 ce fa 6e 99 e2 6f 0d fc 3e f1 06 8f 1a 6a d1 fd aa e2 de 3b 78 23 8f cc 8a 5f de 49 e6 7d 9f cb ff 00 96 75 ed 9f b3 1e 9b 3d 9e 8d e5 bc 7f bc b5 b3 b3 8e 4f 2e 4f 33 ca 93 f7 9f bb f3 3f e5 a5 76 17 7f 0a f4 79 ae a4 f2 e3 b9 b6 b7 97 fe 3e 20 82 e2 48 ed 65 ff 00 b6 71 d4 9e 24 d6 2d 7e 1b f8 37 50 be 8e 38 ed 63 b5 8e 4f 2e 38 ff 00 e5 ac 94 01 e3 7a 0f 97 7b e2 df 12 4f 1c 7f bb 97 50 bc f2 ff 00 ef e5 6e 5a 68 df f2 d2 4a 8f e1 8f 86 ff 00 b3 7c 2f 1c 93 fe f2 e2 eb f7 9e 65 75 10 d9 f9 36 b4 01 97 67 a3 d5 8f b1 ff 00 9c d5 cf 27 c9 b5 a8 fc 8a 00 8e 1b 3f de d6 a7 93 f6 3b 5a 93 4d b3 ff 00 57 52 7f ad 9a 80 Data Ascii: on<w_pK$?a'kno>j;x#_I}u=O.O3?vy> Heq$-~7P8cO.8z{OPnZhJ\|/eu6g'?;ZMWR
2025-03-07 15:01:01 UTC	2816	IN	Data Raw: 3e 26 b8 d2 6c 7c 6d 67 1c 72 5b c7 6f a9 c7 1f fa f8 fc b7 f2 f8 f2 ff 00 75 5f 59 79 14 79 14 01 f3 4f c7 ff 00 f8 25 27 c1 ff 00 da 37 c5 7f 03 75 2d 63 4b bd d3 e3 fd 9d ee e3 b8 f0 8d 8e 95 3c 56 f6 31 47 11 b6 31 db dc 47 e5 fc f6 f1 fd 8e df f7 63 cb ff 00 56 7d 65 ad 2f 87 7f f0 4d 8f 86 7f 0b ff 00 6f 8f 1b 7e d1 da 5d be ad ff 00 0b 0b c7 da 3c 7a 2d fc 6f 79 e6 58 c7 1c 7f 67 fd e4 71 f9 7f 24 92 7d 9e df cc cc 9f f2 cf fe 9a 49 e6 7d 09 e4 51 e4 50 07 c8 ff 00 f0 e6 4f 84 ff 00 f0 bf 3f e1 30 fe d8 f8 99 ff 00 08 ff 00 f6 c7 fc 24 7f f0 af bf e1 28 b8 ff 00 84 2f fb 63 ed 1f 68 fe d1 fe cf ff 00 9f 8f 33 f7 9f eb 3c bf fa 67 5e b1 f0 83 f6 37 f0 cf c1 6f da 93 e2 ff 00 c5 ad 2a fb c4 17 5e 24 f8 d9 fd 8e 35 b8 2f 2e 23 92 c6 d7 fb 2a ce 5b 2b Data Ascii: >&l\|mgr[ou_YyyO%'7u-cK<V1G1GcV}e/Mo~]<z-oyXgq$}I}QPO?0$(/ch3<g^7o^$5/.#[+
2025-03-07 15:01:02 UTC	8192	IN	Data Raw: 92 7f f5 91 7f cb 4f f9 eb 40 1b 10 cd fb a8 fc 89 2a e5 9f fa df de 56 5e 8f 37 9d 6b 1f fc f4 ad 4a 00 b9 47 9f 51 c3 37 93 fe b2 a4 a0 09 28 f3 ea 3f 3e 8a 00 92 8a 8e a4 a0 02 8a 92 8a 00 28 a2 8a 00 28 a2 a4 a0 08 ea 4a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 a4 a2 0a 28 03 c1 7c 1b ff 00 25 a3 4f ff 00 b2 73 e1 8f fd 1b ab d7 bb 69 9f f1 ed 1d 78 4f 83 7f e4 b4 69 ff 00 f6 4e 7c 31 ff 00 a3 75 7a f7 6d 33 fe 3d a3 a0 0e c2 8a 28 a0 0e 2f 59 ff 00 8f 6a f1 35 ff 00 92 99 f1 33 fe c9 fc 9f fa 32 e6 bd b3 59 ff 00 8f 6a f1 35 ff 00 92 99 f1 33 fe c9 fc 9f fa Data Ascii: O@*V^7kJGQ7(?>((J(((((((((((((((((((((\|%OsixOiN\|1uzm3=(/Yj532Yj53
2025-03-07 15:01:02 UTC	163	IN	Data Raw: 3f e1 9c ff 00 ea 62 f8 8d ff 00 85 e6 bb ff 00 c9 95 ef 1f f0 8f cd ff 00 4e ff 00 95 1f f0 8f cd ff 00 4e ff 00 95 00 78 3f fc 33 9f fd 4c 5f 11 bf f0 bc d7 7f f9 32 8f f8 67 3f fa 98 be 23 7f e1 79 ae ff 00 f2 65 7b c7 fc 23 f3 7f d3 bf e5 47 fc 23 f3 7f d3 bf e5 40 1e 53 f0 db e0 66 9b e0 2d 76 f3 50 b7 9f 5a bc d4 2f a3 8e 2b 89 f5 2d 62 f3 52 b9 96 38 fc cf 2e 3f 32 e2 49 3c bf de 49 25 7a 24 30 f9 31 56 84 5e 1b 90 0f f9 67 52 7f c2 3d 37 fc f4 8f f2 a0 0d 8a 28 a2 80 3f ff d9 Data Ascii: ?bNNx?3L_2g?#ye{#G#@Sf-vPZ/+-bR8.?2I<I%z$01V^gR=7(?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49750	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:03 UTC	568	OUT	GET /rppowered.gif HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:04 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 09 Aug 2005 18:27:52 GMT Accept-Ranges: bytes ETag: "0c469d109dc51:0" Date: Fri, 07 Mar 2025 15:03:55 GMT Content-Length: 1342 Connection: close
2025-03-07 15:01:04 UTC	1342	IN	Data Raw: 47 49 46 38 39 61 68 00 10 00 87 00 00 cc 00 00 d5 3c 3c e6 b2 b2 de 77 77 ed df df ce 0f 0f e8 c1 c1 eb d0 d0 e2 94 94 d9 5a 5a d0 1e 1e d1 1f 1f d3 2d 2d e0 85 85 cd 05 05 e4 a3 a3 cd 07 07 cc 01 01 db 69 69 d4 34 34 d7 4b 4b cd 04 04 ef eb eb e3 9b 9b cf 15 15 db 68 68 d0 19 19 d3 31 31 ea ca ca d3 2e 2e d1 25 25 d9 5b 5b cd 06 06 d0 1a 1a d0 1b 1b ee e7 e7 e3 9d 9d dd 76 76 ce 0b 0b cc 03 03 ce 0d 0d e6 af af d2 28 28 e3 9c 9c d0 18 18 dc 6c 6c ef ee ee d7 4c 4c e1 90 90 e1 8e 8e db 67 67 dd 77 77 ce 11 11 ee e5 e5 cf 12 12 e5 a9 a9 d3 32 32 de 7c 7c ef ec ec d5 40 40 e3 a0 a0 d6 46 46 e8 c0 c0 d5 3b 3b ea cb cb cf 16 16 d5 3e 3e d6 47 47 df 82 82 eb d5 d5 d7 4a 4a ee ea ea da 60 60 cf 14 14 ce 0a 0a db 63 63 e7 b6 b6 e6 b3 b3 cd 08 08 d1 22 22 d4 33 Data Ascii: GIF89ah<<wwZZ--ii44KKhh11..%%[[vv((llLLggww22\|\|@@FF;;>>GGJJ``cc""3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49751	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:03 UTC	564	OUT	GET /close.gif HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:04 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Mon, 08 Aug 2005 13:53:14 GMT Accept-Ranges: bytes ETag: "0c15885209cc51:0" Date: Fri, 07 Mar 2025 15:03:55 GMT Content-Length: 860 Connection: close
2025-03-07 15:01:04 UTC	860	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 f7 00 00 00 00 00 01 01 01 02 02 02 03 03 03 04 04 04 05 05 05 06 06 06 07 07 07 08 08 08 09 09 09 0a 0a 0a 0b 0b 0b 0c 0c 0c 0d 0d 0d 0e 0e 0e 0f 0f 0f 10 10 10 11 11 11 12 12 12 13 13 13 14 14 14 15 15 15 16 16 16 17 17 17 18 18 18 19 19 19 1a 1a 1a 1b 1b 1b 1c 1c 1c 1d 1d 1d 1e 1e 1e 1f 1f 1f 20 20 20 21 21 21 22 22 22 23 23 23 24 24 24 25 25 25 26 26 26 27 27 27 28 28 28 29 29 29 2a 2a 2a 2b 2b 2b 2c 2c 2c 2d 2d 2d 2e 2e 2e 2f 2f 2f 30 30 30 31 31 31 32 32 32 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 38 38 38 39 39 39 3a 3a 3a 3b 3b 3b 3c 3c 3c 3d 3d 3d 3e 3e 3e 3f 3f 3f 40 40 40 41 41 41 42 42 42 43 43 43 44 44 44 45 45 45 46 46 46 47 47 47 48 48 48 49 49 49 4a 4a 4a 4b 4b 4b 4c 4c 4c 4d 4d 4d 4e 4e 4e 4f 4f 4f 50 50 Data Ascii: GIF89a !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49753	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:04 UTC	818	OUT	POST /index.php? HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive Content-Length: 399 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.logisticsacp.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:04 UTC	399	OUT	Data Raw: 6d 6f 64 65 3d 72 70 7c 65 76 61 6c 5f 6f 6e 5f 63 68 61 6e 67 65 26 66 72 6d 5f 69 64 3d 72 70 7c 6c 6f 67 69 6e 5f 70 72 6f 6d 70 74 26 64 79 6e 5f 63 66 67 5f 69 64 3d 74 72 6c 72 5f 6e 75 6d 5f 63 66 67 5f 63 26 77 68 5f 69 64 5f 66 6c 67 3d 30 26 70 61 73 73 65 64 5f 6d 6f 64 65 3d 72 70 25 37 43 64 65 66 61 75 6c 74 26 66 6f 72 6d 5f 66 69 65 6c 64 73 3d 75 73 72 5f 69 64 25 32 43 75 73 72 5f 70 73 77 64 25 32 43 77 68 5f 69 64 5f 66 6c 67 25 32 43 77 68 5f 69 64 25 32 43 70 61 73 73 65 64 5f 66 6f 72 6d 5f 66 69 65 6c 64 73 25 32 43 70 61 73 73 65 64 5f 6d 6f 64 65 26 5f 5f 6e 63 66 6f 72 6d 69 6e 66 6f 3d 6d 64 77 6c 6a 78 4e 36 42 69 4c 6b 52 33 67 4f 58 5f 78 37 49 6e 71 63 32 77 74 4f 54 49 34 59 72 73 59 57 6f 53 2d 69 53 35 36 64 43 68 34 55 Data Ascii: mode=rp\|eval_on_change&frm_id=rp\|login_prompt&dyn_cfg_id=trlr_num_cfg_c&wh_id_flg=0&passed_mode=rp%7Cdefault&form_fields=usr_id%2Cusr_pswd%2Cwh_id_flg%2Cwh_id%2Cpassed_form_fields%2Cpassed_mode&__ncforminfo=mdwljxN6BiLkR3gOX_x7Inqc2wtOTI4YrsYWoS-iS56dCh4U
2025-03-07 15:01:04 UTC	198	IN	HTTP/1.1 200 OK Cache-Control: private, must-revalidate Pragma: private Content-Type: text/html Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 07 Mar 2025 15:03:55 GMT Connection: close
2025-03-07 15:01:04 UTC	34	IN	Data Raw: 63 66 67 5e 7c 74 72 6c 72 5f 6e 75 6d 3d 5e 7c 5e 7c 5e 7c 63 61 72 63 6f 64 5e 7c 5e 7c 45 4e 44 0a Data Ascii: cfg^\|trlr_num=^\|^\|^\|carcod^\|^\|END

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49752	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:04 UTC	796	OUT	GET /templates/base/images/rp_icon.ico HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.logisticsacp.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:04 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Fri, 21 Apr 2006 23:09:44 GMT Accept-Ranges: bytes ETag: "06c16ad9865c61:0" Date: Fri, 07 Mar 2025 15:03:55 GMT Content-Length: 1386 Connection: close
2025-03-07 15:01:04 UTC	1386	IN	Data Raw: 00 00 01 00 01 00 10 0f 00 00 01 00 08 00 54 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 1e 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 00 01 01 cc 00 02 02 cc 00 02 02 cd 00 03 03 cd 00 04 04 cd 00 05 05 cd 00 0b 0b ce 00 0c 0c ce 00 0d 0d ce 00 0f 0f ce 00 10 10 cf 00 14 14 cf 00 17 17 cf 00 18 18 d0 00 1a 1a d0 00 1c 1c d0 00 1f 1f d1 00 21 21 d1 00 22 22 d1 00 28 28 d2 00 2c 2c d2 00 2e 2e d3 00 33 33 d3 00 3f 3f d5 00 42 42 d6 00 43 43 d6 00 48 48 d6 00 4f 4f d8 00 52 52 d8 00 53 53 d8 00 59 59 d9 00 63 63 da 00 76 76 dd 00 78 78 de 00 80 80 df 00 90 90 e1 00 9a 9a e3 00 a5 a5 e4 00 af af e6 00 b1 b1 e6 00 b8 b8 e7 00 ba ba e7 00 ba ba e8 00 bc bc e8 00 be be e8 00 00 00 00 00 00 00 00 00 00 Data Ascii: T(!!""((,,..33??BBCCHHOORRSSYYccvvxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49754	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:04 UTC	597	OUT	GET /templates/base/images/Login_SEC_Web_BG.jpg HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:04 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Thu, 17 Oct 2024 16:57:17 GMT Accept-Ranges: bytes ETag: "8054389fb520db1:0" Date: Fri, 07 Mar 2025 15:03:55 GMT Content-Length: 46504 Connection: close
2025-03-07 15:01:04 UTC	7973	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 9f 02 71 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF``"ExifMM*CCq"
2025-03-07 15:01:05 UTC	8192	IN	Data Raw: 85 a4 dd ae 9b ba 6d b7 f0 8f 86 7e 1d 45 e3 8f f8 22 be 9f 34 f7 da b5 9c 5a 2f 87 b5 2d 4b c9 b2 b9 30 47 7c f1 b5 d8 48 e7 c0 cb c4 18 87 d9 90 0b 46 9b b2 01 53 ed 9e 3b b2 ff 00 8d 60 6a 8d b7 fe 69 8c 87 3f f7 0b 35 ec 4b fb 20 fc 2f 4d 09 b4 b1 f0 df c0 23 4c 92 75 ba 6b 41 e1 fb 4f 21 a6 55 2a 24 29 e5 ed de 15 98 06 c6 40 62 3a 1a dd d0 fe 08 f8 53 c3 1e 0b ba f0 de 9b e1 9f 0f 69 fe 1d be 59 12 e3 4b b6 d3 a1 86 ca e1 64 1b 64 0f 0a a8 46 0e 38 60 47 23 83 9a cd e5 d3 71 ab 1d 17 b4 82 8f 5d d2 92 be db 7b df 87 9e 9e 96 71 c7 58 4c 55 5f 6b 05 3b 7d 6e 78 95 16 a2 92 53 6a 4e 37 52 77 69 ad ed ae 9b 59 23 f3 db c3 5f 03 75 8b 6f d9 cf 56 f1 9e 95 e1 01 e0 4f 0a 27 c1 09 ac f5 26 f3 6d 50 f8 b6 f9 ec 99 d6 e8 c3 6d 23 82 15 77 37 9b 3e d9 4f 9d Data Ascii: m~E"4Z/-K0G\|HFS;`ji?5K /M#LukAO!U*$)@b:SiYKddF8`G#q]{qXLU_k;}nxSjN7RwiY#_uoVO'&mPm#w7>O
2025-03-07 15:01:05 UTC	2784	IN	Data Raw: a2 31 ea 1e 3a d4 3c 98 19 87 5b 3b 5d c8 a4 77 e6 66 9f 3e bb 16 b8 8f f8 2b 77 8b a6 fd b4 ff 00 e0 a0 ff 00 08 fe 05 d9 cc d2 69 7a 5c a9 75 ab 88 98 e5 0c e4 49 31 3e f1 da 45 b8 7f d7 53 5c 58 cc 0b c4 e3 a3 52 5f 0c 7f 4d 7f 33 f1 5c 46 75 0c 4e 77 2a 17 f7 29 26 e4 fb 28 ab bf c7 43 ee ef f8 21 bf c0 ab 3f d9 7b fe 09 cf e0 bb 6b bb 38 63 d7 3c 60 ad e2 7d 4c ba 0d e5 ae 82 98 41 ee 36 db 2c 0a 41 e8 43 74 af 91 0e ad 6f ff 00 05 19 ff 00 83 8a 7e d1 24 70 de 78 27 e0 64 78 54 c6 23 67 b0 3f 91 27 50 98 9f 42 91 f7 c7 3f 64 7e d1 ff 00 b4 9d 9f ec d1 fb 37 78 a7 c5 4a b0 c3 6f e1 6d 1e 49 6c e0 fb 91 b4 aa 9b 20 88 7a 06 90 c6 83 eb 5f 1e ff 00 c1 bf df 0e a7 f0 7f c0 ef 17 7c 4a d5 0c d3 6b 3f 11 35 56 0b 71 29 dc f3 5b db b3 02 f9 eb 97 9e 49 f3 Data Ascii: 1:<[;]wf>+wiz\uI1>ES\XR_M3\FuNw*)&(C!?{k8c<`}LA6,ACto~$px'dxT#g?'PB?d~7xJomIl z_\|Jk?5Vq)[I
2025-03-07 15:01:05 UTC	8192	IN	Data Raw: 10 fc 42 d1 e6 ff 00 97 ef fb f9 1f 97 5e 47 45 00 7b 44 3e 30 d2 a6 ff 00 98 95 8c 7f f6 f1 1d 5c 86 f2 09 bf d5 cf 1c 9f f5 ce 4a f0 bf f5 55 27 98 ff 00 f3 d3 ff 00 22 50 07 ba 51 5e 17 15 e5 c4 3f ea e7 92 3f fb 69 57 20 f1 86 ab 11 fd dd f5 cd 00 7b 45 15 e4 f0 fc 4e d7 2c c7 fc 7f 79 9f f6 ce ae 43 f1 9b 52 87 fd 64 16 d2 50 07 a6 51 5c 1c 1f 1b 3f e7 be 9b 1f fd fc ab 96 9f 18 34 df f9 69 05 d4 7f f6 ce 3a 00 ec 28 ae 7e cf e2 46 8f 79 fe b2 ef cb ff 00 b6 75 a9 67 e2 9d 36 f3 ee 5f 5b 7f df ca 00 b9 45 14 7f aa a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 0f 01 f0 6f fc 96 8d 3f fe c9 cf 86 3f f4 6e af 5e ed a6 7f c7 b4 75 e1 3e 0d ff 00 92 d1 a7 ff 00 d9 39 f0 c7 fe 8d d5 eb dd b4 cf f8 f6 8e 80 3b 0a 28 a2 80 38 bd 67 fe 3d ab Data Ascii: B^GE{D>0\JU'"PQ^??iW {EN,yCRdPQ\?4i:(~Fyug6_[E(((((o??n^u>9;(8g=
2025-03-07 15:01:05 UTC	8192	IN	Data Raw: 6f d1 6e 3c bb 1f fb 77 8f fd 5f fd fc af 70 f8 4b ac 24 d6 1f d9 b1 c7 a6 fd 8e c2 de 3f b3 cf 61 27 99 6b fb cf dd f9 7f f4 cf fe d9 d0 07 ce fa 6e 99 e2 6f 0d fc 3e f1 06 8f 1a 6a d1 fd aa e2 de 3b 78 23 8f cc 8a 5f de 49 e6 7d 9f cb ff 00 96 75 ed 9f b3 1e 9b 3d 9e 8d e5 bc 7f bc b5 b3 b3 8e 4f 2e 4f 33 ca 93 f7 9f bb f3 3f e5 a5 76 17 7f 0a f4 79 ae a4 f2 e3 b9 b6 b7 97 fe 3e 20 82 e2 48 ed 65 ff 00 b6 71 d4 9e 24 d6 2d 7e 1b f8 37 50 be 8e 38 ed 63 b5 8e 4f 2e 38 ff 00 e5 ac 94 01 e3 7a 0f 97 7b e2 df 12 4f 1c 7f bb 97 50 bc f2 ff 00 ef e5 6e 5a 68 df f2 d2 4a 8f e1 8f 86 ff 00 b3 7c 2f 1c 93 fe f2 e2 eb f7 9e 65 75 10 d9 f9 36 b4 01 97 67 a3 d5 8f b1 ff 00 9c d5 cf 27 c9 b5 a8 fc 8a 00 8e 1b 3f de d6 a7 93 f6 3b 5a 93 4d b3 ff 00 57 52 7f ad 9a 80 Data Ascii: on<w_pK$?a'kno>j;x#_I}u=O.O3?vy> Heq$-~7P8cO.8z{OPnZhJ\|/eu6g'?;ZMWR
2025-03-07 15:01:05 UTC	2816	IN	Data Raw: 3e 26 b8 d2 6c 7c 6d 67 1c 72 5b c7 6f a9 c7 1f fa f8 fc b7 f2 f8 f2 ff 00 75 5f 59 79 14 79 14 01 f3 4f c7 ff 00 f8 25 27 c1 ff 00 da 37 c5 7f 03 75 2d 63 4b bd d3 e3 fd 9d ee e3 b8 f0 8d 8e 95 3c 56 f6 31 47 11 b6 31 db dc 47 e5 fc f6 f1 fd 8e df f7 63 cb ff 00 56 7d 65 ad 2f 87 7f f0 4d 8f 86 7f 0b ff 00 6f 8f 1b 7e d1 da 5d be ad ff 00 0b 0b c7 da 3c 7a 2d fc 6f 79 e6 58 c7 1c 7f 67 fd e4 71 f9 7f 24 92 7d 9e df cc cc 9f f2 cf fe 9a 49 e6 7d 09 e4 51 e4 50 07 c8 ff 00 f0 e6 4f 84 ff 00 f0 bf 3f e1 30 fe d8 f8 99 ff 00 08 ff 00 f6 c7 fc 24 7f f0 af bf e1 28 b8 ff 00 84 2f fb 63 ed 1f 68 fe d1 fe cf ff 00 9f 8f 33 f7 9f eb 3c bf fa 67 5e b1 f0 83 f6 37 f0 cf c1 6f da 93 e2 ff 00 c5 ad 2a fb c4 17 5e 24 f8 d9 fd 8e 35 b8 2f 2e 23 92 c6 d7 fb 2a ce 5b 2b Data Ascii: >&l\|mgr[ou_YyyO%'7u-cK<V1G1GcV}e/Mo~]<z-oyXgq$}I}QPO?0$(/ch3<g^7o^$5/.#[+
2025-03-07 15:01:05 UTC	8192	IN	Data Raw: 92 7f f5 91 7f cb 4f f9 eb 40 1b 10 cd fb a8 fc 89 2a e5 9f fa df de 56 5e 8f 37 9d 6b 1f fc f4 ad 4a 00 b9 47 9f 51 c3 37 93 fe b2 a4 a0 09 28 f3 ea 3f 3e 8a 00 92 8a 8e a4 a0 02 8a 92 8a 00 28 a2 8a 00 28 a2 a4 a0 08 ea 4a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 a4 a2 0a 28 03 c1 7c 1b ff 00 25 a3 4f ff 00 b2 73 e1 8f fd 1b ab d7 bb 69 9f f1 ed 1d 78 4f 83 7f e4 b4 69 ff 00 f6 4e 7c 31 ff 00 a3 75 7a f7 6d 33 fe 3d a3 a0 0e c2 8a 28 a0 0e 2f 59 ff 00 8f 6a f1 35 ff 00 92 99 f1 33 fe c9 fc 9f fa 32 e6 bd b3 59 ff 00 8f 6a f1 35 ff 00 92 99 f1 33 fe c9 fc 9f fa Data Ascii: O@*V^7kJGQ7(?>((J(((((((((((((((((((((\|%OsixOiN\|1uzm3=(/Yj532Yj53
2025-03-07 15:01:05 UTC	163	IN	Data Raw: 3f e1 9c ff 00 ea 62 f8 8d ff 00 85 e6 bb ff 00 c9 95 ef 1f f0 8f cd ff 00 4e ff 00 95 1f f0 8f cd ff 00 4e ff 00 95 00 78 3f fc 33 9f fd 4c 5f 11 bf f0 bc d7 7f f9 32 8f f8 67 3f fa 98 be 23 7f e1 79 ae ff 00 f2 65 7b c7 fc 23 f3 7f d3 bf e5 47 fc 23 f3 7f d3 bf e5 40 1e 53 f0 db e0 66 9b e0 2d 76 f3 50 b7 9f 5a bc d4 2f a3 8e 2b 89 f5 2d 62 f3 52 b9 96 38 fc cf 2e 3f 32 e2 49 3c bf de 49 25 7a 24 30 f9 31 56 84 5e 1b 90 0f f9 67 52 7f c2 3d 37 fc f4 8f f2 a0 0d 8a 28 a2 80 3f ff d9 Data Ascii: ?bNNx?3L_2g?#ye{#G#@Sf-vPZ/+-bR8.?2I<I%z$01V^gR=7(?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:06 UTC	588	OUT	GET /templates/base/images/rp_icon.ico HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:07 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Fri, 21 Apr 2006 23:09:44 GMT Accept-Ranges: bytes ETag: "06c16ad9865c61:0" Date: Fri, 07 Mar 2025 15:03:58 GMT Content-Length: 1386 Connection: close
2025-03-07 15:01:07 UTC	1386	IN	Data Raw: 00 00 01 00 01 00 10 0f 00 00 01 00 08 00 54 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 1e 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 00 01 01 cc 00 02 02 cc 00 02 02 cd 00 03 03 cd 00 04 04 cd 00 05 05 cd 00 0b 0b ce 00 0c 0c ce 00 0d 0d ce 00 0f 0f ce 00 10 10 cf 00 14 14 cf 00 17 17 cf 00 18 18 d0 00 1a 1a d0 00 1c 1c d0 00 1f 1f d1 00 21 21 d1 00 22 22 d1 00 28 28 d2 00 2c 2c d2 00 2e 2e d3 00 33 33 d3 00 3f 3f d5 00 42 42 d6 00 43 43 d6 00 48 48 d6 00 4f 4f d8 00 52 52 d8 00 53 53 d8 00 59 59 d9 00 63 63 da 00 76 76 dd 00 78 78 de 00 80 80 df 00 90 90 e1 00 9a 9a e3 00 a5 a5 e4 00 af af e6 00 b1 b1 e6 00 b8 b8 e7 00 ba ba e7 00 ba ba e8 00 bc bc e8 00 be be e8 00 00 00 00 00 00 00 00 00 00 Data Ascii: T(!!""((,,..33??BBCCHHOORRSSYYccvvxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49758	67.133.132.20	443	4064	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-07 15:01:06 UTC	565	OUT	GET /index.php? HTTP/1.1 Host: www.logisticsacp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=56d1ecr6var68qg774c1vlqmq2; BNES_PHPSESSID=BOQypKZndOl+Oqh6e7NZ//fmYVHpVQiUr5Duic9NYTnYFlc3WxNMad3pCAwwbnzxG2IdrbUiUnE8Uu862s+yXCpxTKMwvK7IoIZvDSXsosE=
2025-03-07 15:01:07 UTC	198	IN	HTTP/1.1 200 OK Cache-Control: private, must-revalidate Pragma: private Content-Type: text/html Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 07 Mar 2025 15:03:58 GMT Connection: close
2025-03-07 15:01:07 UTC	7994	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 20 68 72 65 66 3d 22 74 65 6d 70 6c 61 74 65 73 2f 62 61 73 65 2f 69 6d 61 67 65 73 2f 72 70 5f 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 4c 49 4e 4b 20 52 45 4c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 48 52 45 46 3d 22 74 65 6d 70 6c 61 74 65 73 2f 62 61 73 65 2f 62 61 73 65 2e 63 73 73 22 20 54 59 50 45 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 76 61 72 20 62 6f 6f 6c 5f 69 6d 61 67 65 5f 74 72 75 Data Ascii: <html> <head> <link rel="SHORTCUT ICON" href="templates/base/images/rp_icon.ico"><title>Login</title><LINK REL="stylesheet" HREF="templates/base/base.css" TYPE="text/css"><script type="text/javascript">var bool_image_tru
2025-03-07 15:01:07 UTC	7968	IN	Data Raw: 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 70 44 65 62 75 67 2e 73 68 6f 77 44 65 62 75 67 4d 65 73 73 61 67 65 73 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 5f 66 66 5f 68 65 6c 70 28 65 76 65 6e 74 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 69 72 65 66 6f 78 20 68 61 6e 64 6c 65 73 20 74 68 65 20 46 31 20 6b 65 79 20 64 69 66 66 65 72 65 6e 74 6c 79 2c 20 73 6f 20 68 61 6e 64 6c 65 20 69 74 20 68 65 72 65 2e 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 44 4f 4d 5f 56 4b 5f 46 31 20 3d 3d 20 65 76 65 6e 74 2e 6b 65 Data Ascii: { rpDebug.showDebugMessages(); } return true; } function check_ff_help(event) { // Firefox handles the F1 key differently, so handle it here. if (event.DOM_VK_F1 == event.ke
2025-03-07 15:01:07 UTC	8192	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 64 74 5f 66 6f 72 6d 61 74 3d 27 6d 64 79 79 79 79 27 3b 76 61 72 20 64 74 5f 73 65 70 3d 27 2f 27 3b 76 61 72 20 74 69 6d 5f 66 6f 72 6d 61 74 3d 27 32 34 27 3b 76 61 72 20 74 69 6d 5f 73 65 70 3d 27 3a 27 3b 76 61 72 20 74 69 6d 5f 61 6d 5f 73 74 72 3d 27 61 6d 27 3b 76 61 72 20 74 69 6d 5f 70 6d 5f 73 74 72 3d 27 70 6d 27 3b 76 61 72 20 66 6f 72 6d 5f 6d 6c 73 3d 7b 22 74 74 6c 43 61 6c 65 6e 64 61 72 22 3a 22 43 61 6c 65 6e 64 61 72 22 2c 22 74 69 6d 65 22 3a 22 54 69 6d 65 22 2c 22 65 72 72 49 6e 76 61 6c 69 64 44 61 74 65 46 6f 72 6d 61 74 22 3a 22 49 6e 76 61 6c 69 64 20 64 61 74 65 20 61 6e 64 5c 2f 6f 72 20 74 69 6d 65 20 66 6f 72 6d 61 74 2e Data Ascii: <script type="text/javascript">var dt_format='mdyyyy';var dt_sep='/';var tim_format='24';var tim_sep=':';var tim_am_str='am';var tim_pm_str='pm';var form_mls={"ttlCalendar":"Calendar","time":"Time","errInvalidDateFormat":"Invalid date and\/or time format.
2025-03-07 15:01:07 UTC	8192	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 68 5f 66 6c 67 20 3d 20 72 70 2e 5f 67 65 74 28 22 77 68 5f 69 64 5f 66 6c 67 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 6c 64 5f 77 68 20 3d 20 72 70 2e 5f 67 65 74 28 22 77 68 5f 69 64 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 53 74 72 20 3d 20 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 74 61 74 75 73 20 3d 20 73 74 61 74 75 73 53 74 72 2e 73 70 6c 69 74 28 72 70 2e 4d 55 4c 54 49 5f 52 4f 57 5f 53 45 50 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 5b 30 5d 20 21 3d 20 72 Data Ascii: var wh_flg = rp._get("wh_id_flg"); var fld_wh = rp._get("wh_id"); var statusStr = this.responseText; var status = statusStr.split(rp.MULTI_ROW_SEP); if (status[0] != r
2025-03-07 15:01:07 UTC	3916	IN	Data Raw: 79 20 69 64 3d 22 63 6f 6e 74 65 6e 74 5f 74 61 62 6c 65 5f 62 6f 64 79 5f 63 6f 6e 6e 65 63 74 5f 66 6f 72 6d 5f 22 3e 0a 3c 74 72 3e 0a 3c 74 64 20 73 74 79 6c 65 3d 27 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 27 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 5f 6e 61 6d 65 5f 63 65 6c 6c 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 6f 6e 66 69 67 5f 6d 6f 63 61 5f 68 6f 73 74 22 20 69 64 3d 22 74 69 74 6c 65 5f 63 6f 6e 66 69 67 5f 6d 6f 63 61 5f 68 6f 73 74 22 3e 4d 4f 43 41 20 48 6f 73 74 20 4e 61 6d 65 3a 3c 2f 6c 61 62 65 6c 3e 3c 2f 74 64 3e 0a 3c 74 64 20 6e 6f 77 72 61 70 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 74 65 78 74 22 20 Data Ascii: y id="content_table_body_connect_form_"><tr><td style='vertical-align:top;padding-top:6px;' class="field_name_cell"><label for="config_moca_host" id="title_config_moca_host">MOCA Host Name:</label></td><td nowrap><input type="text" class="text"

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6060, Parent PID: 3492

General

Target ID:	1
Start time:	10:00:40
Start date:	07/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4064, Parent PID: 6060

General

Target ID:	2
Start time:	10:00:44
Start date:	07/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2528,i,7232869568139471451,10120677515761503489,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2556 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6812, Parent PID: 3492

General

Target ID:	4
Start time:	10:00:50
Start date:	07/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.logisticsacp.com/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly